Privacy Policy

OSP DPG Labs Limited is the data controller for personal data collected through this service. We are based in the United Kingdom. Our registered office is Number 5 The Business Quarter, Eco Park Road, Ludlow, Shropshire, United Kingdom, SY8 1FD and our company number is 17272406.

Contact: hello@dpglabs.ai

When you create an account: your email address, name, organisation, role or job title, account login information and any other information you provide when registering or managing your account.

When you request procurement support: details of your procurement requirements, project information, supplier preferences, messages, correspondence, files or documents you choose to provide, and any business contact information needed to respond to your request.

Automatically: limited technical and usage information needed to operate, secure and maintain the website, such as IP address, browser and device information, login and session records, pages accessed and security logs.

We do not collect or process payment card details. Paid plans are arranged by invoice; no card or banking details pass through this service.

Please do not submit special category personal data, criminal offence data or information about children through the website unless we specifically ask for it and have agreed the basis for processing it.

To create and manage your account. To respond to your enquiries and provide procurement support. To communicate with you about requests, account activity and service updates. To manage usage, security and access controls. To improve the service through aggregated and proportionate usage analysis. To comply with legal obligations and protect our legal rights. We do not sell your personal data to third parties. We do not use your data for advertising, and we do not display third-party advertising in the service.

We may use AI tools to help respond to procurement requests and provide the service. Where we do so, information you submit through the website may be processed by AI service providers on our behalf. We do not use your personal data for advertising, and we do not knowingly submit special category personal data, criminal offence data or children's data to AI tools unless a lawful basis applies and appropriate safeguards are in place.

If you receive optional updates or marketing communications from us, you can unsubscribe at any time by using the unsubscribe link in the message or by contacting us at hello@dpglabs.ai.

Contract performance — processing necessary to provide the service or respond to a request you have made. Legitimate interests — operating, securing and improving the website, managing customer relationships and responding to business enquiries.

Consent — where you have opted in to receive optional updates or marketing communications.

Legal obligation — compliance with applicable laws.

We retain your account data for as long as your account is active. If you delete your account, or ask us to delete it, we will delete or anonymise your personal data within 30 days, except where we are required to retain certain records for legal, regulatory, contractual or financial compliance purposes. Procurement enquiries, correspondence and support records are retained for as long as reasonably necessary to handle the request and manage our business relationship. Usage and security logs are retained for 12 months unless a longer period is required to investigate security, fraud or legal issues.

Your data is stored using Supabase infrastructure hosted in the European Union (Ireland). We use appropriate technical and organisational measures designed to protect personal data, including encryption in transit using TLS, encryption at rest, access controls and security monitoring. No online service can be guaranteed to be completely secure, but we regularly review our security measures.

We use the following third-party services to operate the service: Supabase (database and authentication, hosted in the EU/Ireland); Cloudflare (DNS, security and content delivery); Resend (sending transactional email); and AI service providers, where used to help analyse procurement information, prepare summaries, generate recommendations, draft materials and respond to requests. We may also share limited information with professional advisers, contractors, consultants or potential suppliers where necessary to respond to your procurement request, where you ask us to do so, or where we are legally required to do so. Each provider has its own privacy policy and data-processing terms. We do not send your personal data to third parties for advertising or for any purpose unrelated to operating the service or responding to your request.

Your account data is primarily held within the UK or EEA. Some service providers may process limited personal data outside the UK/EEA. Where personal data is transferred outside the UK/EEA, we rely on appropriate safeguards as required by UK GDPR, such as the UK International Data Transfer Agreement, Standard Contractual Clauses or other lawful transfer mechanisms, to ensure your data remains protected.

We use essential cookies only — those required for authentication, security and session management. We do not use advertising cookies, tracking cookies, social media cookies or third-party analytics cookies. Because we set only strictly necessary cookies, no cookie consent banner is required, but we provide this information so that users understand how the website operates. If we introduce non-essential cookies in future, we will update this policy and obtain consent where required.

We do not make decisions about you based solely on automated processing that produce legal or similarly significant effects. Any procurement recommendations or support provided through the service are intended to assist business decision-making and do not make decisions for you.

Under UK GDPR you have the right to: access the personal data we hold about you; correct inaccurate data; request deletion of your data; object to processing; request restriction of processing; data portability; and withdraw consent where processing is based on consent. To exercise any of these rights, contact us at hello@dpglabs.ai. We will respond within one month, unless a longer period is permitted by law.

This service is intended for business and professional use and is not directed at, or intended for, anyone under the age of 18. We do not knowingly collect personal data from children.

We may disclose your personal data where required to do so by law, or in response to a valid request from a law enforcement body, regulator, or court, where we are satisfied the request is lawful and proportionate.

We may update this policy from time to time. We will notify you by email or through the website of material changes. The current version is always available on the website.

If you have concerns about how we handle your data, please contact us first so we can try to resolve them. You also have the right to complain to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection, at ico.org.uk.