How we handle personal data

Who we are

Coppice Labs Ltd is the controller for personal data collected through this website.

• Company number: 16755303
• Registered office: 5 Canon Court, Institute Street, Bolton, England, BL1 1PZ
• ICO registration number: ZC115010
• Privacy contact: contact@coppicelabs.com

What we collect

When you use the contact form, we collect the details you choose to submit:

• your name and email address;
• your organisation or product name;
• what you tell us about the product, its user experience, growth opportunity, and exit readiness.

If you email us directly, we receive the information included in that email.

Why we use it

We use enquiry information to understand the request, assess whether Coppice Labs may be a suitable fit, reply to you, and keep a short business record of the conversation.

Our lawful basis is legitimate interests for responding to business enquiries and taking steps before entering into a contract where an enquiry may lead to work together.

How long we keep it

If an enquiry does not become client work, we keep it for up to 1 year. If an enquiry becomes client work, relevant records may be kept for longer as part of client, accounting, legal, and operational records.

Who we share it with

We use trusted service providers to run the website and handle enquiries:

• Vercel, for website hosting and serverless functions;
• Resend, for sending contact form emails;
• Cloudflare Turnstile, for bot protection on the contact form;
• PostHog, for optional privacy-minded analytics after you opt in;
• Mux, to provide a video preview when a focus-area video nears view and to deliver it if you press Play. Preview and playback requests may include your IP address and browser information. Optional Mux Data tracking and cookies are disabled on our player.

We do not sell personal data. We do not send contact form message content, names, email addresses, or organisation names to PostHog.

International transfers

Some providers may process data outside the UK or European Economic Area. Where this happens, we use provider terms and safeguards intended to protect personal data during those transfers.

Cookies and analytics

The site does not use advertising cookies, session replay, heatmaps, or contact-form interaction capture.

Analytics is optional and does not start unless you opt in. If you accept, we use PostHog to understand which pages people visit, how they move between them, and whether they contact us.

After you accept, PostHog stores anonymous browser and session identifiers so we can understand visits and movement between pages. We do not create person profiles or send contact-form field values, message content, names, email addresses, or organisation names to PostHog.

If you accept analytics, we also use PostHog to understand which focus-area videos people see and watch, and whether playback fails. You can watch videos without accepting analytics.

We store your analytics preference in your browser so the site can remember whether you accepted or rejected analytics. You can change this choice at any time using the analytics settings link in the footer; rejecting analytics stops collection and disables PostHog persistence.

Your rights

You can ask us to access, correct, erase, restrict, or object to the way we use your personal data. You can also ask for a copy of data you have provided where data portability applies.

To exercise your rights, email contact@coppicelabs.com.

You also have the right to complain to the Information Commissioner's Office. You can find details at ico.org.uk/make-a-complaint.

Security

We use service providers that support encrypted transmission and controlled access. Contact form submissions are validated server-side, protected with a honeypot and Cloudflare Turnstile, and escaped before being included in HTML email.

Changes

We will update this notice when the site, analytics, processors, or contact flow changes in a way that affects how personal data is handled.