NuraLabs

Legal

Privacy Policy

Last updated: 2026-07-17

§ 1. Data controller

The controller of your personal data is NuraLabs (the “Studio”), reachable by email at tom@nuralabz.com.

This policy explains what personal data we process in connection with this website, for what purposes, on what legal basis, and what rights you have.

§ 2. What data we process and why

Contact: if you email us, we process your email address and the content of your message in order to reply and handle your enquiry.

Booking a call: the “Book a call” buttons redirect you to Calendly. Any data you provide there (e.g. name, email, chosen time) is processed to arrange and hold the meeting.

Analytics: only if you accept in the cookie banner, we process aggregated, statistical information about how the site is used, via Google Analytics.

Technical logs: our hosting provider records standard server logs (e.g. IP address, browser type, time of request) to keep the site secure and operational.

§ 3. Legal bases

Consent — Art. 6(1)(a) GDPR — for analytics cookies and any optional tracking. You can withdraw consent at any time.

Steps to enter into a contract — Art. 6(1)(b) GDPR — for handling your project enquiry or booking a call.

Legitimate interest — Art. 6(1)(f) GDPR — for replying to correspondence, ensuring security, and maintaining basic server logs.

§ 4. Cookies and analytics

We do not set marketing or analytics cookies by default. Google Analytics 4 runs only after you accept in the cookie banner. Until then — using Google Consent Mode — analytics storage is set to “denied” and no analytics cookies are stored.

Your consent choice is saved in your browser’s local storage so we don’t ask again on every visit. This value stays on your device and is not shared with anyone.

Once you accept, Google Analytics may set its own cookies (e.g. _ga) to measure aggregated traffic. You can withdraw consent at any time (see § 8).

§ 5. Recipients and international transfers

We use trusted providers who process data on our behalf: Google (Google Analytics), Calendly (scheduling) and Vercel (hosting).

Some of these providers may process data outside the European Economic Area (e.g. in the USA). In such cases the transfer is based on appropriate safeguards, such as the European Commission’s Standard Contractual Clauses or an adequacy decision.

We do not sell your personal data and do not share it with third parties beyond what is described here or required by law.

§ 6. Data retention

Email correspondence: for as long as needed to handle the matter and afterwards for the period required by applicable limitation periods.

Analytics: in aggregated form, according to Google Analytics retention settings (by default up to 14 months).

Consent choice: stored on your device until you clear it; we may ask again periodically.

§ 7. Your rights

You have the right to: access your data, rectify it, erase it, restrict processing, data portability, object to processing, and withdraw consent at any time (without affecting the lawfulness of processing before withdrawal).

You also have the right to lodge a complaint with the supervisory authority — in Poland, the President of the Personal Data Protection Office (Prezes UODO).

To exercise any of these rights, email us at tom@nuralabz.com.

§ 8. Managing your cookie choices

You can accept or decline analytics in the cookie banner shown on your first visit.

To change your decision, clear this site’s data (local storage) in your browser — the banner will appear again on your next visit. You can also block or delete cookies in your browser settings at any time.

§ 9. Changes to this policy

We may update this policy as the site or the applicable law evolves. The “last updated” date above reflects the most recent change.

This policy is provided for transparency and is not legal advice. Please review the text with a lawyer before relying on it.