Privacy Policy

Last updated: 10 October 2026

Cette page n’est disponible qu’en anglais.

1. Introduction

Arieta Labs Ltd (Company Number: 16629785) ("we", "our", or "us") is an AI legal technology company committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.

2. Information We Collect

2.1 Personal Information

We may collect personal information that you voluntarily provide to us when you:

Contact us through our website forms
Subscribe to our newsletter
Request information about our services
Apply for employment opportunities

2.2 Automatically Collected Information

When you visit our website, we may automatically collect certain information about your device, including information about your web browser, IP address, time zone, and some of the cookies that are installed on your device.

3. How We Use Your Information

We use the information we collect for various purposes, including:

To provide, operate, and maintain our services
To improve, personalize, and expand our services
To understand and analyze how you use our services
To communicate with you about our services
To send you marketing and promotional communications (with your consent)
To comply with legal obligations

4. Legal Basis for Processing (UK GDPR)

Under UK GDPR, we will only process your personal data when we have a lawful basis to do so:

Consent: You have given clear consent for us to process your personal data
Contract: Processing is necessary for a contract we have with you
Legal obligation: Processing is necessary for us to comply with the law
Legitimate interests: Processing is necessary for our legitimate interests

5. Questions Sent Through the Lex Atelier Form

When you send a research question through the form on the Lex Atelier page, we collect your name, work email, firm, role (if you give it), country, the jurisdiction you chose, your question, and whether you asked for the monthly digest.

Purpose: to prepare and send you a research memo answering your question, and to follow up with you about Lex Atelier.
Legal basis: preparing the memo is a step you asked us to take; following up is based on our legitimate interest in replying to firms that have shown interest in Lex Atelier. You can object at any time. The monthly digest is sent only if you tick its separate box (consent), and every issue contains an unsubscribe link.
Client information: please do not include client names or anything else that identifies a client. If you have, tell us and we will delete it.
Service providers: Twilio SendGrid (email delivery), Apollo.io (contact management), Anthropic (an AI model that helps draft the memo, which we check before it is sent) and Cloudflare (protection of the form against abuse). Our automation server is hosted by Hetzner in the European Union. Where a provider processes data outside the UK or the EEA, we rely on the safeguards it offers, such as standard contractual clauses or the UK–US data bridge.
Retention: we keep your question and details for as long as we need them to answer and follow up, and no longer than 24 months after our last contact with you, unless you ask us to delete them sooner. Technical records of each form submission are deleted after 14 days.
Nature of the memo: the memo is legal research, not legal advice, and does not create a lawyer–client relationship.

6. People We Contact About Our Products

If we email you about Lex Atelier or our other products without your having contacted us first, we obtained your name, job title, work email address and firm or company from Apollo.io, a business-contact database run by ZenLeads Inc. in the United States.

Purpose: to contact you about our products where they are relevant to your work.
Legal basis: our legitimate interest in telling businesses about services that may be useful to them.
Your right to object: you can object at any time, free of charge, by replying “no” to our email or by writing to hello@arieta-labs.com. We will then stop contacting you and keep only your email address on a suppression list, so that we do not write to you again.
Service provider: we send these emails through Apollo.io, which also keeps its own business-contact database as an independent controller; Apollo’s privacy policy explains how it uses that data. Transfers to the United States rely on the EU–US Data Privacy Framework and its UK Extension (the UK–US data bridge).
Retention: we keep these details for no longer than 12 months after our last message to you, unless you become a client or ask us to delete them sooner.

You also have the rights listed in section 9, including the right to complain to the Information Commissioner’s Office.

7. Information Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information in the following circumstances:

With service providers who assist us in operating our business
When required by law or to protect our rights
In connection with a business transaction (merger, acquisition, etc.)
With your explicit consent

8. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the internet is 100% secure.

9. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

Right to access your personal data
Right to rectification of inaccurate data
Right to erasure ("right to be forgotten")
Right to restrict processing
Right to data portability
Right to object to processing
Right to withdraw consent

10. Cookies

Our website uses cookies to enhance your browsing experience. Cookies are small data files stored on your device. You can control cookies through your browser settings, though this may affect website functionality.

11. International Transfers

Your personal data may be transferred to and processed in countries other than the UK. We ensure appropriate safeguards are in place to protect your data in accordance with UK data protection laws.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

13. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us:

Arieta Labs Ltd

Company Number: 16629785

128 City Road, London, EC1V 2NX, United Kingdom

Email: hello@arieta-labs.com