Privacy Policy

1. Introduction

This Privacy Policy explains how Pineapple Pixel Ltd, trading as Compoundr ("Compoundr", "we", "us", "our"), collects, uses, discloses and protects personal data when you visit compoundlab.ai (the "Site") or contact us. We process personal data in accordance with the UK General Data Protection Regulation, the Data Protection Act 2018 and, where applicable, the EU General Data Protection Regulation (together, "data protection law").

2. Data controller

The data controller for personal data collected through the Site is Pineapple Pixel Ltd, a company registered in the United Kingdom. Enquiries relating to this policy or to your personal data should be directed to dylan@compoundlab.ai.

3. Personal data we collect

3.1 Information you provide. When you submit an enquiry through the Site, we collect the information you enter into the form: your name, business email address, company name, company website (optional), team size, approximate number of client accounts (optional), the service you are interested in, and any additional notes you choose to include. If you contact us by email, we collect your email address and the contents of your correspondence.

3.2 Information collected automatically. The Site uses a privacy-focused, cookie-free analytics service that records aggregated, anonymised usage statistics (such as page views and approximate region). This data does not identify individual visitors and is not used to track visitors across other websites. Our infrastructure providers may process technical data (such as IP address and browser type) transiently in server logs for the purposes of security, fraud prevention and service delivery.

3.3 We do not intentionally collect special category data through the Site, and we ask that you do not submit it.

4. Purposes and lawful bases

We process personal data for the following purposes and on the following lawful bases:

(a) Responding to enquiries. To respond to enquiries submitted through the Site or by email, and to manage the resulting correspondence. Lawful basis: our legitimate interest in responding to business enquiries directed to us.

(b) Providing services. To take steps at your request prior to entering into a contract, and to perform a contract with you. Lawful basis: performance of a contract.

(c) Site operation and security. To operate, secure and improve the Site. Lawful basis: our legitimate interest in maintaining a secure and functional website.

(d) Legal compliance. To comply with legal and regulatory obligations, including tax and accounting requirements. Lawful basis: compliance with a legal obligation.

We do not use personal data collected through the Site for automated decision-making that produces legal or similarly significant effects, and we do not add enquiry contacts to marketing lists.

5. Disclosure of personal data

We do not sell or rent personal data, and we do not share it with third parties for advertising purposes. Personal data may be disclosed to: (a) service providers who process data on our behalf under written contractual terms, limited to the categories of website hosting and infrastructure, analytics, and business email and productivity services; (b) professional advisers where reasonably necessary; and (c) courts, regulators or authorities where disclosure is required by law.

6. International transfers

Some of our service providers may process personal data outside the United Kingdom and the European Economic Area. Where they do, transfers are protected by appropriate safeguards recognised under data protection law, including UK adequacy regulations, the UK International Data Transfer Addendum, or the European Commission's Standard Contractual Clauses.

7. Retention

We retain enquiry data for as long as necessary to deal with your enquiry, and for no longer than 24 months after our last contact, unless the enquiry leads to a client engagement. Where you become a client, we retain records for the duration of the engagement and thereafter for the periods required by applicable law, including tax and accounting legislation. Personal data that is no longer required is deleted or anonymised.

8. Security

We apply appropriate technical and organisational measures to protect personal data, including encryption in transit, access controls, and a policy of collecting only the data we need. No method of transmission or storage is completely secure, but we take reasonable steps to protect personal data against unauthorised access, alteration or loss.

9. Cookies

The Site does not set cookies or use similar tracking technologies. For this reason, no cookie consent mechanism is presented.

10. Your rights

Subject to applicable law, you have the right to: request access to the personal data we hold about you; request rectification of inaccurate data; request erasure; request restriction of processing; object to processing based on legitimate interests; and receive your data in a portable format. Where processing is based on consent, you may withdraw consent at any time.

To exercise any of these rights, contact dylan@compoundlab.ai. We will respond within one month. If you are dissatisfied with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ico.org.uk) or, if you are in the EEA, with your local supervisory authority.

11. Client engagements

Where we provide services to a client organisation, personal data processed in the course of that engagement is governed by the service agreement and data processing agreement entered into with that client, not by this policy. A copy of our standard data processing agreement is available on request.

12. Changes to this policy

We may update this policy from time to time. The current version will always be available at this address, with the date of the most recent revision shown at the top of the page.

13. Contact

Pineapple Pixel Ltd, trading as Compoundr — dylan@compoundlab.ai