Privacy notice

Who we are

NELLA Labs is part of NELLA Interactive. The legal entity that acts as data controller for a given engagement depends on the region and is confirmed in your contract. Confirming controller and processor roles per region is outstanding work — until it is complete, direct any privacy question to privacy@nellalabs.com and it will reach the right entity.

What we collect

Through this website we collect only what you give us and the minimum needed to operate the service.

• Enquiry and Project Architect content: the answers you provide, your name, role, organisation, country and work email.
• Account data: your email address and authentication state if you sign in to the client portal.
• Files you upload: held in private storage scoped to your project.
• Technical data: IP address, browser and device information present in server logs.
• Consent records: what you agreed to, when, and the version of the wording you saw.

Why we process it

To respond to your enquiry and provide the services you ask for; to operate and secure the platform; to meet legal and contractual obligations; and, where you have separately opted in, to send you marketing communications.

Replying to an enquiry is service communication and is necessary to provide what you asked for. Marketing is separate, optional, and withdrawable at any time without affecting service communication.

Where it is held

Platform data is held in the United Kingdom (London) with our database provider. Our hosting provider operates edge infrastructure worldwide and processes request metadata in the United States. Where a client engagement requires a specific data-residency position, that is agreed as a design constraint at the start of the work.

How long we keep it

Enquiry and project content is retained for the duration of our relationship and for a defined period afterwards, set per category rather than indefinitely. Uploaded files follow the retention agreed for your project. You can request deletion at any time, subject to obligations that require us to retain specific records.

Your rights

Depending on where you are, you may have rights to access, correct, delete, restrict or object to processing of your personal data, and to receive it in a portable form. To exercise any of these, contact privacy@nellalabs.com. You also have the right to complain to your data protection authority — in the UK that is the Information Commissioner’s Office.

Subprocessors

The third parties that process data on our behalf are listed in the Trust Centre, with what each processes and where. The register is updated when it changes.

Review status

This document has been drafted for the platform and is awaiting review by qualified counsel in each jurisdiction we operate in. It describes our intended position accurately but should not yet be relied on as a final legal instrument.