Privacy notice

Who is responsible

Possible Labs, Inc. is responsible for the personal information described in this notice. For privacy questions or requests, email hello@possible.computer.

Information we collect

When you request access, we collect your email address and record that the request came through the website. If you submit the investor interest form, we also collect your name and any firm details or note you choose to provide. These forms do not request card details.

If you contact us by email, we receive your email address and the information you include in your message. Please provide only what is needed for your enquiry and avoid sending sensitive information unless we have agreed an appropriate way to handle it.

Our hosting provider processes technical information needed to deliver and protect the website, such as IP addresses, request information, browser information and error logs.

Providing information through our forms is voluntary. Without a valid email address, we cannot respond to an access request. Optional firm details and notes are not required.

Why we use information

We use your details to manage access requests, respond to enquiries, follow up on an interest you have expressed and provide related support. Technical information helps us operate the website, troubleshoot problems and prevent abuse.

Where UK or EEA data-protection law applies, we rely on our legitimate interests in responding to enquiries, administering access requests and keeping the website secure. Where your enquiry concerns entering into a contract with you, we may process the information to take the steps you request before that contract. We also process information where necessary to comply with legal obligations.

Where consent is required for a particular communication or use, we ask for it and you may withdraw it. An access request is not consent to unrelated promotional messages.

Service providers and disclosures

We use Vercel to host the website, Supabase to store form submissions, and Google’s Gmail service to receive and manage email. These providers process information needed to supply their services.

We may also disclose relevant information when required by law, to protect legal rights or to obtain professional advice about a specific matter. We limit disclosure to information relevant to that purpose.

International processing

Our providers operate internationally, so information may be processed in the United States and other countries outside your country of residence. Their linked privacy information explains their global operations and transfer arrangements. You can contact us for details about the processing locations and safeguards relevant to your information; applicable data-protection requirements continue to apply.

How long we keep information

We retain access requests while the request remains active and the information is needed to manage it. You can withdraw a request and ask for deletion at any time. Enquiry and support records are kept for the time needed to handle the matter, follow up as requested and resolve any related complaint or dispute.

We may retain relevant records longer where a legal obligation or an unresolved legal claim requires it. We assess retention by the purpose of the record, whether the relationship or enquiry is still active, and applicable legal requirements. A minimal record may be retained to honour a request not to contact you.

Your choices and rights

You can withdraw an access request or ask us to correct or delete your information by emailing hello@possible.computer. Depending on applicable law, you may also have rights to access your information, restrict processing, receive a portable copy or withdraw consent. Withdrawing consent does not affect processing that was lawful before withdrawal.

You may object to processing based on legitimate interests, including the handling of your access request. Tell us what you object to at hello@possible.computer, and we will assess and respond to your request.

We may need to verify your identity before releasing or changing information. We respond within the time required by applicable law and explain any lawful reason that prevents us from fulfilling a request.

You may complain to your local data-protection authority. In the UK, this is the Information Commissioner’s Office. In the EEA, you can contact the authority where you live, work or believe an infringement occurred. You do not have to contact us first to exercise that right.

Cookies and tracking

We do not use advertising trackers on this website. Hosting and security services may process technical data needed to serve pages and prevent abuse. If we introduce optional analytics or advertising technologies, we will explain them and request consent where required before they are used.

Payments and application data

The request-access form does not take payments. If a purchase directs you to a separate payment provider, that provider’s privacy information is shown in the payment flow. Do not email card numbers or payment credentials to us.

This notice covers the website and related enquiries. A separately provided application or research service may involve account data or uploaded material; its relevant privacy information and any agreed data-processing terms will be provided before that information is collected for the service.

Updates

We will update the date on this page when this notice changes and provide additional notice where a material change or the law requires it.