Privacy Policy

Last updated: October 2025

This Privacy Policy explains how Good Work Lab Ltd(“Good Work Lab”, “we”, “us”, “our”) collects, uses, stores, and protects your personal information.

It applies to all visitors, subscribers, and users of our websites and platforms, including:

• Good Work Lab – https://www.goodworklab.co.uk
• The Kerfuffle Monitor – a publication of Good Work Lab Ltd

We are committed to protecting your privacy and handling your personal information lawfully, fairly, and transparently.

1. Who We Are

Good Work Lab Ltd
Registered in England and Wales · Company No. 15415819
ICO Registration No. ZC010023
Registered Address: 71–75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom
Telephone: 0333 444 0341
Email: privacy@goodworklab.co.uk

Good Work Lab Ltd is the data controller for both the Good Work Lab website and The Kerfuffle Monitor publication.

2. What Information We Collect

We may collect and process the following types of information:

A. Information you provide directly

• Your name, job title, and organisation
• Email address and contact number
• Preferences for newsletters, insights, or event updates
• Information  you submit through contact forms, surveys, or feedback forms

B. Information collected automatically

• IP   address, browser type, and device information
• Pages visited, time spent on site, and referral sources
• Email  engagement data (opens, clicks, unsubscribes) via MailerLite or similar tools

C. Special categories of data

We do not collect sensitive personal data (e.g. race, religion, health data) unless explicitly required for research or consultancy projects, in which case we obtain separate written consent and apply enhanced safeguards.

3. How We Use Your Information

We use your information to:

• Provide you with newsletters, insights, and professional updates
• Manage your subscriptions and preferences
• Respond to enquiries and feedback
• Analyse engagement and improve our website and communications
• Deliver consultancy, diagnostic, or event services you request
• Comply with legal, contractual, and regulatory obligations

Lawful Bases for Processing

We rely on the following legal bases:

• Consent – for newsletters and marketing communications.
• Contract – to deliver requested products, services, or subscriptions.
• Legitimate Interests – to analyse and improve services and maintain client relationships.
• Legal Obligation – to comply with laws, audits, or regulatory reporting.

4. Cookies and Analytics

We use cookies and analytics tools (e.g. Google Analytics 4, MailerLite) to understand website use and enhance performance. Cookies collect anonymous data such as browser type, device, and browsing behaviour.

You can manage or disable cookies at any time through your browser settings or by using our cookie consent banner.

For more detail, please refer to our Cookie Policy.

5. How We Store and Protect Your Data

We take data protection seriously.

• Data is stored on secure, encrypted servers located in the UK and EEA.
• Access is limited to authorised personnel under confidentiality obligations.
• We use SSL encryption on all pages of our website.
• We regularly review our security measures and retention periods.

We keep your personal data only for as long as necessary to fulfil the purposes we collected it for, including to meet legal or reporting obligations.

6. Sharing Your Information

We do not sell or rent your data to anyone.
We may share your data with trusted third parties who support our operations, including:

• Email marketing platforms (e.g. MailerLite)
• Analytics providers (e.g. Google Analytics)
• Cloud storage and IT providers with UK/EEA-based servers
• Professional advisers (e.g. auditors, legal advisors)

All partners are contractually bound to protect your information and use it only in accordance with our instructions and UK data protection law.

We may also disclose data to public authorities if required by law.

7. International Data Transfers

Some third-party providers (e.g. MailerLite, Google) may store or process data outside the UK/EEA. In such cases, we ensure your data is protected through:

• Adequacy decisions by the UK Government or European Commission, or
• Standard Contractual Clauses approved by the ICO.

8. Your Rights

Under the UK GDPR, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data (“right to be forgotten”)
• Restrict or object to processing
• Withdraw consent for marketing communications
• Request data portability

To exercise these rights, please email privacy@goodworklab.co.uk.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at www.ico.org.uk if you believe we have not handled your data appropriately.

9. Marketing and Communications

We will only send you marketing communications where you have given consent, or where we have a legitimate interest to do so (for example, where you are an existing client).

You can unsubscribe from our emails or update your preferences at any time by clicking the “unsubscribe” or “manage preferences” link in our emails, or by emailing privacy@goodworklab.co.uk.

10. Links to Other Websites

Our website and newsletters may contain links to external websites. We are not responsible for the content or privacy practices of other websites and encourage you to read their policies before providing any personal data.

11. Updates to This Policy

We may update this Privacy Policy periodically to reflect legal or operational changes. The latest version will always be posted on this page with the date of last revision.

12. Contact Us

If you have any questions or wish to exercise your data rights, please contact us:

Good Work Lab Ltd
Attn: Data Protection Officer
71–75 Shelton Street
Covent Garden, London WC2H 9JQ
United Kingdom

Email: privacy@goodworklab.co.uk
Telephone: 0333 444 0341

© 2025 Good Work Lab Ltd. All rights reserved.

Good Work Lab™ and The Kerfuffle Monitor™ are trademarks of Good Work Lab Ltd, registered in England and Wales.