Privacy Policy

Last updated: June 2026  ·  Smart Business Labs, United Kingdom

1. Who We Are

Smart Business Labs ("SBL", "we", "us", "our") is the trading name of Vladislavs Saperins, a self-employed sole trader based in the United Kingdom. We design and deploy AI-powered systems for businesses including chatbots, booking automations, and workflow integrations.

For questions about this policy, contact us at: inquiries@smartbusinesslabs.co.uk

2. What Data We Collect

We collect the following types of personal data:

• Contact data — name, email address, phone/WhatsApp number, business name
• Enquiry data — the content of messages you send via our contact form
• Technical data — approximate location (country), browser type and pages visited, collected in aggregate via privacy-friendly analytics
• Communication data — emails, WhatsApp messages exchanged with us

We do not collect sensitive personal data such as health information, financial account details, or government identifiers.

3. How We Collect Data

• When you fill in our contact form
• When you message us via WhatsApp, email, or social media
• Automatically via privacy-friendly, cookieless analytics when you visit our website
• When you become a client and we onboard your business

4. Why We Use Your Data (Legal Basis)

• Legitimate interest — to respond to enquiries and provide our services
• Contract performance — to deliver services you have engaged us for
• Legal obligation — to comply with UK law, including HMRC requirements
• Consent — for marketing communications (you can opt out at any time)

5. How Long We Keep Your Data

• Enquiries not resulting in a contract: 6 months
• Client records: 6 years (required by UK tax law)
• Marketing contacts: until you unsubscribe

6. Who We Share Your Data With

We may share your data with trusted third-party service providers who help us operate our business:

• Formspree — form submission processing
• Google — Google Calendar, Gmail (scheduling & communication)
• Cloudflare — privacy-first, cookieless website analytics
• Meta (Facebook/Instagram) — business communications
• Make.com (Integromat) — workflow automation
• Anthropic — AI processing (Claude API)
• WhatsApp Business — client communications

We do not sell your personal data to any third party.

7. International Data Transfers

Some of our service providers are based outside the UK/EEA. Where we transfer data internationally, we ensure appropriate safeguards are in place in accordance with UK GDPR, including Standard Contractual Clauses or adequacy decisions.

8. Cookies & Analytics

Our website does not use tracking or advertising cookies. We use Cloudflare Web Analytics, a privacy-first, cookieless service that measures aggregate traffic (page views, referrers, approximate country) without setting cookies, collecting personal data, or building a profile of you. Because no tracking cookies are set, no cookie-consent banner is required under UK PECR. Any strictly necessary cookies used purely to deliver the website are exempt from consent.

9. Your Rights Under UK GDPR

You have the right to:

• Access — request a copy of the data we hold about you
• Rectification — ask us to correct inaccurate data
• Erasure — ask us to delete your data ("right to be forgotten")
• Restriction — ask us to limit how we use your data
• Portability — receive your data in a machine-readable format
• Object — object to our use of your data for marketing

To exercise any of these rights, email us at inquiries@smartbusinesslabs.co.uk. We will respond within 30 days.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO): ico.org.uk

10. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

11. AI Systems & Client Data

Where we build AI-powered systems for your business (e.g., chatbots, booking automations), any end-customer data processed by those systems is subject to a separate data processing agreement between SBL and the client business. The client remains the data controller for their end-customers' data.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email to active clients. The "last updated" date at the top of this page will always reflect the most recent version.

13. Contact

Smart Business Labs (trading name of Vladislavs Saperins, sole trader)
14 Avocet Close, Rugby, CV23 0WU, United Kingdom
ICO Registration No: [ICO NUMBER]
inquiries@smartbusinesslabs.co.uk