Contents

1. Who we are
2. Scope of this notice
3. What personal data we collect
4. Cookies
5. How we use your data and our legal basis
6. Children’s data
7. Sharing your data
8. International transfers
9. How long we keep your data
10. Your rights
11. Complaints
12. Changes to this notice

1. Who we are

This notice explains how DefenseLabs Limited (“DefenseLabs”, “we”, “us”, “our”) collects and uses personal data when you visit www.defenselabs.com (the “Website”).

Data controller: DefenseLabs Limited

Registered in England and Wales, company number 16486279

Registered office: 85 Great Portland Street, First Floor, London, England, W1W 7LT

Data Protection Officer: Periculo, appointed as our external Data Protection Officer, contactable via the privacy contact details below.

Privacy contact: info@defenselabs.com

2. Scope of this notice

This notice covers personal data collected through the Website itself – for example, through analytics cookies and the contact/enquiry form. It does not cover personal data DefenseLabs processes on behalf of clients, which is instead governed by the relevant client contract and data processing agreement.

3. What personal data we collect

Category	Examples	Source
Usage and analytics data	IP address (truncated/anonymised where configured), device and browser type, pages viewed, time on page, referring site	Automatically, via Google Analytics cookies
Enquiry data	Name, email address, company name, and message content	Submitted directly by you via the Contact Us page

4. Cookies

The Website uses Google Analytics (GA4) to understand how visitors use the site. This sets the following cookies:

Service	Purpose	Typical duration
Google Analytics	Distinguishes unique visitors and remembers session information	Up to 2 years

Full detail on cookies, their purposes, and how to manage your preferences is set out in our separate Cookies Policy.

5. How we use your data and our legal basis

Purpose	Data used	Legal basis (UK GDPR)
Understanding site usage and improving the Website (analytics)	Usage and analytics data	Legitimate interests
Responding to enquiries and Discovery Call requests	Enquiry data	Legitimate interests – responding to business enquiries and operating the Website
Marketing communications, where you’ve opted in	Enquiry data	Consent

6. Children’s data

The Website is aimed at businesses and is not directed at, or intended for use by, children. We do not knowingly collect personal data from children.

7. Sharing your data

We share personal data with a limited number of service providers who process it on our behalf:

• Google Ireland Limited – for website analytics
• monday.com Ltd – to manage and respond to enquiries submitted through the Website
• Anthropic, PBC – an AI assistant our team may use to help manage or respond to enquiries received through the Website

8. International transfers

Some of our service providers, including Google, monday.com, and Anthropic, may process personal data outside the UK. Where this happens, we ensure the transfer is covered by a safeguard recognised under UK data protection law – for example, UK adequacy regulations, the UK-US Data Bridge, or an International Data Transfer Agreement with the recipient. You can request further details, including a copy of the relevant safeguard, using the contact details in section 1.

9. How long we keep your data

Data	Retention period
Analytics cookies	Up to 2 years, or as set by your cookie preferences
Enquiry data (contact form submissions)	2 years from your last contact with us

We keep personal data only for as long as necessary for the purposes set out in this notice.

If your enquiry leads to a client engagement, we continue to hold and use your data under the terms of the relevant client contract and data processing agreement, rather than the retention periods set out above.

10. Your rights

Under UK GDPR, you have the right to:

• Request access to the personal data we hold about you
• Request correction of inaccurate data
• Request erasure of your data, where applicable
• Object to processing based on our legitimate interests, unless we can show compelling grounds to continue
• Object to direct marketing at any time, which we’ll always act on
• Request data portability, where applicable
• Withdraw consent at any time, where processing is based on consent

To exercise any of these rights, contact us at info@defenselabs.com.

11. Complaints

If you’re unhappy with how we’ve handled your personal data, we’d like the chance to address it directly first – contact us at info@defenselabs.com.

You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data protection regulator, at ico.org.uk or on 0303 123 1113.

12. Changes to this notice

We may update this notice from time to time to reflect changes in our data processing activities. The date at the top of this notice shows when it was last updated.

DefenseLabs Limited is a company registered in England and Wales, company number 16486279. Registered office: 85 Great Portland Street, First Floor, London, England, W1W 7LT.