Privacy.

INCOGNITO LABS LIMITED is a company registered in England, United Kingdom. We are the data controller for the information described on this page, which means we decide what is collected and why.

For anything to do with your data, write to info@incognitolabs.cc. It reaches us directly.

There is one form on this site, and it is the booking form. When you use it we collect:

• Your name
• Your email address
• Your business name, if you give one — it is optional
• What you tell us is taking the most time, if you fill that box in — it is optional
• The time slot you choose
• Your time zone, which your browser reports automatically so we can show times in it and put the right time in your calendar invitation

That is the whole list. We do not record your IP address, we do not profile you, and we make no automated decisions about you.

This site sets no cookies at all, which is why you have not been asked to dismiss a banner. We use Cloudflare Web Analytics to count visits. It is cookieless, it does not fingerprint your device, and it does not follow you to other sites. What it gives us is aggregate figures — how many people arrived, on what kind of device, from what sort of source — not individuals.

We hold your booking details to arrange and hold the call you asked for. Under Article 6(1)(b) of the UK GDPR, this is processing necessary to take steps at your request before entering into a contract. We rely on our legitimate interests under Article 6(1)(f) for the internal notification that tells us a call has been booked, and for keeping a record of who we have spoken to.

We do not send marketing email. Booking a call does not put you on a list.

We do not sell your data and we do not share it for advertising. It reaches the following services because they are the ones that make the booking work:

• Cloudflare — hosts this site and stores the booking record in its database. Also provides the cookieless analytics described above.
• Resend — sends your confirmation email, and the message that tells us you have booked.
• Google — your booking is written to our internal records and a calendar event is created for the call. You are invited to that event as a guest, which is how the invitation arrives in your calendar. The event carries the details you gave us so whoever takes the call has them.

These providers operate internationally, so your data may be processed outside the United Kingdom. Each is a major provider offering the safeguards required for those transfers under UK data protection law.

We currently keep booking records indefinitely, so that we have a history of who we have spoken to and what was discussed. We do not delete them on a schedule.

You can ask us to erase yours at any time, and unless we are required to keep something for legal or accounting reasons, we will. See your rights below.

We sometimes phone UK businesses, mostly trades, to offer a free website audit. We get the business phone number from its public listing, such as Google or the business’s own website. Before we call, we check the number against the Telephone Preference Service (TPS) and the Corporate TPS, and we do not call numbers registered on either.

When we call you, we hold:

• The business name, and your name if you give it
• The business phone number and website
• Notes from the call
• A recording of the call, which we tell you about at the start. We use it to train ourselves and to check what was agreed
• If you ask for the audit: the email address or WhatsApp number you choose for it, and the time we agree to go through it

We rely on our legitimate interests under Article 6(1)(f) of the UK GDPR to make the call: offering a relevant service to a business, with a TPS check first and an easy way to say no. If you ask for the audit, we use your details to prepare it, send it to you and talk you through it, because you asked us to (Article 6(1)(b)). We do not send marketing messages. You only hear from us about the audit you asked for.

These details reach Twilio (our phone line and call recordings), Google (our lead records), Cloudflare (our do-not-call list), and WhatsApp or your email provider if you choose to get the audit that way. We keep them as described under Retention above, and you can ask us to delete yours at any time.

Don’t want us to call again? Tell us on the call, email info@incognitolabs.cc, or ring back the number we called from and press 1. We add your number to our do-not-call list. We keep only the number on that list, so that we never call it again.

Under UK data protection law you have the right to:

• Ask what we hold about you, and get a copy of it
• Have anything inaccurate corrected
• Have it erased
• Restrict how we use it
• Receive it in a portable, machine-readable format
• Object to us processing it where we rely on legitimate interests

Email info@incognitolabs.cc and we will deal with it within one month. There is no charge.

If you are not happy with how we have handled it, you can complain to the Information Commissioner’s Office, the UK regulator, at ico.org.uk. We would rather you told us first so we can put it right.

If we change what we collect or who it is shared with, we will update this page and the date below. This version was published on 11 October 2026.