Privacy Policy

1. Introduction

AandA Labs Limited ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website labs.theaandagroup.com or use our services.

We are registered in Scotland, UK (Company Number: SC872002) with our registered office at 27a Roxburgh Street, Grangemouth, Scotland, FK3 9AL.

2. Information We Collect

Information you provide directly:

• Name and contact information (email, phone number)
• Company/organization details
• Payment information (processed securely via third-party providers)
• Messages and correspondence you send us
• Account registration information

Information collected automatically:

• IP address and browser type
• Device information
• Pages visited and time spent on our website
• Referring website addresses
• Cookies and similar tracking technologies

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Process transactions and send related information
• Respond to your comments, questions, and requests
• Send you technical notices, updates, and support messages
• Communicate about products, services, and events
• Monitor and analyze trends, usage, and activities
• Detect, investigate, and prevent fraudulent transactions
• Comply with legal obligations

4. Legal Basis for Processing (GDPR)

Under the UK GDPR, we process your personal data based on:

• Contract: Processing necessary to perform our contract with you
• Legitimate Interests: Processing for our legitimate business interests
• Consent: Where you have given explicit consent
• Legal Obligation: Processing required by law

5. Information Sharing

We do not sell your personal information. We may share your information with:

• Service Providers: Third parties who perform services on our behalf (payment processing, hosting, analytics)
• Legal Requirements: When required by law or to protect our rights
• Business Transfers: In connection with any merger or acquisition
• With Your Consent: When you have given us permission

6. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

• Encryption of data in transit and at rest
• Secure authentication mechanisms
• Regular security assessments
• Access controls and monitoring

7. Your Rights

Under UK GDPR, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your data ("right to be forgotten")
• Restriction: Request limitation of processing
• Portability: Receive your data in a portable format
• Object: Object to certain processing activities
• Withdraw Consent: Withdraw consent at any time

To exercise these rights, contact us at info@theaandagroup.com

8. Cookies

We use cookies and similar technologies to enhance your experience. You can control cookies through your browser settings. Essential cookies are necessary for the website to function properly.

9. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements.

10. International Transfers

Your information may be transferred to and processed in countries outside the UK. We ensure appropriate safeguards are in place for such transfers in compliance with UK GDPR.

11. Children's Privacy

Our services are not directed to individuals under 16. We do not knowingly collect personal information from children under 16. If we become aware of such collection, we will delete the information promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.

13. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data protection rights have been violated: ico.org.uk