The Cube Lab may change this policy from time to time by updating this page. You should check this page from time to time to ensure that you are happy with any changes. This policy is effective from 23 March 2018.
Mr S Marson, director of The Cube Lab is the controller and responsible for your personal data and is collectively referred to as “we”, “us” or “our”.
If you have any questions about this privacy notice, including any requests to exercise your legal rights, please contact us at firstname.lastname@example.org.
What we collect
We may collect the following information:
- Identity data – first and last name, username, marital status
- Contact data – information including postal address, email address and contact number(s)
- Project data – other information relevant to the project we are working on for you
- Transaction data – includes details about payments to and from you
- Technical data – includes your internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access this website
- Usage data – includes information about how you use our website, collected by Google Analytics
- Marketing and Communications data – includes your preferences in receiving marketing from us
How your personal data collected
We use a number of methods to collect data from you, including:
Direct interactions – his may be given by filling in online forms or by corresponding with us by post, phone, email or otherwise.
Automated technologies or interactions – as you browse our website, we may automatically collect Technical Data about your computer or other devices, your browsing actions and pages visited. We collect this personal data by using cookies, and other similar technologies.
Our use of your personal data
We will only use your personal data when the law allows us to. We will use your personal data in the following circumstances:
Where we need to perform the project contract we are about to enter into or have entered into with you
Where we need to comply with a legal or regulatory obligation.
All the ways we plan to use your personal data and which of the legal bases we rely on to do so are noted below. We have also identified what our legitimate interests are where appropriate.
|Purpose/Activity||To register you as a new customer|
|Type of data||(a) Identity (b) Contact|
|Lawful basis for processing||Performance of a contract with you|
|Purpose/Activity||To process and deliver your order including:
(a) Manage payments, fees and charges
(b) Collect and recover money owed to us
|Type of data||(a) Identity, (b) Contact, (c) Financial (d) Transaction|
|Lawful basis for processing||(a) Performance of a contract with you
(b) Necessary for our legitimate interests to recover debts owed to us
|Purpose/Activity||To manage our relationship with you which will include:
(b) Asking you to leave a review
|Type of data||(a) Identity and (b) Contact|
|Lawful basis for processing||(a) Performance of a contract with you
(b) Necessary to comply with a legal obligation
(c) Necessary for our legitimate interests to keep our records updated and to study how customers use our products/services
|Purpose/Activity||To administer and protect our business and our site (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data)|
|Type of data||(a) Identity (b) Contact (c) Technical|
|Lawful basis for processing||(a) Necessary for our legitimate interests for running our business, provision of administration and IT services, network security and to prevent fraud.
(b) Necessary to comply with a legal obligation
|Purpose / Activity||To use data analytics to improve our website, products/services, marketing, customer relationships and experiences|
|Type of data||(a) Technical (b) Usage|
|Lawful basis for processing||Necessary for our legitimate interests to define types of customers for our products and services, to keep our site updated and relevant, to develop our business and to inform our marketing strategy|
What we do with the information we gather
We require this information to understand your needs and provide you with a better service, and in particular for the following reasons:
- Internal record keeping.
- We may use the information to improve our products and services.
- We may periodically send promotional emails about new products, special offers or other information which we think you may find interesting using the email address which you have provided, but only if you have opted in to receive such information.
- From time to time, we may also use your information to contact you for market research purposes. We may contact you by email, phone, mail.
You may receive marketing communications from us if you have requested to receive such information from us and you have not opted out of receiving that marketing.
We do not share your personal data with any third parties for marketing purposes.
You can ask us to stop sending you marketing messages at any by contacting us at email@example.com or by clicking the ‘unsubcribe’ link on any email newsletter. Opting out of receiving these marketing messages will not apply to personal data provided to us as a result of any contract we have entered into with you.
Disclosures of your personal data
We may have to share your personal data with the parties set out below for the purposes set out in the table above.
External Third Parties:
Service providers acting as processors who provide email and/or web-hosting services and various financial services. The hosting and financial partners we use are listed below and may take payments and provide technical support to The Cube Lab.
