Privacy policy

Horizon Labs is a trading name of [PLACEHOLDER: registered company name], a company registered in England and Wales with company number [PLACEHOLDER: company number], whose registered office is at [PLACEHOLDER: registered office address].

We are the controller of the personal data described in this policy and are registered with the Information Commissioner's Office (ICO) under registration number [PLACEHOLDER: ICO registration number].

If you have any questions about this policy or how we handle your data, email us at hello@horizonlabs.uk.

We only collect the personal data we need. Depending on how you interact with us, this may include:

• Contact form: your name, company, email address, phone number (optional), website address (optional), the service you're interested in and your message.
• Website health check: your website address and email address.
• Booking a call: your name, email address and any details you add when booking through Calendly.
• Emails, calls and meetings: the information you choose to share with us, and our notes of the conversation.
• Clients: contact details, billing information and the information needed to deliver our services.
• Website usage: anonymous, aggregated statistics about how the site is used (see section 6).

We do not intentionally collect special category data. Please don't include sensitive personal information in messages to us.

• To reply to enquiries and health check requests, and to arrange calls — legitimate interests (responding to people who contact us) or steps taken at your request before entering into a contract.
• To prepare proposals and deliver our services — performance of a contract.
• To send invoices and keep financial records — legal obligation.
• To improve our website using anonymous statistics — legitimate interests.
• To use optional analytics cookies, if enabled — your consent, which you can withdraw at any time.

We will not send you marketing emails unless you have asked to receive them, and every marketing email will include an easy way to unsubscribe.

We never sell your personal data. We share it only with trusted service providers who process it on our behalf, under written contracts that require them to keep it secure:

• Vercel Inc. — website hosting.
• Resend — delivering contact form emails to our inbox.
• Calendly LLC — appointment booking, if you choose to book through it.
• Plausible Analytics — privacy-friendly, cookieless website statistics.
• Google LLC — Google Analytics, only if enabled and only with your consent.
• Our email, accounting and professional advisers, where necessary.

We may also disclose data where required by law or to protect our legal rights.

Some of our providers are based outside the UK. Where personal data is transferred outside the UK, we make sure it is protected by UK adequacy regulations, the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, or another lawful safeguard.

We use Plausible Analytics, which does not use cookies and does not collect personal data; it gives us anonymous, aggregated figures such as page views and referring websites.

If we enable Google Analytics, it will only load after you accept analytics cookies in our cookie banner. See our cookie policy for full details.

When we build AI tools for clients, client data stays in UK or EU data centres wherever possible, is encrypted in transit and at rest, and is never used to train public AI models. These activities are governed by a separate data processing agreement with each client.

The "Ask Horizon" assistant on this website is a demonstration that runs entirely in your browser using pre-written answers; we do not store what you type into it.

• Enquiries that don't lead to work: up to 24 months after our last contact.
• Client records and financial information: six years after the end of the financial year in which our contract ends, to meet legal and tax obligations.
• Anonymous analytics: kept in aggregate form indefinitely, as it does not identify you.

We use appropriate technical and organisational measures to protect your data, including encryption, access controls, multi-factor authentication and reputable, security-certified providers.

Under UK GDPR you have the right to:

• access the personal data we hold about you;
• ask us to correct inaccurate or incomplete data;
• ask us to delete your data;
• ask us to restrict how we use your data;
• object to our use of your data, including for direct marketing;
• ask for your data in a portable format; and
• withdraw consent at any time, where we rely on consent.

To exercise any of these rights, email hello@horizonlabs.uk. We will respond within one month. There is normally no charge.

If you're unhappy with how we've handled your data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated.