PRIVACY POLICY REGARDING PERSONAL DATA

Effective Date: January 26, 2021
Last Updated: July 22, 2026

Bespoke Lab ("Bespoke Lab," "we," "us," or "our") respects your privacy and is committed to protecting your personal data.

If you have any questions about the Bespoke Lab entity responsible for processing your personal data, please contact us at security@bespokelab.media or contact the relevant Bespoke Lab office using the information provided in the "Contact" tab.

This Privacy Policy explains how we collect, use, disclose, retain, and protect personal data when you visit or use our website, contact us, apply for employment or freelance opportunities, engage with our services, or otherwise interact with us.

This Privacy Policy applies to personal data processed by Bespoke Lab through our website and in connection with our business activities, subject to applicable data protection and privacy laws.

Where applicable law requires your consent, we will obtain your consent before processing your personal data.

1. Personal Data We Collect

We may collect and process different categories of personal data depending on how you interact with us.

1.1 Information You Provide Directly

We may collect personal data that you voluntarily provide to us, including:

Full name
Email address
Telephone or mobile number
Company or organization name
Job title or professional information
Country or region
Information included in your inquiries or communications with us
Information submitted through our website contact forms
Information provided when requesting information about our services
Information provided when applying for employment, freelance, vendor, or partnership opportunities
Any other information you choose to provide to us

Please do not provide sensitive or special-category personal data unless it is necessary and specifically requested for a legitimate purpose.

1.2 Information Collected Automatically

When you visit our website, we may automatically collect certain technical and usage information, such as:

IP address
Browser type and version
Device type
Operating system
Language preferences
Time zone
Referring website or source
Pages visited and interactions with our website
Date and time of access
General information about how you use and navigate our website

Some of this information may be collected through cookies and similar technologies. Please refer to Section 7, "Cookies and Similar Technologies," for more information.

2. How We Use Personal Data

We may use personal data for the following purposes:

To provide, operate, maintain, and improve our website
To respond to inquiries, requests, and communications
To communicate with existing and prospective clients
To provide information about our services and business activities
To establish, manage, and maintain business relationships
To evaluate and respond to business proposals and partnership opportunities
To manage vendor, freelancer, contractor, and professional relationships
To process and evaluate employment and recruitment applications
To communicate with job applicants and candidates
To maintain the security, functionality, and integrity of our website, systems, and services
To detect, prevent, and investigate fraud, abuse, security incidents, and other unlawful activities
To comply with applicable laws, regulations, legal processes, and governmental requests
To establish, exercise, or defend our legal rights and claims
To protect the rights, property, safety, and security of Bespoke Lab, our employees, clients, users, and other individuals
To perform other purposes disclosed at the time the personal data is collected
For any other purpose permitted by applicable law

We will not use personal data for purposes that are incompatible with the purpose for which it was collected unless permitted or required by applicable law.

3. Legal Basis for Processing Personal Data

Where required by applicable data protection laws, we process personal data based on one or more of the following legal bases:

Consent: Where you have provided consent to the processing of your personal data for a specific purpose.
Contractual necessity: Where processing is necessary to enter into or perform a contract with you.
Legal obligation: Where processing is necessary to comply with applicable legal or regulatory obligations.
Legitimate interests: Where processing is necessary for our legitimate business interests, provided that such interests are not overridden by your fundamental rights and freedoms.
Protection of vital interests: Where processing is necessary to protect the vital interests of an individual, where applicable.
Legal claims: Where processing is necessary to establish, exercise, or defend legal claims.
Other lawful bases: Any other legal basis permitted under applicable data protection laws.

Where we rely on your consent, you may withdraw your consent at any time, subject to applicable law. Withdrawal of consent will not affect the lawfulness of processing carried out before your withdrawal.

4. Sharing and Disclosure of Personal Data

We do not sell or rent your personal data.

We may disclose or share personal data where reasonably necessary for the purposes described in this Privacy Policy, including with:

Bespoke Lab affiliates, subsidiaries, and related entities
Employees and authorized personnel who require access to perform their duties
Clients and business partners, where necessary for legitimate business purposes
Vendors, freelancers, contractors, and service providers
Website hosting, IT, cloud storage, communication, security, and technology providers
Recruitment and human resources service providers
Professional advisors, including legal, accounting, audit, and consulting professionals
Insurance providers and financial institutions, where necessary
Government authorities, regulators, courts, or law enforcement agencies where required or permitted by law
Other parties where necessary to protect our legal rights, safety, property, or interests
Third parties where you have provided consent or where disclosure is otherwise permitted by applicable law

We take reasonable steps to ensure that third parties who process personal data on our behalf provide appropriate safeguards and process personal data only as permitted by applicable law and our instructions.

