Privacy Policy

Last updated: October 2025

This Privacy Policy explains how Good Work Lab Ltd (“Good Work Lab”, “we”, “us”, “our”) collects, uses, stores, and protects your personal information.

It applies to all visitors, subscribers, and users of our websites and platforms, including:

We are committed to protecting your privacy and handling your personal information lawfully, fairly, and transparently.

1. Who We Are

Good Work Lab Ltd

Registered in England and Wales · Company No. 15415819

ICO Registration No. ZC010023

Registered Address:

The Good Work Lab
71-75 Shelton Street
Covent Garden
London
WC2H 9JQ

Telephone: +44 3334 440341

Email: privacy@goodworklab.co.uk

Good Work Lab Ltd is the data controller for both the Good Work Lab website and The Kerfuffle Monitor publication.

2. What Information We Collect

We may collect and process the following types of information:

A. Information you provide directly

  • Your name, job title, and organisation
  • Email address and contact number
  • Preferences for newsletters, insights, or event updates
  • Information you submit through contact forms, surveys, or feedback forms

B. Information collected automatically

  • IP address, browser type, and device information
  • Pages visited, time spent on site, and referral sources
  • Email engagement data (opens, clicks, unsubscribes) via MailerLite or similar tools

C. Special categories of data

We do not collect sensitive personal data (e.g. race, religion, health data) unless explicitly required for research or consultancy projects, in which case we obtain separate written consent and apply enhanced safeguards.

3. How We Use Your Information

We use your information to:

  • Provide you with newsletters, insights, and professional updates
  • Manage your subscriptions and preferences
  • Respond to enquiries and feedback
  • Analyse engagement and improve our website and communications
  • Deliver consultancy, diagnostic, or event services you request
  • Comply with legal, contractual, and regulatory obligations

Lawful Bases for Processing

We rely on the following legal bases:

  • Consent – for newsletters and marketing communications.
  • Contract – to deliver requested products, services, or subscriptions.
  • Legitimate Interests – to analyse and improve services and maintain client relationships.
  • Legal Obligation – to comply with laws, audits, or regulatory reporting.

4. Cookies and Analytics

We use cookies and analytics tools (e.g. Google Analytics 4, MailerLite) to understand website use and enhance performance. Cookies collect anonymous data such as browser type, device, and browsing behaviour.

You can manage or disable cookies at any time through your browser settings or by using our cookie consent banner.

For more detail, please refer to our Cookie Policy (link to be added once live).

5. How We Store and Protect Your Data

We take data protection seriously.

  • Data is stored on secure, encrypted servers located in the UK and EEA.
  • Access is limited to authorised personnel under confidentiality obligations.
  • We use SSL encryption on all pages of our website.
  • We regularly review our security measures and retention periods.

We keep your personal data only for as long as necessary to fulfil the purposes we collected it for, including to meet legal or reporting obligations.

6. Sharing Your Information

We do not sell or rent your data to anyone.

We may share your data with trusted third parties who support our operations, including:

  • Email marketing platforms (e.g. MailerLite)
  • Analytics providers (e.g. Google Analytics)
  • Cloud storage and IT providers with UK/EEA-based servers
  • Professional advisers (e.g. auditors, legal advisors)

All partners are contractually bound to protect your information and use it only in accordance with our instructions and UK data protection law.

We may also disclose data to public authorities if required by law.

7. International Data Transfers

Some third-party providers (e.g. MailerLite, Google) may store or process data outside the UK/EEA. In such cases, we ensure your data is protected through:

  • Adequacy decisions by the UK Government or European Commission, or
  • Standard Contractual Clauses approved by the ICO.

8. Your Rights

Under the UK GDPR, you have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data (“right to be forgotten”)
  • Restrict or object to processing
  • Withdraw consent for marketing communications
  • Request data portability

To exercise these rights, please email privacy@goodworklab.co.uk.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at www.ico.org.uk if you believe we have not handled your data appropriately.

9. Marketing and Communications

We will only send you marketing communications where you have given consent, or where we have a legitimate interest to do so (for example, where you are an existing client).

You can unsubscribe from our emails or update your preferences at any time by clicking the “unsubscribe” or “manage preferences” link in our emails, or by emailing privacy@goodworklab.co.uk.

10. Links to Other Websites

Our website and newsletters may contain links to external websites. We are not responsible for the content or privacy practices of other websites and encourage you to read their policies before providing any personal data.

11. Updates to This Policy

We may update this Privacy Policy periodically to reflect legal or operational changes. The latest version will always be posted on this page with the date of last revision.

12. Contact Us

If you have any questions or wish to exercise your data rights, please contact us:

Good Work Lab Ltd

Attn: Data Protection Officer

The Good Work Lab
71-75 Shelton Street
Covent Garden
London
WC2H 9JQ

Email: privacy@goodworklab.co.uk

Telephone: +44 3334 440341

© 2025 Good Work Lab Ltd. All rights reserved.

Good Work Lab™ and The Kerfuffle Monitor™ are trademarks of Good Work Lab Ltd, registered in England and Wales.