Legal

Privacy Policy

Last updated: April 2026

Who we are

D Lee Lab is a business advisory practice for owner-managed businesses. This website is operated by D Lee Lab. If you have any questions about this policy, contact us at [email protected].

What data we collect and why

We collect only what is necessary to deliver the services you request.

Data
Why we collect it
Legal basis
First name, last name, email address
To send your diagnostic report to your inbox
Consent — you provide this voluntarily to receive the report
Business name
Optional context to personalise follow-up communications
Consent
Diagnostic responses
To determine your constraint type and generate your report
Consent
Name, email, payment details (booking)
To process your Discovery Call booking and payment
Contract — necessary to fulfil the service you've purchased

We do not sell your data. We do not use it for advertising. We do not share it with any third party except the processors listed below, who act on our behalf.

Data processors

We use the following third-party services to operate this website. Each acts as a data processor on our behalf and is subject to its own GDPR-compliant data processing agreement.

Resend
Transactional email delivery — sends your diagnostic report and any follow-up emails. Data is processed in the EU/US under standard contractual clauses.
Airtable
Lead and contact management — stores the name and email of people who requested a report, so we can manage follow-ups. Data is stored in the US under standard contractual clauses.
Cal.com
Booking system — manages Discovery Call scheduling. Collects name and email as part of the booking flow.
Stripe
Payment processing — handles Discovery Call payments. Card details are never stored by D Lee Lab; they are processed directly by Stripe. Stripe is PCI DSS compliant.
Cloudflare
Website hosting, content delivery, and analytics. Cloudflare Web Analytics is cookieless and does not track individual users. See Cloudflare's privacy policy at cloudflare.com/privacypolicy.

How long we keep your data

We retain your contact details and diagnostic responses for as long as we have a legitimate reason to keep them — typically while there is an active or recent business relationship. If you request deletion, we will remove your data from our systems within 30 days.

Payment records are retained for seven years in line with UK financial record-keeping requirements.

Your rights

Under UK GDPR you have the right to:

  • Access — request a copy of the personal data we hold about you
  • Rectification — ask us to correct inaccurate data
  • Erasure — ask us to delete your data ("right to be forgotten")
  • Restriction — ask us to limit how we use your data while a dispute is resolved
  • Portability — receive your data in a structured, machine-readable format
  • Object — object to processing based on legitimate interest
  • Withdraw consent — unsubscribe from emails at any time using the link in any email we send

To exercise any of these rights, email us at [email protected]. We will respond within 30 days. If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO).

Cookies

This website uses only strictly necessary cookies. We do not use advertising cookies, tracking pixels, or any cookies that require your consent under PECR (the UK's Privacy and Electronic Communications Regulations).

The following cookies may be set when you visit this site:

Cookie
Set by
Purpose
Duration
__cf_bm
Cloudflare
Bot management and abuse prevention — distinguishes human visitors from automated traffic
30 minutes
__stripe_mid, __stripe_sid
Stripe
Fraud prevention and secure payment processing — only set on the booking page when you initiate a payment
Session / 1 year

Because all cookies on this site are strictly necessary for security and payment processing, no cookie consent banner is required. Analytics on this site are provided by Cloudflare Web Analytics, which is cookieless and does not track individual users or set any cookies.

Changes to this policy

If we make material changes to this policy, we will update the date at the top of this page. We recommend checking back periodically if you have an ongoing relationship with us.

Contact

D Lee Lab
[email protected]