Privacy Policy

Palla Labs Ltd
Company Number: 17337875
Registered Office: 128 City Road, London, EC1V 2NX, United Kingdom

Last Updated: August 2026

1. Introduction

Palla Labs Ltd ("Palla Labs", "we", "us", or "our") respects your privacy and is committed to protecting your personal data.

This Privacy Policy explains how we collect, use, store, disclose and protect personal information when you use our websites, applications, products, services, communications and other offerings (collectively, the "Services").

We process personal data in accordance with applicable data protection laws, including the UK General Data Protection Regulation ("UK GDPR"), the Data Protection Act 2018, and other applicable privacy legislation.

2. Who We Are

Palla Labs Ltd is the data controller responsible for your personal data unless otherwise stated.

If you have any questions regarding this Privacy Policy or our data practices, you may contact us at:

Palla Labs Ltd
128 City Road
London
EC1V 2NX
United Kingdom

Email: privacy@pallalabs.com

(Replace this email address when your domain is configured.)

3. Personal Data We Collect

Depending on how you interact with us, we may collect:

Identity Information

Name
Username
Account identifiers
Profile information

Contact Information

Email address
Telephone number
Postal address

Technical Information

Device information
Operating system
Browser details
IP address
Unique device identifiers
Diagnostic and crash data

Usage Information

Features used
Interaction data
Preferences
Activity and engagement information

Communications

Messages sent to us
Support enquiries
Survey responses
Feedback submissions

Transaction Information

Purchases
Subscriptions
Payment confirmations

We do not intentionally collect special category data unless it is specifically required for a service and we have a lawful basis for doing so.

4. How We Collect Personal Data

We collect information in the following ways:

Directly From You

When you:

Create an account
Contact us
Complete forms
Subscribe to communications
Use our Services

Automatically

When you use our Services, we may collect technical and usage information through:

Cookies
Similar technologies
Analytics tools
Server logs

From Third Parties

We may receive personal data from:

Authentication providers
Payment providers
Business partners
Analytics providers
Publicly available sources

5. Why We Use Your Personal Data

We use personal data to:

Provide and operate our Services
Create and manage user accounts
Process transactions
Respond to enquiries and support requests
Improve products and services
Monitor performance and security
Detect fraud and misuse
Send service-related communications
Comply with legal obligations
Develop new products and features

6. Legal Bases for Processing

We process personal data where one or more of the following applies:

Contract

Processing is necessary to provide Services requested by you.

Legitimate Interests

Processing is necessary for our legitimate interests, including:

Improving Services
Maintaining security
Preventing fraud
Business administration
Product development

Legal Obligations

Processing is required by applicable laws or regulations.

Consent

Where required by law, we will seek your consent before processing certain information or sending marketing communications.

You may withdraw consent at any time.

7. Marketing Communications

We may send information about products, services, updates and offers where permitted by law.

You can opt out of marketing communications at any time by:

Following unsubscribe instructions; or
Contacting us directly.

We may still send essential service and account-related communications.

8. Data Sharing

We may share personal data with:

Service Providers

Companies that help us operate our Services, including:

Hosting providers
Cloud service providers
Analytics providers
Customer support providers
Payment processors

Professional Advisers

Including:

Accountants
Lawyers
Auditors

Authorities

Where required by law, regulation, court order or lawful request.

Business Transfers

If we sell, merge or reorganise part of our business, personal data may be transferred as part of that transaction.

We do not sell personal data to third parties.

9. International Transfers

Some of our service providers may process personal data outside the United Kingdom.

Where personal data is transferred internationally, we take appropriate steps to ensure adequate safeguards are in place, including:

UK International Data Transfer Agreements
Adequacy regulations
Standard contractual clauses

10. Data Security

We implement appropriate technical and organisational measures designed to protect personal data against:

Unauthorised access
Loss
Misuse
Alteration
Disclosure
Destruction

However, no system can be guaranteed to be completely secure.

11. Data Retention

We retain personal data only for as long as reasonably necessary to:

Provide our Services
Meet legal obligations
Resolve disputes
Enforce agreements
Maintain legitimate business records

Retention periods vary depending on the nature of the information and applicable legal requirements.

12. Your Rights

Subject to applicable law, you may have the right to:

Access your personal data
Correct inaccurate information
Delete personal data
Restrict processing
Object to processing
Receive a copy of your data
Withdraw consent
Lodge a complaint with a supervisory authority

In the United Kingdom, complaints may be made to the Information Commissioner's Office (ICO).

13. Children's Privacy

Our Services are not intended for children under the age of 13 unless expressly stated otherwise.

We do not knowingly collect personal data from children where prohibited by law.

14. Cookies and Similar Technologies

We may use cookies and related technologies to:

Enable functionality
Improve performance
Analyse usage
Remember preferences
Support security

Further information may be provided in a separate Cookie Policy.

15. Third-Party Links

Our Services may contain links to third-party websites, products or services.

We are not responsible for the privacy practices of those third parties and encourage users to review their privacy policies.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

Any changes will be published on our website or through the relevant Service. The updated version will become effective from the date displayed at the top of the policy.

17. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact: