Privacy Policy

Analitica Lab is a boutique creative and marketing studio operating from Canada, with presence in Colombia and the United Kingdom. For anything related to this policy, contact us at hello@analiticalab.com. Analitica Lab is the data controller for the personal information described here.

We collect personal information you choose to share when you:

• Send us a project brief or contact form: your name, email address, the service you are interested in, your message, and optionally your phone number.
• Use our AI service finder: the text you type describing your business and marketing situation, and, if you choose to receive your results by email, your email address.
• Contact us directly: anything you send us by email, phone or WhatsApp. WhatsApp is operated by Meta and subject to its own privacy policy.

Please do not include sensitive personal information (health, financial account numbers, government IDs) in free-text fields; we do not need it to help you.

When you browse the site we receive standard technical data: IP address, browser and device type, pages visited and approximate region, through server logs kept by our hosting provider and through privacy-focused, cookieless analytics (aggregate page views and performance metrics that do not build individual profiles).

Our "Find My Service" assistant sends the text you type to our backend, which uses a third-party AI model provider to interpret your needs and recommend services. This processing happens only to generate your recommendation. We do not use your conversations to train AI models, and we ask you not to submit confidential or sensitive information through the assistant.

• To respond to your inquiries and prepare proposals.
• To provide, operate and improve our services and website.
• To send commercial electronic messages only with your consent, in line with Canada's Anti-Spam Legislation (CASL) and equivalent laws. Every marketing email includes a working unsubscribe.
• To comply with legal obligations and protect our rights.

Where the GDPR or UK GDPR applies, our legal bases are consent, performance of (or steps toward) a contract, and our legitimate interest in operating and promoting our business.

We do not use advertising or cross-site tracking cookies. The site uses your browser's local storage for strictly functional purposes (for example, remembering your service finder session on your own device). Our analytics are cookieless. If we ever introduce cookies that require consent, we will ask for it first.

We never sell your personal information. We share it only with service providers who process it on our behalf under contractual safeguards:

• Website hosting and content delivery (Vercel).
• Backend infrastructure and databases (Supabase).
• AI model providers, for the service finder described above.
• Email and communication tools used to answer you.
• Professional advisors, or authorities where the law requires it.

We operate from Canada, Colombia and the United Kingdom, and our providers may process data in the United States and other countries. Wherever your information travels, we require protections consistent with this policy and applicable law, including recognized transfer safeguards where the GDPR or UK GDPR applies.

We keep personal information only as long as needed for the purposes above: inquiries and finder conversations for up to 24 months after our last contact, and client records for as long as required by contract, tax and legal obligations. Then we delete or anonymize it.

Depending on where you live (including under Canada's PIPEDA, Colombia's Law 1581 of 2012, the EU GDPR and the UK GDPR), you may have the right to access, correct, delete or receive a copy of your personal information, object to or restrict its processing, and withdraw consent at any time.

Write to hello@analiticalab.com and we will respond within the timeframe the applicable law requires. You may also complain to your data protection authority: the OPC in Canada, the SIC in Colombia, the ICO in the UK, or your local EU authority.

We use encryption in transit, access controls and reputable infrastructure providers to protect your information. No system is perfectly secure; if a breach ever affects your data, we will notify you and the relevant authorities as the law requires.

Our website and services are directed to businesses and professionals, not to children. We do not knowingly collect personal information from anyone under 16. If you believe a minor has given us data, contact us and we will delete it.

When we change this policy we will update the date at the top and, for material changes, post a notice on the site. Your continued use after a change means you accept the updated policy.