Privacy Policy
This policy explains what personal data The Risk Labs (“we”, “us”) collects through this website, why we collect it, and the choices you have. We keep it deliberately short because the site collects very little.
What we collect
Information you send us. When you use the contact form we collect your name, work email address, company (optional), the service you are interested in (optional) and the message you write. We receive this by email.
Technical data. Our web server records standard technical information such as IP address, browser type and the pages requested. We also use a one-way hash of your IP address for up to 30 seconds to limit repeated form submissions; we do not store the IP address itself for this purpose.
We do not ask for, and you should not send us, passwords, payment card details, health information or other sensitive personal data through the contact form.
How we use it
- To reply to your enquiry and, where you ask, to discuss our services.
- To keep the site secure and to prevent spam and abuse.
- To keep a record of our business correspondence.
- To send you information about our services, events and insights by email. You can unsubscribe at any time using the link in every message, or by contacting us.
We do not use your details for automated decision-making, and we do not sell or rent personal data.
Legal basis
We process the information you send us because you ask us to contact you (consent and steps taken at your request), and for our legitimate interests in running a secure website and responding to business enquiries. We send marketing emails with your consent where the law requires it (for example under the GDPR, the UAE PDPL and India’s DPDP Act), and otherwise on our legitimate interest in telling business contacts about our services, always with an easy way to opt out. Where the UAE Personal Data Protection Law, the EU GDPR or India’s Digital Personal Data Protection Act applies to you, we handle your data in line with the requirements of those laws.
Cookies and tracking
This website does not use advertising, analytics or social-media tracking, and it loads no third-party scripts, fonts or embedded content. WordPress may set strictly necessary cookies, for example when an authorised editor signs in. These are not used to track visitors.
Who sees your data
Your enquiry is read by our team. We use service providers to host this website, to deliver email and to manage our mailing list; they process data only on our instructions. We may disclose information if the law requires it or to protect our rights, and we will not share it with anyone else without a lawful basis.
International transfers
Our service providers may process data outside your country. Where this happens we take steps to make sure your data stays protected as required by applicable law.
How long we keep it
We keep enquiries for as long as needed to respond and to keep a reasonable business record, and then delete or anonymise them. If you receive our marketing emails, we keep your contact details until you unsubscribe or ask us to stop, after which we keep only a record that you opted out so that we do not email you again. Server logs are kept for a short period for security and troubleshooting.
Your rights
Depending on where you live, you may have the right to access the personal data we hold about you, to have it corrected or erased, to object to or restrict its use, to withdraw consent (including to marketing emails, at any time), to receive a copy in a portable format, and to complain to your data protection authority. To use any of these rights, contact us using the details below and we will respond within the time the law requires.
Security
We protect the site with access controls, input validation, spam protection and encrypted connections. No system is completely secure, so please avoid sending confidential information through the contact form.
Children
This website is intended for business users and is not directed at children. We do not knowingly collect data from children.
Changes to this policy
We may update this policy from time to time. The latest version is always on this page, and we will change the date below when we do.
Contact us
Questions or requests about your data: use our Contact page and mention “privacy” in your message.
[CONFIRM] Legal review needed: registered company name and address, a privacy contact or DPO email, the actual retention periods, hosting, email and mailing-list providers, how consent to marketing is recorded, and any other tools added later (analytics, chat, CRM).
Last updated: 18 October 2026