Who we are
Lunden Labs Ltd is the controller of personal data described in this notice. We are registered in England and Wales under company number 17409202.
For privacy questions or requests, use the short form on our contact page.
Information we collect
When you use the short contact form, we receive your email address and message. Our business enquiry forms also ask for your company, role, country or region and relevant details about your operating environment, sites, devices or existing systems. We record which form you used.
When you email us directly, we receive your email address, message, ordinary email metadata and anything else you choose to include.
Submitting an enquiry is voluntary. You are not required by law or by a contract to provide these details. Fields marked as required are needed to submit that form; you can use the short contact form if you do not need a business enquiry form. Without enough information or a reply address, we may be unable to answer your request.
Cloudflare may process technical request data needed to deliver and protect the website, such as IP address, browser information, requested URLs and timestamps. Please do not include special category data in an enquiry.
How and why we use information
We use enquiry information to respond to your request, prepare a relevant conversation and manage a possible business relationship. When you contact us on behalf of an organisation, we rely on our legitimate interests in responding to business enquiries and communicating with its representatives.
If you contact us to enter into a contract personally, for example as a sole trader, we rely on taking steps at your request before a contract where that processing is necessary to deal with your request.
We use technical request data to deliver, protect and diagnose the website. We rely on our legitimate interests in keeping the site secure and working properly.
We do not use website information for solely automated decisions that produce legal or similarly significant effects.
Analytics and browser storage
Telemetry is disabled by default. The public site does not use advertising pixels or client-side analytics, and it does not set analytics cookies.
We will update this notice before introducing processing that materially changes this position.
Sharing and international transfers
Cloudflare provides website hosting and network delivery. Resend sends enquiry emails to our business mailbox, where our email provider processes and stores them for us. People authorised to handle your request can access the correspondence. We may also disclose information where the law requires it.
These providers may process information outside the UK. Cloudflare’s published terms describe EU Standard Contractual Clauses with the UK Addendum, or the UK Extension to the EU–US Data Privacy Framework, depending on the customer agreement. Resend’s published terms describe its primary processing in the United States and UK Standard Contractual Clauses for transfers outside the UK.
The arrangement that applies depends on the service agreement and configuration. Use our contact page to request a copy of the applicable safeguards.
Cloudflare data-transfer informationResend Data Processing Addendum
How long we keep information
We delete enquiries that do not lead to a business relationship from our mailbox once the conversation is complete. If a business relationship starts, relevant correspondence forms part of its records. We may retain limited information where required by law or necessary to establish, exercise or defend legal claims.
Technical logs are kept for the period needed to investigate delivery failures, security incidents or abuse, within the retention limits of the services we use. Copies held by our hosting, email delivery and mailbox providers follow their applicable retention and backup arrangements.
Your rights
Depending on the circumstances, UK data-protection law may give you rights to access, correct or erase personal data, restrict processing, receive portable data and object to processing.
Use the short form on our contact page to exercise a right. We may ask for information needed to verify your identity and locate the relevant records.
Your right to object
You can object at any time to processing based on legitimate interests for reasons relating to your particular situation. Contact us and explain the processing you object to. We will assess your request under the applicable data-protection rules.
Questions and complaints
Contact us if you have a concern. You can also complain to the Information Commissioner’s Office, the UK supervisory authority.
Changes to this notice
We may update this notice when the website, enquiry process or legal requirements change. The effective date at the top identifies the current version.