1. Who is accountable for your data
The controller of the personal data collected on this site is O-Lab Inc. (“O-Lab”, “we”), an education technology company that operates the o-lab.ai site and the O-Lab platform.
For anything concerning your personal data — including exercising the rights described below — the designated channel is info@o-lab.club. It is an inbox staffed by people: write to it and we answer.
2. What we collect
We collect two kinds of data, and the distinction matters because they are not governed the same way.
What you give us, by filling in a demo, contact, partnership, studio brief, webinar registration or newsletter form:
- First and last name.
- Email address.
- Phone number, where the form asks for it.
- Company or organization, job title, headcount range and industry.
- City, where the form asks for it (we use it for event logistics).
- Your stated buying timeline, when you pick one.
- The day, time and time zone you prefer for a demo, when you pick them. That is a preference, not a confirmed booking.
- Whatever you choose to write in the free-text message field.
- If you tick the box, your voluntary newsletter subscription.
We do not ask for sensitive data — health, ethnic origin, beliefs, union membership, sexual orientation, biometric or financial data — and we ask you not to include any in the free-text field. If you send it anyway, we delete it as soon as we notice.
3. Data that collects itself
Browsing the site automatically records technical data: your IP address, device and browser type, language, the pages you visit, how long you stay on them, and which link or campaign brought you here.
This feeds our analytics and campaign measurement. We treat it in aggregate wherever we can: the point is to understand what works on the site, not to profile individuals.
4. What we use it for
We separate primary purposes — the ones that create the relationship with you, without which the form you filled in would make no sense — from secondary ones, which you can refuse without affecting what you asked us for.
Primary purposes:
- Handling your request: contacting you, scheduling and running the demo, answering your questions or evaluating a possible partnership.
- Sending you the material or access you asked for (a download, a webinar link, a proposal).
- Managing the commercial relationship and following up on what we discussed.
- Meeting the legal, accounting and tax obligations that apply to us.
5. Secondary purposes, which you can refuse
With your consent, and only with it, we also use your data to:
- Send you the newsletter, webinar invitations and educational content about training and AI.
- Tell you about product news, use cases and O-Lab events.
- Measure how our campaigns perform and improve what we publish.
You can refuse these from the outset, or withdraw your consent at any time, by writing to info@o-lab.club or using the unsubscribe link in every email. Refusing them does not cost you the demo, the proposal or the answer you asked for.
6. The basis we rely on
Depending on the law that applies to you, we process your data on one of these bases: your consent, given by submitting a form or ticking a box; the performance of a pre-contractual or contractual relationship you initiated; compliance with a legal obligation; or our legitimate interest in making our services known to organizations, provided that interest does not outweigh your rights.
In Colombia, submitting a form constitutes your prior, express and informed authorization for the processing described here, under Law 1581 of 2012. In Mexico, you are deemed to tacitly consent to processing for the primary purposes unless you state otherwise, under the LFPDPPP.
7. Cookies and measurement
We use cookies and equivalent technologies to make the site work, to measure its use and to attribute advertising campaigns. The analytics and marketing ones fire only if you accept them in the cookie notice shown on arrival.
The tools involved are Google Tag Manager and Google Analytics, to measure site usage, and the Google Ads tag, to know which campaigns generate requests. You can change your mind at any time by clearing the site cookies in your browser, or set it to block them: the site works without them.
8. Who we share it with
We do not sell your personal data. We never have, and it is not part of our business model.
We share it only with providers acting on our behalf, under contract, instructed to use it solely to deliver their service to us:
- Our CRM (Clientify), where requests arriving through the forms are recorded and managed.
- Our site hosting and infrastructure provider (Vercel).
- Our measurement and advertising tools (Google), on the terms in the previous section.
We may also disclose data where a competent authority legally requires it, or to defend our rights against a judicial claim. Outside those cases, we share your data with no one else.
9. International transfers
O-Lab Inc. operates from the United States, and some of our providers process data in the United States and the European Union. That means your data may leave your country of residence.
When it does, we require each provider to offer protection equivalent to what this policy describes, through contractual data protection clauses. By submitting a form you accept that transfer on the terms described here.
10. How long we keep it
We keep your data for as long as our relationship lasts and, afterwards, for as long as we need it to meet the legal responsibilities arising from it.
Where there is no commercial relationship and no activity on your side, we review and purge the records five years after the last contact. If you ask for deletion sooner, we act within the deadlines in section 12, except for what the law requires us to retain.
11. Your rights
Over your personal data you may, at any time and free of charge:
- Access it: know what data of yours we hold and what we do with it.
- Rectify it: correct anything incomplete or inaccurate.
- Erase it: ask us to delete it from our records.
- Object: refuse its use for a specific purpose.
- Withdraw your consent, whenever you like and without having to justify it.
- Restrict processing and port your data, where the applicable law recognizes those rights.
In Mexico these are the ARCO rights under the LFPDPPP; in Colombia, the habeas data rights under Law 1581 of 2012; if you live in the European Economic Area or in California, the rights the GDPR and the CCPA give you respectively.
12. How to exercise them
Write to info@o-lab.club saying which right you want to exercise and over what data, and attach something evidencing your identity or the authority you are acting under. For a rectification request, tell us which field is wrong and what the correct value is.
We answer within twenty business days at most, and sooner where the law that applies to you sets a shorter deadline. If we grant the request, we give it effect within fifteen business days of that answer.
If you believe we handled your request badly, you can turn to your country’s data protection authority: INAI in Mexico, the Superintendencia de Industria y Comercio in Colombia, or your relevant supervisory authority in the European Union.
13. Security
We apply reasonable technical, administrative and physical measures to protect your data against unauthorized access, loss, alteration or disclosure: encryption in transit, role-based access control, and providers contractually held to the same.
No system is infallible and it would be dishonest to promise you otherwise. Should a breach significantly affecting your data occur, we would notify you and the competent authority within the deadlines the law sets.
14. Minors
The forms on this site are aimed at adults acting on behalf of an organization. We do not knowingly collect data from minors through o-lab.ai.
Use of the O-Lab platform by students who are minors is governed by the contract with their educational institution and the notices it provides to parents or guardians, not by this document.
15. Changes to this policy
We may update this policy when our practices, our providers or the applicable law change. The version in force is always the one published on this page, with its update date at the top.
If a change materially affects how we handle your data, we will tell you by email before applying it.