Privacy Policy
Last updated: 8 October 2026
This policy explains how RavoLabs Ltd ("RavoLabs", "we", "us", "our") collects and uses personal data when you visit our website, get in touch with us, or work with us as a customer or supplier. It also explains your rights and how to use them.
Who we are
RavoLabs Ltd is the controller of the personal data described in this policy. We are registered in England and Wales with company number 14772225, and our registered office is 14C Park Avenue, Newcastle, Staffordshire, ST5 8AU. We are registered with the Information Commissioner's Office (ICO) under registration number ZB608031.
You can contact us about anything in this policy by emailing [email protected] or by writing to our registered office.
Visitors to our website
Contact form
When you use the contact form, we collect your name, your company name (if you give it), your email address, the subject you choose and your message. We use this to reply to your enquiry and, if you ask, to prepare a quote. Our lawful basis is our legitimate interest in responding to people who contact us, or taking steps at your request before entering into a contract.
We keep enquiries for up to 24 months, unless you become a customer, in which case the next section applies.
Spam protection
The contact form uses Cloudflare Turnstile to block automated spam. It checks technical signals from your browser before the form can be sent, without you needing to do anything. Our lawful basis is our legitimate interest in keeping the website and our inbox secure. Cloudflare processes this data under its Privacy Policy and the Turnstile Privacy Addendum.
Analytics
If you agree through the cookie banner, we use Google Analytics to see how visitors use the website, such as which pages are popular. It does not run unless you have agreed, and you can withdraw your agreement at any time using the Cookie Preferences link at the bottom of every page. Our lawful basis is your consent. We see only aggregated reports, not information that identifies you. Google processes this data under its Privacy Policy.
Website delivery and security
Like most websites, ours is delivered through Cloudflare, and our servers keep short-term technical logs. These include your IP address, browser type and the pages requested. We use them to deliver the website, keep it secure and fix faults, on the basis of our legitimate interests. Logs are kept for a short period and then deleted.
More detail about cookies is in our Cookies Policy.
Customers, prospective customers and suppliers
When you ask us for a quote, become a customer or supply us with goods or services, we collect:
- names, job titles and organisation details of the people we deal with
- contact details, such as email address, phone number and postal address
- quotations, contracts, invoices and payment records
- correspondence and support requests
- for suppliers, bank details so that we can pay you
| What we use it for | Our lawful basis |
|---|---|
| Preparing quotes and proposals, and entering into contracts | Taking steps at your request before a contract, or our legitimate interests where you act for an organisation |
| Providing our services and support | Performance of a contract, or our legitimate interests where you act for an organisation |
| Invoicing, accounting and tax | Legal obligation |
| Keeping you informed about services similar to those you already use from us | Legitimate interests. You can opt out at any time |
| Establishing or defending legal claims | Legitimate interests |
We only send marketing emails if you have asked for them, or if you are an existing customer and the emails are about services similar to those you already use. Every marketing email includes a way to opt out.
We keep accounting records, including invoices and payment details, for six years from the end of the financial year they relate to, as UK law requires. We keep contracts and related correspondence for six years after the contract ends, in case of a dispute. Details of prospective customers who do not go ahead are kept for up to 24 months.
Data we handle for our clients
When we build, host or support a website or system for a client, we may handle personal data stored in it, such as the client's staff, customers or website visitors. We do this only on the client's instructions, as a processor, under a written contract that requires us to keep the data secure. The client is the controller of that data. If you have a question about it, please contact the organisation concerned.
Who we share personal data with
We do not sell personal data. We share it only where needed with:
- service providers that help us run the business, such as Cloudflare (website delivery and security), our email provider and Google (analytics, with your consent)
- professional advisers, such as accountants or solicitors, when we need their advice
- our bank, to make and receive payments
- HMRC, other public authorities or law enforcement, where the law requires it
Our service providers act on our instructions and must keep the data secure.
Where your data is stored
Our business systems, including our customer records, run on our own servers in the UK. Some of our service providers, including Cloudflare and Google, may process data outside the UK, mainly in the United States. Where they do, the transfer is protected by UK adequacy regulations, including the UK-US data bridge for certified US companies, or by the ICO's International Data Transfer Agreement or Addendum.
How we protect your data
We use access controls, multi-factor authentication on administrative accounts, encrypted connections, regular security updates and backups. Only people who need access to personal data to do their job can see it.
Your rights
Under UK data protection law, you have the right to:
- ask for a copy of the personal data we hold about you
- ask us to correct data that is inaccurate or incomplete
- ask us to delete your data
- ask us to restrict how we use your data
- object to our use of your data where we rely on legitimate interests, and object at any time to direct marketing
- ask for your data in a portable format
- withdraw your consent at any time, where we rely on consent (this does not affect what we did before you withdrew it)
To use any of these rights, email [email protected]. There is normally no charge. We may ask you to confirm your identity, and we will respond within one month. If your request is complex we may need up to two further months, and we will tell you if so.
We do not make decisions about you based solely on automated processing.
If you are unhappy with how we have handled your data, please tell us first so we can try to put it right. You also have the right to complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
Changes to this policy
We will update this policy when the way we use personal data changes. The date at the top shows when it was last revised.