Freeagent – we retain personal data such as contact details and records of payments made by you
Asana – we only retain notes and details that you send to us by email and connected to a current project
Stripe – we may, from time to time, take credit card payments from you via Stripe
Paypal – we may, if agreed, take payments from you via Paypal
Codeguard – some our website are backed up by Codeguard
Sucuri – some our website are protected and backed up by Codeguard
123-reg – we may use 123-reg to register domain names on your behalf
We use a number of hosting companies and these are listed below. Each of which will keep records of your personal data for the use of hosting your email and/or website:
Tsohost (previously known as Vidahost)
Just Host Me
All personal data that is connected to your project is stored on a third-party, cloud-based system called FreeAgent for storing information and is kept for accounting purposes only. See Freeagent for more information.
Any data collected for specific projects are held on Asana, a cloud-based task management system that adheres to GDPR rules and can be contacted at Asana.
Their privacy details can be viewed on request.
Professional advisers acting as processors or joint controllers including lawyers, bankers, auditors and insurers who provide consultancy, banking, legal, insurance and accounting services.
HM Revenue & Customs, regulators and other authorities acting as processors or joint controllers based in the United Kingdom who require reporting of processing activities in certain circumstances.
If a change happens to our company including new ownership, then the new owners may use your personal data in the same way as set out in this privacy notice.
We require all third parties, including freelance designers and coders, to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.
We are committed to ensuring that your information is secure. In order to prevent unauthorised access or disclosure, we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information we collect from you.
Links to other websites
Our website may contain links to other websites of interest. However, once you have used these links to leave our site, you should note that we do not have any control over that other website. Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites and such sites are not governed by this privacy statement. You should exercise caution and look at the privacy statement applicable to the website in question.
Controlling your personal information
You may choose to restrict the collection or use of your personal information in the following ways:
If you have previously agreed to us using your personal information for direct marketing purposes, you may change your mind at any time by writing to or emailing us at firstname.lastname@example.org.
You are legally entitled to:
Request details of personal information which we hold about you. You are entitled to receive a copy of the personal data we hold about you and to check that we are lawfully processing it. If you would like a copy of the information held on you please write to The Cube Lab Ltd, 14 Castle Street, Exeter, EX4 3PT.
However, we may not always be able to comply with your request for specific legal reasons which will be notified to you, if applicable, at the time of your request.
We will not sell, distribute or lease your personal information to third parties unless we have your permission or are required by law to do so. We may use your personal information to send you promotional information about third parties which we think you may find interesting if you tell us that you wish this to happen.
If you believe that any information we are holding on you is incorrect or incomplete, please write to or email us as soon as possible at the above address. We will promptly correct any information found to be incorrect.
You are entitled to withdraw consent to process your personal dataat any time. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent. If you withdraw your consent, we may not be able to provide certain products or services to you. We will advise you if this is the case at the time you withdraw your consent.
Time limit to respond
We will try to respond to all legitimate requests within 28 days. It may take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will keep you updated.
The information contained in this website is for general information purposes only. The information is provided by The Cube Lab and while we endeavour to keep the information up to date and correct, we make no representations or warranties of any kind, express or implied, about the completeness, accuracy, reliability, suitability or availability with respect to the website or the information, products, services, or related graphics contained on the website for any purpose. Any reliance you place on such information is therefore strictly at your own risk.
In no event will we be liable for any loss or damage including without limitation, indirect or consequential loss or damage, or any loss or damage whatsoever arising from loss of data or profits arising out of, or in connection with, the use of this website.
Through this website, you are able to link to other websites which are not under the control of The Cube Lab. We have no control over the nature, content and availability of those sites. The inclusion of any links does not necessarily imply a recommendation or endorse the views expressed within them.
Every effort is made to keep the website up and running smoothly. However, The Cube Lab takes no responsibility for, and will not be liable for, the website being temporarily unavailable due to technical issues beyond our control.