Privacy notice

This notice covers the website tychelabs.net, run by Tyche Labs Ltd, a company registered in England and Wales (company number 16716814) with its registered office at 71-75 Shelton Street, London WC2H 9JQ. We are the controller of the personal data described here. You can reach us at info@tychelabs.net.

Our iPhone and iPad apps each have their own privacy policy, because they handle data differently and mostly keep it on your device: see Cuefold, Stillpass and Parlour. This page is about the website only.

The enquiry form on /contact-us asks for your name, email address and, if you choose to give them, a phone number and a short description of your project. It also records the closed-list answers you pick: what you need, your budget band, your timing and any monthly plan you are interested in. On the takeover and App Store rescue paths it asks for the App Store link or website address of the app or site you want us to look at.

Alongside the form, the site remembers where your visit came from so we can tell which pages and campaigns lead to real conversations. That is: any UTM tags on the link you arrived on, the referring site, the page you landed on and the last page you read before the form. These are kept only in your browser's sessionStorage (cleared when the tab closes), never in a cookie, and they are sent to us only if you submit the form, as part of the enquiry.

The form also sends the two-letter country code our hosting provider derives from your connection, used only to spot spam, and a timing check that filters out automated submissions.

Your enquiry is emailed to our team and, if it came through the project enquiry form, a confirmation is emailed to you. We use it to answer you, to prepare a call or proposal if you ask for one, and to understand which parts of the site bring enquiries. We do not sell it, use it for advertising or add you to a mailing list without asking.

Enquiries are also written to a private lead log in Google BigQuery so our team can see which have been answered and what stage each conversation has reached. The log holds the same fields as the email plus a stage, a value estimate and notes our team adds.

We rely on legitimate interests (UK GDPR Article 6(1)(f)): you have asked us a question about our services and expect a reply, and we have a legitimate interest in answering it, in keeping a record of the conversation, and in knowing which parts of our website work. We have weighed this against your interests and consider the processing proportionate: it is limited to what you gave us, used for the reason you gave it, and kept for a fixed period. You can object at any time (see Your rights).

Where you go on to become a client, the contract between us becomes the basis for the data we need to do the work.

The website runs on Google Cloud (Cloud Run) in London, and enquiries are sent and received through Google Workspace (Gmail), our email provider. The lead log lives in Google BigQuery in London. Google acts as our processor under its Cloud and Workspace data processing terms. Email may be stored on Google's infrastructure outside the UK; that transfer is covered by Google's standard contractual clauses and the UK International Data Transfer Addendum.

We do not use a third-party CRM, chat widget or marketing automation tool on this site.

Enquiries, the confirmation email and the lead log entry are kept for 24 months from the date you sent them, then deleted. If you become a client, the records that form part of the contract are kept for six years after it ends, as UK tax and limitation rules require. You can ask us to delete an enquiry sooner at any time.

The site sets no cookies until you make a choice on the banner. If you accept, we load Google Analytics 4, which sets its own cookies (_ga and _ga_*) to tell us which pages people read and which forms they finish. IP addresses are anonymised. If you reject, or do nothing, Google Analytics is not loaded and no analytics cookie is set. Your choice is stored in your browser's localStorage, not in a cookie, and you can change it any time from the Cookie settings link in the footer.

The source-of-visit information described above is kept in sessionStorage, which is not a cookie, is never read by anyone but this site, and is sent to us only with an enquiry.

You can ask us for a copy of the personal data we hold about you, ask us to correct or delete it, object to our processing it or ask us to restrict it, and ask for it in a portable form. Email info@tychelabs.net and we will reply within one month. We may ask you to confirm your identity first.

If you are unhappy with how we have handled your data, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113. We would appreciate the chance to put things right first.

We will update this page when the way the site handles data changes, and change the effective date at the top. Substantial changes will be noted here for at least 30 days.