Legal
Privacy Policy
Last updated: 18 October 2026
This notice explains how we handle personal information when you visit switchlabs.tech or contact us. It follows the UK GDPR and Data Protection Act 2018 privacy-notice structure, as amended. You do not need to agree to this notice to exercise your privacy rights.
1. Who we are and how to contact us
Switch Labs Technologies Ltd is the controller of the personal information described in this notice. This means we decide why and how that information is used.
- Company number:
- 17526962
- Registered in:
- England and Wales
- Registered office:
- 66 Paul Street, London, EC2A 4NE, United Kingdom
- Business classification:
- SIC 62012 — Business and domestic software development
For questions or requests about your information, contact us using “Privacy request”, or write to our registered office marked “Privacy”. You do not need to provide an organisation or API-volume estimate.
2. What this notice covers
This notice covers website visitors, people making business enquiries and people contacting us about privacy. It does not describe personal information processed within applications developed for clients, or within their existing systems. Those activities require the applicable project agreements and separate privacy information identifying the relevant responsibilities. Please do not submit identity documents, passwords, verification codes, sensitive personal information or confidential customer records through the inquiry form.
3. Information we collect
You provide information directly when you submit the contact form. We collect:
- Your full name and email address.
- Your organisation for business enquiries. It is not required for privacy requests.
- The inquiry type you select and the details you write about your project or request.
- Your expected monthly API volume, only if you choose to provide it for a SwitchAuth inquiry.
- A submission reference and the date and time the inquiry is recorded.
Inquiry type and any volume estimate are saved with your message. A hidden anti-spam field helps reject automated submissions; it is not saved in the inquiry record. We also handle information you provide in follow-up correspondence. Required fields let us understand and respond to your request; without them the form cannot submit. API volume is optional.
Website infrastructure may process technical connection information, such as an IP address and request or error information, to deliver and protect the site. The provider’s full logging and retention arrangements have not yet been confirmed for this notice.
4. Why we use it and our lawful bases
- Responding to business enquiries: our legitimate interests in answering questions, assessing software development and integration requirements and managing business relationships (UK GDPR Article 6(1)(f)). Where you personally would be a party to a contract, steps you request before entering that contract may instead rely on Article 6(1)(b). An employee contacting us for their organisation is not automatically a party to that contract.
- Handling privacy requests: meeting our data-protection obligations (Article 6(1)(c)).
- Protecting the website and managing disputes: our legitimate interests in preventing spam and misuse, maintaining the site and establishing or defending legal claims (Article 6(1)(f)); a legal obligation applies where the law requires particular processing.
An inquiry does not subscribe you to marketing. We do not rely on consent simply because you submit the form. You can object to processing based on legitimate interests; see your rights below.
6. Where your information is stored
Inquiry records are stored with our cloud infrastructure provider. The company is based in the UK, but our provider may store or process information outside the UK.
Where information is transferred outside the UK, we rely on safeguards recognised under UK data-protection law, such as UK adequacy regulations or standard contractual clauses (the International Data Transfer Agreement or the UK Addendum to the EU standard contractual clauses). You can ask us for more information about these safeguards.
7. How long we keep your information
We keep contact-form inquiries for 12 months from the date they are submitted. After that, they are deleted automatically.
If an inquiry leads to a business relationship, the information we need is kept under the terms of that relationship. We may keep information for longer only where the law requires it, or to establish or defend a legal claim. You can ask us to delete your record sooner. We will do so unless a legal exception applies.
8. How your information is protected
The inquiry submission process validates entries and limits repeated submissions. Direct visitor access to stored inquiries is restricted. These measures help protect the form and its records, but no website or method of transmission can guarantee absolute security. Our wider security practices are described on our Security page. Do not use the form to send production credentials or sensitive verification records.
10. Automated decisions
The inquiry form uses automated validation and anti-spam checks, which may reject a submission. It does not perform identity verification or make decisions with legal or similarly significant effects about you. The application-scope illustration does not make decisions about people. This statement is limited to this website, not applications developed for clients.
11. Your privacy rights
Depending on the circumstances, you can:
- Ask for access to your personal information and a copy of it.
- Ask us to correct inaccurate information or complete missing information.
- Ask for deletion or restriction of processing.
- Object to processing based on legitimate interests.
- Ask for portability where processing is automated and based on consent or a contract.
- Withdraw consent where we rely on it, without affecting earlier lawful processing. Consent is not the basis for ordinary inquiry handling.
Rights are not absolute; legal exceptions may apply. Send a privacy request or write to our registered office. We may need proportionate information to verify your identity; do not send identity documents unless we arrange a suitable way to receive them.
Requests are normally free and must generally be answered without undue delay and within one month. The law allows extensions of up to two further months in certain cases, including complex or multiple requests, with an explanation. Any applicable verification or clarification rules may affect the response period.
12. Concerns and complaints
If you are unhappy with how we handle your information, contact us through the privacy-request option or by post and explain your concern. You also have the right to complain to the UK Information Commissioner’s Office. You do not have to give up that right to contact us.
Make a complaint to the ICO. You can also write to: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, United Kingdom.
13. Changes to this notice
We will update this page when our handling of website information changes. The date at the top identifies the latest revision. Where the law requires us to tell you directly about a change, a website update alone will not replace that notification.
