Smart Business Labs

Privacy Policy

Last updated: 28 August 2026 · Applies to smartbusinesslabs.co.uk and our agency services

This Privacy Policy explains how Vladislavs Saperins, trading as Smart Business Labs ("we", "us"), based in England, United Kingdom, handles personal data. We are registered with the Information Commissioner's Office under registration number ZC179963 and process personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Scope: this policy covers our website and our services: custom software development, business system integration, and AI visibility audits and monitoring. Our mobile applications have their own policies — see the SoleTax AI Privacy Policy.

1. Data we collect and why

DataSourcePurposeLawful basis
Name, email address, company name, message contentWebsite contact form, email, WhatsApp or social media enquiriesResponding to enquiries, preparing quotes, providing servicesSteps prior to a contract; performance of a contract (Art. 6(1)(b))
Business contact details, project requirements, account credentials you share for service deliveryProvided by you during a projectBuilding and maintaining the automations and AI systems you commissionPerformance of a contract (Art. 6(1)(b))
Invoicing and payment recordsProvided by youBilling, accounting, tax complianceLegal obligation (Art. 6(1)(c))
Aggregated website analytics: page views, referring site, approximate country, device typeCloudflare Web Analytics (cookieless, always on) and — only with your consent — Google Analytics 4 (see section 3)Understanding which pages are read so we know what to improveCloudflare: legitimate interests (Art. 6(1)(f)). Google Analytics: consent (Art. 6(1)(a))

Through this website we do not collect financial account details, payment card numbers or government identifiers.

2. When we act as a processor for your business

When we build or operate automations for your business (for example, an AI receptionist handling your customers' WhatsApp messages), you remain the data controller of your customers' personal data and we act as your data processor. In that case we process such data only on your documented instructions, and a Data Processing Agreement is available on request and forms part of our service contracts where required by Article 28 UK GDPR.

3. Cookies and similar technologies

We use cookies on this website only where you have given consent, in accordance with the Privacy and Electronic Communications Regulations 2003 (PECR) and UK GDPR. No analytics or tracking cookie is set before you choose "Allow analytics" on the banner shown on your first visit. If you decline, or simply ignore the banner, no such cookie is set and the website works exactly as it otherwise would.

We do not use advertising cookies, cross-site tracking, remarketing, or audience-building of any kind. We do not share your data with advertising networks.

Cookies we may set

NameProviderPurposeDurationSet when
_ga Google Analytics 4 Distinguishes one browser from another so that repeat visits are not counted as separate people. Used to produce aggregate reports on which pages are read. 2 years Only after you click "Allow analytics"
_ga_2SQ1VG4S8E Google Analytics 4 Maintains session state so that a single visit spanning several pages is recorded as one session rather than several. 2 years Only after you click "Allow analytics"
sbl-consent Smart Business Labs Local storage entry recording whether you allowed or declined analytics, so we do not ask again on every page. This is strictly necessary to honour your choice and is not used for any other purpose. Until you clear it When you make a choice

What the analytics cookies are used for — and what they are not

Where you consent, Google Analytics 4 tells us how many people visited, which pages they read, roughly where in the world they were, which site or search referred them, and whether they used a phone or a computer. We use this to decide which pages to improve and which to remove. We have enabled IP anonymisation, so your full IP address is not stored. Google Signals, advertising features, remarketing and demographic reporting are switched off.

We do not use these cookies to identify you personally, to build a profile of you, to follow you across other websites, or to make automated decisions about you. Analytics data is retained for 14 months and then deleted automatically.

Lawful basis: your consent, under Regulation 6 PECR for the storage of the cookie, and Article 6(1)(a) UK GDPR for the processing of the resulting data.

Changing your mind

Withdrawing consent is as easy as giving it, and takes effect immediately. Use the button below, or clear cookies and site data for this website in your browser settings.

Withdrawing consent stops any further collection. To ask us to delete analytics data already collected, email us using the address in section 10.

Google as a recipient

Google LLC acts as our processor for analytics and may process data on servers outside the United Kingdom. Those transfers are covered by Google's UK International Data Transfer Addendum and its certification under the UK Extension to the EU–US Data Privacy Framework. Google's own description of how it handles this data is published at business.safety.google/privacy.

4. Service providers (sub-processors)

Where personal data is transferred outside the UK, transfers are protected by the UK International Data Transfer Addendum, the UK Extension to the EU–US Data Privacy Framework, or other safeguards recognised under UK GDPR. We never sell personal data.

5. Data retention

6. Your rights

Under UK GDPR you have the right to access, correct, delete or restrict processing of your personal data, to object to processing based on legitimate interests, and to data portability. Email us to exercise any right — we respond within one month. You may also complain to the Information Commissioner's Office: ico.org.uk.

7. Security

Website traffic is encrypted with TLS. Client credentials are stored securely, shared only with personnel who need them, and access is revoked on project completion. We minimise the personal data held in automation platforms to what each workflow strictly requires.

8. Children

Our website and services are directed at businesses and are not intended for anyone under 18.

9. Changes to this policy

Changes will be posted on this page with an updated date above.

10. Contact

Vladislavs Saperins trading as Smart Business Labs, England, United Kingdom
Email: inquiries@smartbusinesslabs.co.uk
ICO registration number: ZC179963