Legal
Privacy Notice
Last updated: 2026-05-26
Note: This notice has been drafted for plain-language clarity. We recommend a final review by qualified counsel before reliance.
This notice explains what personal data The Margin Labs collects when you visit themarginlabs.com or book a free AI Opportunity Audit, why we collect it, what we do with it, and the rights you have. We aim for plain English and meet the UK GDPR, EU GDPR and California Consumer Privacy Act (CCPA) standards.
Who we are
The Margin Labs is a trading name of Pink Commerce Ltd (company number 15562017, registered in England and Wales). Pink Commerce Ltd is the data controller for any personal information you share with us through this site. Our registered address is Suite 206, Britannia House, 11 Glenthorne Road, London, England, W6 0LH. You can reach our data protection contact at privacy@themarginlabs.com.
What data we collect
When you book a free AI Opportunity Audit we collect your name, work email, company name, and the niche or sector you operate in. If you fill in the optional message field, we collect whatever you share there.
When you simply browse the site, we collect aggregated, cookieless analytics through Plausible — page views, referrers and approximate country, with no individual tracking and no profile of you across sessions or sites.
We do not use advertising trackers, social media pixels, or third-party analytics cookies.
Why we collect it (lawful basis)
Audit booking data: we process this on the basis of legitimate interests (to assess whether we can help you and to conduct the discovery call) and, where you proceed to an engagement, on the basis of contract performance.
Site analytics: legitimate interests — understanding which content helps visitors, in a privacy-preserving way that does not require your consent under UK PECR because Plausible is cookieless.
Marketing follow-up: only with your explicit consent, which you can withdraw at any time.
How we use it
We use your booking information to prepare for and conduct your AI Opportunity Audit call, to deliver the audit document, and to follow up on next steps if you expressed interest.
We do not sell your data. We do not use your data for automated decision-making or profiling that produces legal or similarly significant effects.
Aggregate analytics data is used to improve the site and our content. It cannot identify you.
Who we share it with (sub-processors)
We share data only as necessary to run the service:
Cal.com — booking management. Your name and email are processed by Cal.com when you book a call. Cal.com is GDPR-compliant.
Resend — transactional email. Confirmation and follow-up emails are routed through Resend.
Plausible Analytics — cookieless, privacy-first analytics. No personal data is processed; only aggregated statistics.
[PLACEHOLDER — add any CRM or other sub-processor here.]
All sub-processors are required to process data only on our instructions and to maintain appropriate security.
International transfers
Cal.com and Resend process data in data centres that may be located outside the UK/EEA. Where transfers occur, they are covered by Standard Contractual Clauses (SCCs) or an adequacy decision. [PLACEHOLDER — verify sub-processor transfer mechanisms before publication.]
For California residents, any transfer of your personal information outside the US is governed by applicable privacy law and the sub-processor agreements above.
Your rights (UK and EU)
Under UK GDPR and EU GDPR you have the right to:
Access — request a copy of the personal data we hold about you.
Rectification — ask us to correct inaccurate or incomplete data.
Erasure — ask us to delete your data where there is no compelling reason for us to keep it.
Restriction — ask us to pause processing while a complaint is resolved.
Portability — receive your data in a machine-readable format.
Object — object to processing based on legitimate interests.
To exercise any of these rights, email privacy@themarginlabs.com. We will respond within one calendar month. If you are unhappy with our response you can complain to the Information Commissioner's Office (ico.org.uk).
Your rights (US California — CCPA)
If you are a California resident, the California Consumer Privacy Act gives you the right to:
Know — request disclosure of the categories and specific pieces of personal information we have collected about you, the sources, the purpose, and the categories of third parties we share it with.
Delete — request that we delete your personal information, subject to certain exceptions.
Opt out of sale — we do not sell or share personal information for cross-context behavioural advertising. There is nothing to opt out of.
Non-discrimination — we will not discriminate against you for exercising your CCPA rights.
To submit a verifiable consumer request, email privacy@themarginlabs.com with the subject line "CCPA Request". We will respond within 45 days. For unresolved complaints, you may contact the California Attorney General's office.
Children's data
Our site and services are directed at business professionals. We do not knowingly collect personal data from anyone under the age of 16. If you believe a child has submitted personal data to us, please contact us so we can delete it.
How long we keep data
Audit booking data is retained for [PLACEHOLDER — e.g. 2 years] from the date of the call, or for the duration of any subsequent engagement plus a reasonable retention period thereafter.
Aggregate analytics data is retained by Plausible in anonymised, statistical form indefinitely.
You can request early deletion at any time by emailing privacy@themarginlabs.com.
Security
We implement appropriate technical and organisational measures to protect your personal data — including encrypted connections (HTTPS), restricted access to data and access logs. No system is completely secure; if you have a security concern please contact privacy@themarginlabs.com.
Changes to this policy
We may update this notice from time to time. We will post the updated version here with a revised date. If we make material changes we will notify you by email (if we hold your address) or by a prominent notice on the site.