Legal
Privacy Policy
Last updated: 11 October 2026
Website guide and conversations
When you send a question in the website guide, we use Web3Forms to email the conversation to DM Labs, including your submitted questions, the guide’s replies, source links, page paths, timestamps and optional reply email. Draft questions are not sent. To write the guide’s reply, your question, the earlier questions and replies in this chat, the page you are on and relevant excerpts from our published website are sent through our server to Anthropic, our AI provider. Your reply email is not sent to Anthropic. If an AI reply is unavailable, the guide shows the closest passage from our website instead. The chat panel is excluded from PostHog capture and session replay.
A copy is kept in this browser tab’s session storage so you can continue across pages. Stored conversations older than 24 hours are discarded when the guide next loads. Start a new conversation to clear the local copy; this does not delete emails already sent. Opening WhatsApp shares a prefilled conversation with WhatsApp; you still press Send there to contact us. Long conversations can be copied instead. Emailed conversations are handled as enquiries under this privacy policy.
Questions about articles
When you submit an article question, Web3Forms processes your display name, email address, question, article URL, language and publication permission, and sends them to DM Labs by email. We use these details to review and respond to your question. Drafts stay in page memory and are not sent until you submit. The form is excluded from PostHog capture and session replay.
Submission does not publish anything. With your permission and after our review, we may publish your display name, question and our reply beneath the article. Your email address is not published. Do not include sensitive information. Private submissions are handled as enquiries under the retention provisions below; Web3Forms also retains submissions according to its service settings. Published questions remain on the article until removed. To withdraw publication permission or request removal, email info@dm-labs.io and include the article URL. Sending a question does not subscribe you to marketing.
1. Data Controller
DM-Labs.io ("we", "us", "our") is the data controller responsible for your personal data. We are a website design and development service for businesses. You can reach us at info@dm-labs.io or via WhatsApp at +357 97472847.
2. Information We Collect
We collect the following categories of personal data:
- Contact information: Name, email address, phone number, and business name - provided when you fill in our contact form or message us on WhatsApp.
- Project information: Details about your business, design preferences, and website requirements - provided during consultations.
- Technical data: Hosting providers receive technical connection data, including your IP address, to deliver and protect the site. With analytics consent, we also collect browser, device and page-use information. PostHog IP-address capture is disabled in our site configuration.
- Payment information: Billing details processed securely through third-party payment providers. We do not store credit card numbers.
For automatic currency display, our hosting provider, Vercel, derives an approximate country from the IP address received when serving your request. Our application uses that country only to choose a display currency and returns only the currency to your browser. This feature does not request GPS or precise device location and does not assess your behaviour or willingness to pay.
3. Legal Basis for Processing
Under the General Data Protection Regulation (GDPR), we process your data on the following legal bases:
- Contractual necessity: To deliver the website design services you have requested.
- Legitimate interest: To respond to enquiries, improve our services, and ensure website security.
- Consent: For analytics cookies and marketing communications (where applicable). You may withdraw consent at any time.
For this limited country-to-currency lookup, we rely on our legitimate interest in presenting prices in a familiar currency (GDPR Article 6(1)(f)). We use only the country information needed for this purpose, without a persistent currency identifier. You may object to this processing by contacting us using the details below; you can also request a written quote in the appropriate currency.
4. How We Use Your Data
- To respond to your enquiries and provide quotes
- To design, develop, and deliver your website project
- To communicate project updates and timelines
- To process payments for our services
- To provide post-launch maintenance and support
- To understand site usage and diagnose errors through consent-based analytics and session replay. Form inputs are masked in replay; analytics identifiers are pseudonymous, not fully anonymous.
5. Data Sharing
We do not sell, rent, or trade your personal data. We may share data with the following categories of recipients, solely to deliver our services:
- Hosting providers: To host and serve your website.
- Payment processors: To securely process payments.
- Analytics providers: PostHog (EU) for analytics, session replay and error tracking, and Vercel Web Analytics for site usage. Both are enabled only with analytics consent.
- Form processors: Web3Forms, to deliver contact form submissions to our email.
- AI provider: Anthropic, to write the website guide’s replies from your question and our published content.
6. Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected. Specifically:
- Contact form submissions: 12 months after last communication
- Client project data: Duration of the project plus 24 months
- Payment records: As required by applicable tax and accounting laws
- Session replay: 30 days under the current project setting. Analytics and error records are retained for usage analysis and fault diagnosis, subject to the provider’s retention settings and the need for those records.
The currency feature creates no separate stored record of your IP address or country and adds no currency cookies or browser storage. The selected currency is held in memory for the current page visit. Hosting providers may separately process connection data in operational and security logs as described in this policy; this feature does not change that processing. If you send an enquiry with a selected plan, the currency and displayed amounts become part of your enquiry and follow the enquiry or client-record retention periods above.
7. Your Rights Under GDPR
As a data subject, you have the following rights:
- Right of access: Request a copy of the personal data we hold about you.
- Right to rectification: Request correction of inaccurate or incomplete data.
- Right to erasure: Request deletion of your personal data ("right to be forgotten").
- Right to restrict processing: Request that we limit how we use your data.
- Right to data portability: Receive your data in a structured, machine-readable format.
- Right to object: Object to processing based on legitimate interest.
- Right to withdraw consent: Withdraw consent for analytics cookies or marketing at any time.
To exercise any of these rights, contact us at info@dm-labs.io. We will respond within 30 days.
8. Cookies
We use essential cookies for site functionality and analytics cookies (with your consent) to understand how visitors use our website. For full details, see our Cookie Policy.
9. International Transfers
Your data may be processed by service providers located outside the European Economic Area (EEA). Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.
10. Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. This includes SSL encryption, secure hosting, and access controls.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.
12. Contact & Complaints
If you have questions about this policy or wish to make a complaint, contact us at info@dm-labs.io. You also have the right to lodge a complaint with a supervisory authority in your country of residence.