Privacy policy
This page explains what this website collects, why it collects it, who else sees it, and how you can ask us to delete it. It is written to describe what the site actually does, not what a template says a site might do. If something here is unclear or looks wrong, tell us and we will correct it.
- Effective date
- effective date pending approval
- Site covered
- This website and the contact form on it, including the SeekLab for Schools and SeekLife Creatives pages.
- Responsible entity
- legal entity name pending approval
- Registered address
- registered address pending approval
This page is a working draft
This policy has not yet been through legal review. The technical description below is accurate as of the current version of the site, but the entity name, registered address, effective date, retention period, and the statutory framework that governs this policy are all still being confirmed. Treat the placeholders as open items, not as final wording. Nothing on this page is a contract or legal advice.
Section 1
What is collected
There are only two ways this site collects anything about you. The first is the contact form, which you fill in on purpose. The second is the ordinary technical information any web server receives when a browser asks it for a page.
Information you type into the contact form
The form on the contact page asks for five things. Two are required, three are optional.
- Full name. Required. So we know who we are replying to.
- Work email. Required, and checked for a valid format before it is accepted. It is the address we reply to.
- Organization. Optional. The company, school, or team you are writing on behalf of.
- Organization type. Optional. A single choice from a short list, such as an educational institution or a professional services firm.
- Your message. Optional free text, up to 5,000 characters, describing what is currently constraining progress.
A timestamp is added when the message is sent, so we know when it arrived. Nothing else is added. The message box is free text, so please use your judgement about what goes in it. If you would not put something in a first email to a company you have not worked with yet, do not put it in the form. Do not send financial account details, government identification numbers, health information, or anything about a third party who has not agreed to it.
Technical information the server receives
- Your IP address, when you submit the form. The form endpoint reads the forwarding header on the request and uses the address only to count how many submissions have come from it recently. If more than three arrive from the same address inside a minute, the next one is refused with a message asking you to wait. That counter lives in the memory of the server instance handling the request and is not written to a database or attached to the enquiry we receive.
- Standard request information at our hosting provider. Serving a page produces the usual server records: the address the request came from, the page requested, the time, and the browser user agent string. This is normal web hosting operation and is not used to build a profile of you.
- A hidden anti-spam field. The form contains one extra field that is positioned off the visible page and hidden from assistive technology. People never see it, so it stays empty. Automated scripts fill in every field they find, so anything in it marks the submission as automated and it is discarded without being emailed to us. If you use a password manager or an autofill tool that populates it anyway, your message may be dropped silently, so email us directly if you do not hear back.
What the site does not collect
There are no accounts on this site, so there are no passwords or login records. There is no shop, so no payment details are ever requested or handled. There is no newsletter signup, no chat widget, no session recording, no heatmap tool, and no advertising pixel. We do not buy contact lists, and we do not enrich what you send us with information bought from a third party.
Section 2
Why it is collected
Each item above has one purpose, and it is used for that purpose only.
To reply to you
Your name, email, organization, organization type, and message are used to answer your enquiry and to prepare for a Clarity Session if you book one. The organization type simply helps route the message to whoever knows that field best.
To keep the form usable
The IP-based rate limit and the hidden field exist to stop automated submissions from flooding the inbox. Without them, real enquiries get buried in junk.
To keep the site running
Hosting records exist so the site can be served, faults can be diagnosed, and abuse can be investigated if it happens.
Not for advertising
Nothing you send is sold, rented, or shared with advertisers, ad networks, or data brokers. It is not used to target ads to you anywhere, on this site or off it.
One form reaches SeekLab, SeekLab for Schools, and SeekLife Creatives. Those are branches of the same company rather than separate companies, so your message stays inside one organization no matter which page you arrived from.
Section 3
How long it is kept
- Enquiry emails. Your submission arrives as an email in a SeekLab inbox and stays there while we are in conversation with you, and afterwards for the period we set for enquiry records: retention period pending approval. You can ask us to delete it sooner, and we will.
- Rate-limit records. Roughly one minute. The counter only looks at the last sixty seconds of activity, older entries are ignored and then cleared, and the whole thing disappears when the server instance is recycled.
- Delivery records at our email provider. Held for the provider's own retention window, which is set by them, not by us. See the third-party section below.
- Hosting records. Held for our hosting provider's standard log retention window, again set by them.
- If we start working together. Contract and billing records are kept for as long as accounting and tax rules require, which is a separate obligation from this website policy. That is covered in the engagement agreement rather than here.
