Privacy notice
Last updated: 26 April 2026.
This notice explains how Tinkerbox Labs Ltd (“we”, “us”, “our”) handles personal information collected through this website (tinkerbox-labs.co.uk), in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Who we are
Tinkerbox Labs Ltd is the data controller for personal information collected via this website. Company No. 17180233. Registered office: 167–169 Great Portland Street, 5th Floor, London, W1W 5PF.
What we collect
This is a static website. We do not use analytics, advertising, tracking pixels, or third-party cookies. The site does not set any cookies.
The only personal data we receive is what you choose to send us when you contact us by email (for example, your name, email address, and the contents of your message).
Standard server logs maintained by GitHub Pages, our hosting provider, may record technical information such as your IP address and the time of your request. We do not have direct access to these logs. For details, see GitHub’s privacy statement.
Why we use it & lawful basis
- To respond to your enquiry. Lawful basis: legitimate interests (Art. 6(1)(f) UK GDPR) or, where relevant, taking steps to enter into a contract (Art. 6(1)(b)).
- Hosting and security. Lawful basis: legitimate interests in operating a secure website.
How long we keep it
We keep email correspondence only for as long as needed to deal with your enquiry and any follow-up, and then for a reasonable period for our records (typically up to two years), after which it is deleted.
Sharing
We do not sell your personal information. We use the following processors to run the site and our communications:
- GitHub, Inc. – website hosting (GitHub Pages).
- Our email provider – to receive and reply to messages sent to contact@tinkerbox-labs.co.uk.
These providers may process data outside the UK; where they do, we rely on appropriate safeguards such as the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.
Your rights
Under UK GDPR you have the right to access, rectify, erase, restrict, or object to our processing of your personal data, and the right to data portability. To exercise any of these rights, email contact@tinkerbox-labs.co.uk.
You also have the right to complain to the UK Information Commissioner’s Office at ico.org.uk.
Changes
We may update this notice from time to time. The date at the top of the page indicates when it was last revised.