Last updated: 1 September 2025

This Privacy Policy explains how The Chat Laboratory Ltd (“we”, “us”, “our”) collects, uses, and protects the personal data of our corporate clients and their employees (“you”, “your”) who use our online language training services via the website chatlaboratory.com.

1. The Data We Collect

We may collect and process the following types of personal data:

• Identity Data: Names, job titles, and company details.
• Contact Data: Business email addresses, company phone numbers, and company addresses.
• Training and Usage Data: Information about your use of our platform, including course progress, performance on assessments, attendance records, and feedback provided.
• Technical Data: Internet protocol (IP) address, login data, browser type and version, time zone setting and location, and other technology on the devices you use to access our website.

2. How We Collect Your Data

We collect data through the following methods:

• Direct Interactions: You or your corporate client may provide us with your Identity and Contact Data directly when signing up for our services or corresponding with us.
• Automated Technologies: As you interact with our website, we automatically collect Technical Data about your equipment and browsing actions. We collect this personal data by using cookies and other similar technologies.

3. How We Use Your Data

We use your personal data for the following purposes:

• To provide and manage your access to our language training services.
• To monitor and report on your training progress to your corporate client, as per our contractual agreement with them.
• To improve our services and customise your learning experience.
• To communicate with you regarding your training, including scheduling and support.
• To ensure the security of our website and services.
• To comply with legal obligations.

4. Legal Basis for Processing

We will only use your personal data where we have a lawful basis to do so. In most cases, this will be one of the following:

• Contractual Necessity: Processing is necessary to provide the services you have subscribed to.
• Legitimate Interests: Processing is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests. For example, improving our services and ensuring the security of our platform.
• Legal Obligation: Processing is necessary to comply with a legal or regulatory obligation.

5. Sharing Your Data

We will share your data with your corporate client to provide them with reports on your training progress and other relevant information as required by our contract. We will not sell or rent your personal data to any third party. We may also share data with third-party service providers (e.g., website hosting, IT support) who are bound by strict confidentiality agreements.

6. International Data Transfers

Your data may be stored and processed outside of the UK or European Economic Area (EEA) by our service providers. When this happens, we ensure that appropriate safeguards are in place to protect your data, as required by UK GDPR.

7. Data Security

We have implemented appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way. We also limit access to your data to employees and third parties on a need-to-know basis.

8. Data Retention

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for satisfying any legal, accounting, or reporting requirements.

9. Your Legal Rights

Under UK GDPR, you have several rights regarding your personal data, including the right to:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Ask us to correct any inaccurate or incomplete data.
• Erasure: Request that we delete your personal data.
• Restriction: Ask us to suspend the processing of your personal data.
• Portability: Request the transfer of your personal data to another party.
• Object: Object to the processing of your personal data.

If you wish to exercise any of these rights, please contact us using the details below.

10. Contact Details

If you have any questions about this Privacy Policy or our data practices, please contact us at:
Email: Email Us
Registered Address: 7 Bell Yard, London, WC2A 2JR