Privacy Policy

Last updated: 4 September 2026

1. Who we are

Iris Labs ("Iris Labs", "we", "us") provides software engineering and AI development services for SMEs. For data-protection purposes, Iris Labs is the data controller.

Contact: sales@irislabs.net

2. What data we collect

We collect the minimal data necessary to run our business and serve our clients, including:

• Contact form submissions — name, email address, company name, and messages submitted via our website forms and discovery call bookings
• Phone number data — collected when you apply for a role, book a call, or otherwise provide it to us directly
• Server logs — our hosting provider automatically collects IP addresses, browser type, and request timestamps for security and performance

3. How we use your data

• To respond to enquiries and schedule calls
• To deliver purchased services (the AI Audit and related engineering work)
• To process job applications submitted through our careers page
• To send information about our services, only if you have opted in

4. Legal basis for processing (GDPR)

• Contractual necessity — to deliver purchased services
• Legitimate interest — to respond to enquiries, process applications, and maintain site security

5. Third-party processors

We share data only with the processors necessary to deliver our services, such as our hosting provider, email and CRM tools, and scheduling software. We do not sell your personal data to any third party.

6. Data retention

We retain personal data only as long as necessary. Contact form submissions and CRM records are retained for up to 24 months after your last interaction with us, then deleted. Server logs are retained for up to 30 days.

7. Your rights

Under GDPR and applicable data-protection laws, you have the right to:

• Access the personal data we hold about you
• Rectify inaccurate or incomplete data
• Request erasure of your data ("right to be forgotten")
• Restrict or object to processing
• Receive your data in a structured, portable format
• Withdraw consent at any time, without affecting prior lawful processing
• Lodge a complaint with a supervisory authority

To exercise these rights, email sales@irislabs.net. We respond within 30 days.

8. International transfers

Where personal data is transferred outside your jurisdiction, we rely on appropriate safeguards such as Standard Contractual Clauses and processor agreements to ensure adequate protection.

9. Changes to this policy

We may update this policy from time to time. Updates will be posted here with a revised "Last updated" date. We encourage you to review this page periodically.

10. Contact

For questions about this policy or your personal data, contact us at sales@irislabs.net.