How we look after the information you share with us.

Ops Lab ("we", "us", "our") is a founder-led venture studio providing coaching, consultancy, learning design and product/technology support. For the purposes of UK data protection law, Ops Lab acts as the data controller for the information you share directly with us.

If you have a question about your data, you can reach us at hello@theopslab.org.

We only collect what we need to work with you. That usually means:

• Contact details — name, email, organisation, role, and anything else you share when you book a discovery call or message us.
• Project information — notes, documents, ideas, business plans, MVP scope, training material or operational details you share with us during our work together.
• Communications — emails, call notes and messages exchanged with us.
• Basic website data — limited technical information (such as device type and pages visited) used to keep the site secure and understand how it is used. We do not use intrusive advertising trackers.

We do not ask for special category data (such as health or biometric information). Please do not share it with us unless it is strictly necessary for the work and we have agreed on it in writing.

Under UK GDPR, we rely on the following lawful bases:

• Contract — to deliver the coaching, consultancy, learning design or product work we have agreed with you.
• Legitimate interests — to respond to enquiries, maintain our records, improve our services, and keep our website and systems secure.
• Consent — where you have opted in (for example, to receive occasional updates). You can withdraw consent at any time.
• Legal obligation — where we are required to keep records for tax, accounting or regulatory reasons.

Much of what clients share with us is early-stage and commercially sensitive. We treat all project information as confidential by default. We will not share, publish or reuse your ideas, materials or business information outside the engagement without your explicit permission.

Where it makes sense, we are happy to sign a mutual NDA before detailed discussions.

We do not sell your data. We only share information with carefully chosen service providers who help us run Ops Lab — for example, email, document storage, scheduling and analytics tools. These providers act as data processors on our behalf and are bound by appropriate contractual and security obligations.

Where data is processed outside the UK, we rely on safeguards recognised by UK data protection law (such as UK adequacy regulations or the International Data Transfer Agreement / Addendum).

We keep your information only for as long as we need it for the purpose it was collected, plus any period required by law (for example, financial records). After that, we delete or anonymise it. You can ask us to delete project information earlier where we are not legally required to keep it.

We use reputable, secured tools to store and process information, restrict access on a need-to-know basis, and follow good security hygiene (strong authentication, encrypted services, careful sharing). No system is ever 100% secure, but we take our duty of care seriously.

Under UK GDPR and the Data Protection Act 2018, you have the right to:

• Access the personal data we hold about you.
• Ask us to correct inaccurate information.
• Ask us to delete your information (where applicable).
• Restrict or object to certain processing.
• Request a copy of your data in a portable format.
• Withdraw consent at any time, where consent was the basis.

To exercise any of these rights, email hello@theopslab.org. We will respond within one month.

If you are not happy with how we have handled your information, please contact us first so we can put it right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator, at ico.org.uk.

Ops Lab provides coaching, venture-building and consultancy support. We do not provide legal, tax, financial or immigration advice. Information shared on our website or in our sessions is for general guidance and should not be relied upon as professional advice in those areas.

We may update this page from time to time to reflect changes in how we work or in the law. The "last updated" date at the top will always show the latest version.