Section 4
Who processes it
Your form submission passes through a short chain, and this is the whole chain.
-
01
Your browser sends it to our form endpoint
The submission travels over an encrypted connection to a small function running on our hosting provider's infrastructure. That function checks the required fields, checks the hidden anti-spam field, and applies the rate limit.
-
02
Resend delivers it as an email
The function hands your details to Resend, an email delivery service, which formats them into a message and sends it to a SeekLab inbox. Resend processes the contents in order to deliver the message. It is not given the information for any other purpose.
-
03
A person at SeekLab reads it
Enquiries are read by the people who would work on your engagement. There is no lead scoring tool, no automated qualification, and no automatic decision made about you by software.
What does not happen
Your submission is not copied into an advertising platform, an outreach sequencer, or a list that anyone else can buy. If we later move enquiries into a customer relationship tool, this page will be updated to name it before the change goes live.
Section 5
Third-party services
Some parts of this site are loaded from other companies' servers. Whenever your browser fetches a file from another company, that company receives your IP address, the page you were on, and your browser's user agent string. This happens as a normal part of loading the file. We list every one of them here rather than leaving you to read the page source.
Typefaces
None. Both of our typefaces, Outfit and Google Sans, are served from our own domain, so no font provider receives your IP address. Google Sans is used under the SIL Open Font License. This site previously loaded a typeface from Google Fonts; that request has been removed.
GSAP, from a content delivery network
The scroll and reveal animations use the GSAP library, loaded from Cloudflare's public script network. Cloudflare receives your IP address when that file is fetched. The library runs in your browser and sends nothing back to us.
Tailwind CSS, from its own network
The styling framework is currently loaded from the Tailwind content delivery network, which likewise receives your IP address on each page load. This is a build detail rather than a product decision, and it will move to our own domain when the site is compiled for production.
Hosting and form delivery
The site and its form endpoint run on Vercel, and form submissions are delivered by Resend. Both handle information on our instructions in order to run the site and deliver your message. Each publishes its own privacy terms, and where their servers sit means your submission may be processed outside the country you are writing from.
Client logos and illustrations on this site are image files served from our own domain. Nothing on these pages is embedded from a social network, a video platform, or a map provider, so none of those companies see your visit.
Section 7
Your rights
You can exercise any of the following by writing to us. You do not need to give a reason, and asking will not affect how we treat your enquiry.
Ask what we hold
We will tell you whether we have anything connected to you and, if we do, send you a copy of it.
Correct it
If a detail is wrong, tell us the correct version and we will fix the record.
Request deletion
Ask us to delete your enquiry and we will remove it from our inbox and archives. If we are legally required to keep part of it, such as a billing record for completed work, we will tell you exactly what stays and why.
Withdraw contact consent
Tell us to stop contacting you and we will close the file. We do not run a nurture sequence, so there is no list to leave, but we will confirm the file is closed.
Object or restrict
You can object to how we use your information or ask us to hold it without acting on it while a question is being resolved.
Complain to a regulator
If our answer does not satisfy you, you can take it to the data protection authority where you live. Which authority oversees us, and which statute this policy is written under, are being confirmed in legal review and will be named here.
Children
This site is meant for people contacting us about professional work and is not directed at children. We do not knowingly collect information from anyone under 18. Some of our work is with schools, and in those engagements we work with the institution, not with students. If you believe a child has sent us something through this form, tell us and we will delete it.
Security, stated plainly
The site is served over an encrypted connection, the form endpoint rejects anything that is not a properly formed submission, and text you send is escaped before it is placed in an email so that nothing in it can alter the message structure. Access to the inbox is limited to the people who need it. No system is perfectly secure, and we will not pretend otherwise. If we ever become aware of a breach affecting your information, we will tell you and the relevant authority as required.
Changes to this page
When this policy changes, the effective date at the top changes with it. Substantive changes, such as adding an analytics tool or a new processor, will be described here rather than folded in quietly. Older versions are available on request.
Section 8
How to reach us
Send privacy questions and deletion requests by email, or use the contact form and write "privacy request" in the message so it is routed correctly. Include the email address you originally wrote from, since that is how we find the record.
- contact address pending approval
- Entity
- legal entity name pending approval
- Postal address
- registered address pending approval
We aim to answer privacy requests as quickly as we can, and in any case within the period the applicable law allows. If a request takes longer, we will tell you why before the deadline rather than after it.