Privacy policy

1Who we are

Uplab is based at 52 Leytonstone Road, London, E15 1SQ. We help IT and digital agencies build a client channel on Upwork.

For the purposes of data protection law we are the controller of the information described below: we decide what is collected and what it is used for. You can reach us at team@uplab.uk about anything on this page.

2What we collect

What you type into the form

Every field in the “Book a call” form is required, so if you submit it we receive all four values. Nothing is collected before you press the button. You can read the whole site without giving us anything.

Alongside those four values we attach three technical details: which button you opened the form from, the address of the page you were on, and the date and time. They tell us where a request came from and in what order requests arrived. We do not attach your IP address to the submission.

What your browser sends on its own

• Google Fonts. The site loads its typeface from Google’s servers, so Google receives your IP address and basic browser information on every visit. This happens on page load, before you interact with anything.
• YouTube. The video testimonials are not loaded until you click one. Nothing reaches YouTube while you simply scroll past them. When you do click, we load the player from youtube-nocookie.com, YouTube’s reduced-tracking host, and from that moment YouTube sees your IP address and that you watched that clip.
• Our host. Like any web server, the service hosting this page keeps standard access logs, which include IP addresses.

3Why we use it

We use what you send us for one thing: to contact you about your agency and the call you asked for, and to prepare that call. That is it.

Our lawful basis is your consent, which you give by submitting the form, and our legitimate interest in responding to a business enquiry you started.

We will not add you to a newsletter, a drip sequence or a bulk mailing list off the back of this form. If we ever want to send you something unrelated to your enquiry, we will ask first.

4Who else sees it

We do not sell your information, and we do not share it for anyone else’s advertising. It reaches a small number of service providers only because they run parts of the plumbing:

• a form-processing service that receives your submission and forwards it to our internal messaging workspace, where our team sees new requests;
• the messaging app you chose (Telegram or WhatsApp), once we reply to you there; the conversation then lives on that platform under its own terms;
• our email provider, if you write to us by email.

5How long we keep it

• If you do not become a client: we keep your enquiry for up to 24 months after our last contact, then delete it. Agencies often come back a year later, and it is easier for both sides if we still have the context.
• If you do become a client: we keep it for as long as we work together, and afterwards for as long as tax and accounting rules require us to keep business records.
• If you ask us to delete it: we do, promptly, and in any case within 30 days. We only hold back what we are legally obliged to keep.

6Your rights

Wherever you live, you can email us and ask us to:

• correct anything that is wrong;
• delete it;
• stop using it, or restrict how we use it;
• send it to you or to someone else in a portable format;
• stop contacting you altogether.

We will not charge you for this and we will not ask why. We aim to answer within a few days and will not exceed one month.

7Cookies and local storage

This site sets no cookies. That is why you were not shown a cookie banner: there is nothing to consent to.

We store exactly one value in your browser’s local storage, a flag called uplab_lead_sent. It records that you already sent us a request, so the site stops offering you the form again. It holds no personal data: not your name, not your contact, just the fact that you have written to us. It never leaves your browser and we cannot read it. Clearing your site data removes it.

Google and YouTube may set their own storage when your browser contacts them, as described in section 2. That is governed by their policies, not ours.

8International transfers

We are a small team and we work with clients across the world, so your details may be accessed from outside your own country. The form submission itself is processed in the European Union. Google and YouTube are US companies operating globally.

Where information leaves the UK, EU or EEA, our providers rely on the standard legal mechanisms for such transfers: adequacy decisions and the European Commission’s Standard Contractual Clauses. If you want the specifics for a particular provider, ask us.

9Security

The site is served over HTTPS, so what you type into the form is encrypted in transit. We keep access to enquiries limited to the people who need it, and the form carries two silent checks that discard automated spam submissions.

We should be straight with you: no method of transmission or storage is perfectly secure, and anyone who promises otherwise is overselling. A practical consequence worth knowing: once we reply on Telegram or WhatsApp, that conversation’s security is in that platform’s hands. Please do not send us passwords, card details or client credentials through either.

10Children

This is a service for businesses. It is not directed at anyone under 16 and we do not knowingly collect their information. If you believe a child has sent us something, tell us and we will delete it.

11Changes

If we change how we handle your information (for example, if we add analytics or start using a CRM), we will update this page and move the “last updated” date at the top. For a change that materially affects people who have already written to us, we will contact them directly rather than quietly editing this page.

12Contact us

Questions, access requests, deletion requests, or anything else on this page: