Data Protection - Data Protection Notice

1) Introduction

This notice summarises how HALLEDERIZ LABS LTD (16815648) complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. It should be read alongside our Privacy Policy, which provides additional detail. Effective date: September 11, 2025.

2) Data Controller Contact Details

HALLEDERIZ LABS LTD is the data controller responsible for personal data processed through our websites, products, and customer engagements. You can reach us using the details below.

• Company name: HALLEDERIZ LABS LTD
• Company number: 16815648
• Registered office: 71-75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ
• Email: hallederizlabs+privacy@gmail.com

3) Personal Data We Collect

Depending on how you interact with us, we may collect the following categories of personal data:

• Identity and contact information (name, job title, organisation, postal address, email, phone number).
• Account and usage data (login credentials, session logs, device identifiers, IP address, preferences).
• Transactional information (invoices, payment references, purchase history handled through secure payment partners).
• Support and communications content (tickets, emails, feedback, survey responses).
• Marketing preferences and analytics derived from cookies or similar technologies where permitted.

We collect information directly from you, automatically when you use our services, and from trusted third parties that you authorise (such as integration partners).

4) Purposes and Legal Bases

We process personal data for the purposes listed below, relying on the associated lawful bases under Article 6 of the UK GDPR:

• Service delivery and contract performance (Article 6(1)(b)): providing our products, managing accounts, and offering support.
• Legitimate interests (Article 6(1)(f)): improving and securing our services, analytics, preventing fraud, developing new features.
• Legal compliance (Article 6(1)(c)): meeting tax, accounting, and regulatory obligations, responding to lawful requests.
• Consent (Article 6(1)(a)): sending marketing communications and using non-essential cookies when you opt in.
• Legal claims (Article 6(1)(f)): establishing, exercising, or defending legal rights.

5) Sharing and International Transfers

We share personal data with carefully selected service providers, including cloud hosting, infrastructure, analytics, communications, payment processing, and professional advisers. Each provider is contractually required to protect the data and process it only on our instructions.

When personal data are transferred outside the United Kingdom, we rely on appropriate safeguards such as adequacy regulations, the UK International Data Transfer Agreement (IDTA), the UK Addendum to the EU Standard Contractual Clauses, or other lawful mechanisms.

6) Retention and Security

We retain personal data only for as long as necessary to fulfil the purposes outlined in this notice and to meet legal or regulatory obligations. When data are no longer required, we delete, anonymise, or securely archive them in line with our retention schedule.

Our safeguards include role-based access controls, encryption, monitoring, business continuity plans, and confidentiality commitments with personnel and processors.

7) Your Rights

Under UK GDPR you may request access to your personal data, ask for corrections or deletion, restrict or object to processing, and request data portability. Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise your rights, email hallederizlabs+privacy@gmail.com or write to 71-75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ. We will respond within one month, subject to any lawful extensions. If you are dissatisfied, you can lodge a complaint with the Information Commissioner's Office (ICO) via https://ico.org.uk.