5. International Transfers of Personal Data

As a global organization, Bespoke Lab may process, store, or transfer personal data in countries other than the country where the personal data was originally collected. Depending on your location and applicable law, these countries may have data protection laws that differ from those in your country of residence. Where personal data is transferred across borders, we will take appropriate measures to ensure that such transfers are conducted in accordance with applicable data protection laws. Where required by applicable law, we may use appropriate safeguards for international data transfers, including contractual protections, recognized transfer mechanisms, adequacy decisions, or other lawful safeguards.

6. Data Retention

We retain personal data only for as long as reasonably necessary to fulfill the purposes for which it was collected, including:

Providing services and managing business relationships
Responding to inquiries and communications
Managing recruitment and employment processes
Complying with legal, accounting, tax, regulatory, and reporting obligations
Establishing, exercising, or defending legal claims
Maintaining business and security records
Resolving disputes and enforcing agreements

The retention period may vary depending on the nature of the personal data, the purpose of processing, our legal and contractual obligations, and applicable laws. When personal data is no longer required, we will take reasonable steps to securely delete, anonymize, or otherwise dispose of it in accordance with applicable law and our internal policies.

7. Cookies and Similar Technologies

Our website may use cookies and similar technologies to operate the website, maintain functionality, remember preferences, understand website usage, improve user experience, and, where applicable, support marketing or other purposes.

Cookies may include:

Strictly necessary cookies: Required for the website to operate properly.
Functional cookies: Used to remember preferences and improve website functionality.
Analytics or performance cookies: Used to understand how visitors use our website and improve its performance.
Marketing or tracking cookies: Where applicable, used to support advertising, marketing, or tracking activities.

Where required by applicable law, we will request your consent before placing non-essential cookies on your device. You may manage or disable cookies through your browser settings or through available cookie consent tools. Please note that disabling certain cookies may affect the functionality or performance of the website.

8. Third-Party Websites and Services

Our website may contain links to third-party websites, platforms, or services, including social media platforms.

These third-party websites and services are operated independently from Bespoke Lab and may have their own privacy policies and terms of use.

We are not responsible for the privacy practices, content, security, or handling of personal data by third-party websites or services.

We encourage you to review the applicable privacy policies before providing personal data to any third party.

9. Recruitment and Employment Applications

If you apply for a position or opportunity with Bespoke Lab, we may collect and process personal data necessary for recruitment and hiring purposes.

This may include:

Name and contact information
Resume or CV
Employment history
Education and qualifications
Professional experience
Skills and certifications
References
Information provided during interviews or assessments
Information necessary to evaluate your suitability for a position
Other information you voluntarily provide during the recruitment process

We may use this information to evaluate applications, communicate with candidates, conduct recruitment activities, verify information where legally permitted, and comply with applicable employment and legal requirements. Where permitted by applicable law, we may retain candidate information for future employment opportunities unless you request deletion or applicable law requires otherwise. Additional privacy notices may apply to employees, contractors, or candidates depending on the jurisdiction in which the relevant Bespoke Lab entity operates.

10. Data Security

We maintain reasonable administrative, technical, and organizational safeguards designed to protect personal data against unauthorized access, loss, misuse, alteration, disclosure, or destruction. These safeguards may include access controls, authentication measures, confidentiality obligations, security monitoring, and other appropriate technical and organizational measures. However, no method of transmission over the Internet or method of electronic storage is completely secure. Accordingly, while we take reasonable steps to protect personal data, we cannot guarantee absolute security.

11. Your Privacy Rights

Depending on your location and applicable law, you may have certain rights regarding your personal data.

These rights may include:

The right to know whether we process your personal data
The right to request access to your personal data
The right to request correction or updating of inaccurate or incomplete personal data
The right to request deletion or erasure of your personal data
The right to request restriction of processing
The right to object to certain processing activities
The right to withdraw consent where processing is based on consent
The right to request data portability, where applicable
The right to object to direct marketing, where applicable
The right to lodge a complaint with a competent data protection or supervisory authority

These rights are subject to applicable legal limitations and exceptions. To exercise your rights, please contact us at security@bespokelab.media. We may need to verify your identity before responding to your request in order to protect your personal data and prevent unauthorized requests. We will respond to valid requests within the timeframe required by applicable law.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business operations, services, technology, legal requirements, or privacy practices. When we make changes, we will update the "Effective Date" and "Last Updated" dates at the top of this Privacy Policy. Where required by applicable law, we will provide additional notice or obtain consent for material changes. We encourage you to review this Privacy Policy periodically to stay informed about how we protect personal data.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data, please contact us at security@bespokelab.media.