This policy explains what information we collect, how we use it, and the rights you have over your data. We aim to be plain-spoken — if anything here is unclear, please ask.
1. Who we are
The IT Lab Limited ("we", "us", "our") is a company registered in Gibraltar. We provide managed IT, cyber security and related services to small and mid-size businesses across the Rock.
For the purposes of the Gibraltar Data Protection Act 2004 and the UK GDPR as it applies in Gibraltar, The IT Lab is the data controller of personal information about visitors to this website and individuals at our customers and prospects.
2. What information we collect
We collect personal information that you provide directly — for example when you complete a contact form, request a quote, subscribe to our newsletter, or correspond with us by email or phone.
This typically includes:
- Your name, job title and the company you work for
- Your business email address and phone number
- Any information you choose to include in your message
- For customers, technical and account information necessary to deliver our services
We also collect limited technical information automatically when you visit this site — your IP address, browser type, pages viewed and referring URL — through standard server logs and analytics tooling.
3. How we use your information
We use your information to respond to enquiries, deliver and manage the services you have asked us to provide, send service communications, comply with our legal and regulatory obligations, and improve our website.
Where you have opted in, we may also send you occasional updates about our services or relevant content. You can unsubscribe at any time using the link in any marketing email.
4. Legal bases for processing
We rely on the following legal bases under data protection law:
- Contract — to deliver services you have engaged us for
- Legitimate interests — to respond to enquiries, secure our systems, and run our business
- Consent — for optional marketing communications
- Legal obligation — to meet tax, accounting and regulatory requirements
5. Sharing your information
We do not sell your personal information. We share it only with trusted service providers who help us deliver our services — for example, Microsoft for cloud hosting and productivity, Sophos for endpoint protection, and our accountants for billing.
Where data is transferred outside Gibraltar or the UK, we ensure appropriate safeguards (such as Standard Contractual Clauses or adequacy decisions) are in place.
6. How long we keep your information
We retain personal information only for as long as necessary to provide our services, meet our legal obligations, and resolve any disputes. Contact form submissions are typically retained for two years; customer records are kept for the duration of the engagement plus six years to satisfy accounting requirements.
7. Your rights
You have the right to access, correct, delete, restrict or object to the processing of your personal information, and the right to data portability. You also have the right to withdraw consent for any processing based on consent, and to lodge a complaint with the Gibraltar Regulatory Authority.
To exercise any of these rights, email hello@itlab.gi. We will respond within one month.
8. Security
We protect your information using technical and organisational measures appropriate to the risk — including encryption in transit and at rest, multi-factor authentication on administrative accounts, regular access reviews, and staff training. As a cyber security firm, we hold ourselves to the same standards we ask of our clients.
9. Cookies
This website uses a small number of strictly necessary cookies to function correctly. Optional analytics cookies are loaded only with your consent through the banner shown on your first visit. You can change your cookie preferences at any time using the link in the footer.
10. Changes to this policy
We may update this privacy policy from time to time. When we do, we will revise the "Last updated" date above. Material changes will be communicated to customers and prospects directly.
11. Contact
If you have any questions about this policy or how we handle your information, please contact us at hello@itlab.gi, or write to: The IT Lab, 22 City Mill Lane, Gibraltar GX11 1AA.