Privacy Policy

Job applications

When you contact us about a role, we process the contact details, CV, professional profile, work samples and correspondence you provide to assess your experience, communicate with you and manage the recruitment process. Please do not include sensitive personal information or material you are not authorised to share.

Access is limited to people involved in recruitment and the service providers supporting those communications. Where a legal basis is required, we rely on our legitimate interests in assessing applicants, steps towards a contract where applicable, legal obligations or consent where required. Recruitment records are kept for the assessment and follow-up and as needed for applicable legal obligations or claims. Keeping your profile for unrelated future roles is a separate purpose for which we will provide the relevant notice and obtain consent where required. You can contact info@datarootlabs.com to exercise applicable privacy rights.

Information we collect

When you submit a website enquiry form, contact us by email or arrange a meeting, we collect the details you provide. These may include your name, work email, company, role, phone number if provided, and the project information, message or attachments you choose to send. We use these details to assess your request, respond and discuss a potential engagement. Please do not send sensitive personal information or confidential project data before appropriate arrangements are in place.

If you allow analytics, we also keep a short page-visit history in this browser tab for up to four hours. When you submit an enquiry, we attach the recent page paths, referring website when available and visit durations to help our team understand the context. We exclude search text and arbitrary URL parameters. This history is cleared when you decline analytics; enquiries remain available without it. The context is stored with your enquiry and sent to the authorised team by Google Workspace email and a private Signal notification service. It is not sent to Google Analytics together with your contact details.

Our hosting and security services may process technical information, including IP addresses, requested URLs, browser and device information, timestamps and error records, to deliver and protect the website. Optional Google Analytics is loaded only after you allow analytics. Blog search terms are sent to our server to return results and may appear in technical logs.

Optional website analytics

If you allow analytics, we use Google Analytics 4 to understand page visits, navigation and engagement. Google receives technical information such as your IP address, browser and device details, page URLs, referring pages, timestamps and cookie-based identifiers. URLs may include search or campaign parameters. We do not intentionally send the contents of enquiry forms, email addresses, CVs or attachments to Google Analytics.

Analytics is optional and based on your consent. Before you allow it, we do not load the Google Analytics tag or send analytics requests to Google. Declining does not prevent use of the site, enquiries or meeting links. Advertising storage, advertising personalisation and Google signals are disabled in our tag configuration. We do not deploy LinkedIn Insight Tag or Snitcher on this website.

You can change your choice through Cookie settings in the footer. Withdrawing consent stops future collection on this site and removes accessible first-party Google Analytics cookies; it does not automatically erase information already sent to Google. Google processes analytics data under the applicable service terms and data-protection arrangements. See our Cookie Policy for storage and controls.

How we use information

We use information to respond to enquiries, arrange and manage business discussions, provide requested services, operate and secure the website, prevent abuse and comply with legal obligations.

Where a law requires a legal basis, we rely on our legitimate interests in communicating with business contacts and operating a secure website, steps requested before entering a contract or performance of a contract where applicable, legal obligations, or consent where required.

Enquiry forms and communications

Required fields are identified on the relevant form; other information is optional. Without sufficient contact details and information about your request, we may be unable to respond. Submitting an enquiry does not subscribe you to a newsletter or promotional mailing list.

If we offer an optional marketing subscription, we request a separate choice where consent is required. You can withdraw that consent through the unsubscribe option in a message or by contacting us. We do not make optional marketing consent a condition of sending a business enquiry.

Sharing and service providers

Access is limited to authorised personnel and service providers who need the information for these purposes. Provider categories include hosting and infrastructure, security and content delivery, optional analytics, email, scheduling, enquiry management and professional advisers. The website is hosted on DigitalOcean infrastructure in Frankfurt and delivered through Cloudflare, including Cloudflare Tunnel. Cloudflare may also collect browser performance measurements through its automatic beacon to help operate and optimise delivery. Google provides optional Google Analytics; the appointment link opens Google Calendar. We may also disclose information when legally required, to protect rights and security, or as part of a corporate transaction subject to appropriate safeguards.

We do not sell personal information collected through this website or share it for cross-context behavioural advertising. External websites you choose to visit operate under their own privacy policies. YouTube video players connect to YouTube only after you choose to load them; see our Cookie Policy.

Where information is processed

DataRoot Labs Inc. is based in the United States. Information may be processed in the United States and in other countries where our authorised personnel and service providers operate, including European hosting locations. Data protection laws may differ between countries. Where applicable law restricts an international transfer, we will make that transfer only under a permitted mechanism and with the safeguards required by that law. Contact us for information about the safeguards applicable to your information.

Retention and security

We retain information for as long as reasonably necessary for the purpose for which it was collected. Relevant factors include whether an enquiry is ongoing, whether it leads to a business relationship, applicable record-keeping duties, security needs and the resolution of disputes. We then delete or anonymise it, subject to lawful retention requirements and backup cycles.

We use reasonable technical and organisational measures to protect information. No online service or method of transmission can guarantee absolute security.

Your choices and rights

Depending on the law that applies, you may have rights to access, correct, delete or obtain a copy of your information, restrict or object to certain processing, and withdraw consent without affecting earlier lawful processing. To make a request, email info@datarootlabs.com with the subject Privacy request. We may need to verify your identity and will respond within the period required by applicable law.

If we decline a request, you can ask us to review the decision by replying with the subject Privacy appeal. Where applicable, you may also complain to your local data protection authority. We will not discriminate against you for exercising applicable privacy rights.

We do not use advertising tracking, sell personal information or share it for cross-context behavioural advertising on this website. Analytics stays off until you explicitly allow it; you can decline or withdraw through Cookie settings regardless of your browser’s Do Not Track or Global Privacy Control setting.

Children

This website is intended for a professional audience, not for children under 13. We do not knowingly collect their personal information. If you believe a child has provided information, contact us so that we can investigate and remove it where appropriate.

Changes and contact

We may update this policy when our practices or legal obligations change. We will publish the updated policy and date on this page and provide additional notice where required. Privacy enquiries should be addressed to DataRoot Labs Inc. at info@datarootlabs.com.