Halbon Preflight: privacy notice

Halbon Labs Ltd is the data controller. We are registered in England and Wales, company no. 16608971, registered office 71-75 Shelton Street, Covent Garden, London WC2H 9JQ, and registered with the Information Commissioner's Office, registration ZB957293. Contact: hello@halbonlabs.com.

This notice covers outreach for Halbon Preflight only. For visitors to this site and people who send us an enquiry, see our main privacy notice.

• Your name, job title and business email address, or a LinkedIn profile link.
• The name and website of the company you work for or run.
• A short note of why we thought Preflight might be relevant (for example, that the company has a public app built with an AI tool), and a record of what we sent you and any reply.

We do not hold special category data, we do not look at your app's data, and we do not test anyone's live app or database.

Public sources: your company website, Companies House, public directories and public professional profiles. Not purchased lists, and not your app.

To contact you once or a few times about Halbon Preflight, a paid check of access rules in AI-built apps, because it may be relevant to your business.

The basis is legitimate interests, Article 6(1)(f) UK GDPR: we have a commercial interest in telling businesses about a relevant service, and we have kept it to business contact details and a small number of messages. We think this is a reasonable expectation for a business owner or director, and it has little impact on you. You can object at any time (see section 7).

We email only company addresses of limited companies and LLPs, in line with the Privacy and Electronic Communications Regulations. For sole traders and partnerships we use LinkedIn or a contact form instead, and we do not send a marketing email without a clear way to opt out.

Our mailbox provider (Microsoft 365) and the tools we use to keep a record of outreach and to send messages, each under a data processing agreement. We do not sell or share your details with anyone else.

Our providers may handle data outside the UK. Where they do, the transfer is covered by a safeguard UK GDPR recognises: the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or an adequacy regulation.

• If you do not reply: up to 12 months from our last message, then deleted.
• If you reply and a conversation follows: with the correspondence record, handled as in our main privacy notice.
• If you opt out: we keep your email address on a suppression list, and only that, so that we do not contact you again. Everything else is deleted.

To stop all contact, email hello@halbonlabs.com with the word "stop", or reply "stop" to any message. We act on it within two working days.

Under UK GDPR you can also ask for a copy of what we hold, ask us to correct or delete it, restrict it, or object to our using it. Email the same address. We reply within one month, at no charge.

Tell us first at hello@halbonlabs.com and we will look into it. You can also complain to the Information Commissioner's Office at any time: ico.org.uk/make-a-complaint (opens in a new tab), or 0303 123 1113.