How we handle personal data

Who we are

Coppice Labs Ltd is the controller for personal data collected through this website.

• Company number: 16755303
• Registered office: 5 Canon Court, Institute Street, Bolton, England, BL1 1PZ
• ICO registration number: ZC115010
• Privacy contact: contact@coppicelabs.com

What we collect

When you use the contact form, we collect the details you choose to submit:

• your name and email address;
• your organisation or product name;
• the business challenges you describe in the enquiry.

If you email us directly, we receive the information included in that email.

Why we use it

We use enquiry information to understand the request, assess whether Coppice Labs may be a suitable fit, reply to you, and keep a short business record of the conversation.

Our lawful basis is legitimate interests for responding to business enquiries and taking steps before entering into a contract where an enquiry may lead to work together.

How long we keep it

If an enquiry does not become client work, we keep it for up to 1 year. If an enquiry becomes client work, relevant records may be kept for longer as part of client, accounting, legal, and operational records.

Who we share it with

We use trusted service providers to run the website and handle enquiries:

• Vercel, for website hosting and serverless functions;
• Resend, for sending contact form emails;
• Cloudflare Turnstile, for bot protection on the contact form;
• PostHog, for optional privacy-minded analytics after you opt in.

We do not sell personal data. We do not send contact form message content, names, email addresses, or organisation names to PostHog.

International transfers

Some providers may process data outside the UK or European Economic Area. Where this happens, we use provider terms and safeguards intended to protect personal data during those transfers.

Cookies and analytics

The site does not use advertising cookies, session replay, heatmaps, or automatic form-field capture.

Analytics is optional. If you accept analytics, PostHog receives a small set of custom events that use route paths and stable identifiers, such as whether a contact form was started or submitted. Analytics does not start unless you opt in.

We store your analytics preference in your browser so the site can remember whether you accepted or rejected analytics. You can change this choice at any time using the analytics settings link in the footer.

Your rights

You can ask us to access, correct, erase, restrict, or object to the way we use your personal data. You can also ask for a copy of data you have provided where data portability applies.

To exercise your rights, email contact@coppicelabs.com.

You also have the right to complain to the Information Commissioner's Office. You can find details at ico.org.uk/make-a-complaint.

Security

We use service providers that support encrypted transmission and controlled access. Contact form submissions are validated server-side, protected with a honeypot and Cloudflare Turnstile, and escaped before being included in HTML email.

Changes

We will update this notice when the site, analytics, processors, or contact flow changes in a way that affects how personal data is handled.