Privacy Policy

Last updated: October 11, 2026

This policy explains what KEDO Labs collects on civic.kedolabs.com, what we do with it, and the choices you have. Plain language, no tricks.

1. What we collect

Enquiry details: if you book a call or email us, we receive the name, email address, organisation and any details you choose to give us. That is all we ask for.
Basic technical data: standard server logs (IP address, browser type, pages requested) for security and site operation.

2. What we don't do

We don't sell, rent, or trade your details.
We don't run third-party advertising trackers on this site.
We don't send drip campaigns. Messages are operational — about your enquiry or your engagement.

3. How your details are used

We use your details to respond to your enquiry, prepare a scoping conversation, and — if you engage us — to run the engagement. Booking uses a hosted calendar service (cal.kedolabs.com); the time and details you enter there are processed by that service so the meeting can be arranged. Email is handled by our mail provider. We don't add you to a marketing list.

4. Retention

Enquiry details are kept while the conversation is active and for a reasonable follow-up period, then deleted on request. Server logs are kept for a short security window and then rotated. If you engage us, the retention and handling of engagement data — including any council data — is governed by the signed agreement and your information governance requirements, mapped during discovery.

5. Security

Data in transit is encrypted (TLS). We apply least-privilege access internally: only team members who need to see a dataset for their work can see it. Assessment and pilot systems run in isolated environments and are decommissioned after the verification window unless you direct otherwise.

6. Your rights

Under the UK GDPR and GDPR you can ask us any time to access, correct, delete, or export the personal data we hold about you. Email [email protected] (general) or [email protected] (privacy & legal) and we'll action it within reasonable time under applicable law.

7. Cookies

This site does not use tracking cookies or third-party analytics scripts. Standard server logs are the only automatic data described in §1.

8. Children

Our services are directed at organisations. We don't knowingly collect data from anyone under 16.

9. Changes to this policy

We may update this policy as the site evolves; changes take effect when posted here with a revised date.

10. Contact

Privacy questions or requests: [email protected] (general) · [email protected] (privacy & legal)