Legal

Privacy Policy

What we collect, why we collect it, and what you can tell us to do about it.

Last updated 20 August 2026 · Mensah Labs Ltd, company number 16882874

Who we are

Mensah Labs Ltd (company number 16882874), Unit G36, 1 Dock Road, London E16 1AH. We are the data controller for the personal data described in this policy. You can reach us at hello@mensahlabs.io.

What we collect

We collect very little, and only what we need to reply to you or do work you have asked for.

• When you use the enquiry form: your name, email address, and optionally your company, phone number and website address, plus whatever you write in the message field.
• When you email or call us: the contact details you use and the contents of your message.
• When you become a client: the billing and contact details needed to invoice you and run the project, and any access credentials you choose to share with us for the duration of the work.
• When you visit the site: basic analytics about pages viewed and how you arrived, in aggregate. See the Cookie Policy.

We do not buy contact lists, we do not scrape them, and we do not use your data to train anything.

Why we are allowed to hold it

• Legitimate interests — replying to an enquiry you sent us, and running our business.
• Contract — where we need your details to deliver work you have engaged us for.
• Consent — where you have ticked a box asking us to contact you. You can withdraw it at any time.
• Legal obligation — keeping financial records for the period HMRC requires.

How long we keep it

• Enquiries that do not become projects: deleted after 24 months.
• Client project records: kept for the length of the engagement and 6 years after, which is the period we may need them for tax and contractual purposes.
• Access credentials: deleted at handover. We ask you to change any password you shared with us once the project is complete.

Who else sees it

We keep the list short and we do not sell data to anybody. Depending on the project we may use processors for email, file storage, invoicing, analytics and hosting. Where a processor is outside the UK we rely on the UK adequacy regulations or standard contractual clauses. We will tell you which providers are involved in your project if you ask.

Your rights

Under UK GDPR you can ask us to give you a copy of your data, correct it, delete it, restrict what we do with it, or object to us processing it. You can also ask for it in a portable format. Email hello@mensahlabs.io and we will respond within one month.

If you are not happy with how we have handled it, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We would rather you told us first so we can put it right.

Security

Access to client data is limited to the people working on the project. We use two-factor authentication on our accounts and we do not store payment card details at any point.

Changes

If we change this policy we will update the date below. Material changes affecting existing clients will be sent by email.