1. Who we are
bundlesqubly.click ("MotionLab", "we", "us") is operated by Bundlesqubly Digital Labs Ltd, a company registered in England & Wales under company number 14892037, with its registered office at Unit 7, Kestrel Works, 128 Bermondsey Street, London SE1 3TX, United Kingdom. For the purposes of the UK GDPR and the EU General Data Protection Regulation, Bundlesqubly Digital Labs Ltd is the data controller for personal data processed through this website.
Questions about this policy, or any request relating to your personal data, should be sent to our Data Protection Officer at [email protected] or by post to the registered address above, marked "Data Protection".
2. What data we collect
Data you give us. If you complete the contact form we collect the name, email address, topic and message content you submit, together with the date and time of submission. If you email us directly, we hold the contents of that correspondence.
Data collected automatically. Our hosting infrastructure records standard server logs: IP address, request time, requested URL, HTTP status, referring URL, user-agent string and approximate country derived from the IP address. If you consent to analytics cookies, we also collect aggregated page-view and interaction events, such as which pattern presets are opened most often.
Data stored on your device. Your cookie choice and, if functional storage is enabled, your last playground control values are stored in your browser's local storage. These stay on your device and are not transmitted to us.
We do not collect special category data, we do not ask for payment details, and we do not knowingly collect data from children under 16.
3. Why we process it, and on what legal basis
Contact form and email correspondence are processed on the basis of legitimate interests — responding to an enquiry you initiated — and, where you tick the consent box, on the basis of consent. Server logs are processed on the basis of legitimate interests in operating a secure and reliable website, including detecting abuse and diagnosing faults. Analytics and functional cookies are processed only on the basis of your consent, which you may withdraw at any time. Where we must retain records to comply with a legal obligation, the basis is legal obligation.
4. Cookies and similar technologies
We use a small number of first-party cookies and local storage entries. Strictly necessary items keep the site functioning and remember your consent choice; analytics items help us understand which guides are used; functional items remember your tuned playground values. No advertising or cross-site tracking cookies are set. A full table, including names, purposes and durations, is published in our Cookie Policy, along with browser-level opt-out instructions.
5. Third-party processors and recipients
We keep the processor list deliberately short. Personal data may be handled by: our website hosting and content delivery provider, for the purpose of serving pages and retaining short-term access logs; our email provider, for the purpose of receiving and storing correspondence; and, where analytics consent has been given, a privacy-focused analytics provider that processes aggregated event data. Image placeholders on some pages are requested from a third-party image service, which will see the standard request metadata your browser sends to any host.
All processors are engaged under written terms that require them to act only on our instructions and to apply appropriate technical and organisational security measures. Where a processor operates outside the UK or EEA, transfers are covered by an adequacy decision or by Standard Contractual Clauses together with a transfer risk assessment. We do not sell personal data, and we do not share it for behavioural advertising.
6. Retention periods
Contact form submissions and email correspondence are retained for 24 months from the last message in the thread, then deleted, unless the exchange forms part of a contract or a legal record that must be kept longer. Raw server logs are retained for 30 days. Aggregated analytics data is retained for 14 months and cannot be used to identify an individual. Cookie consent records are retained for 12 months so we can demonstrate the choice you made.
7. Your rights
If the UK or EU GDPR applies to you, you have the right to: be informed about processing; access a copy of your personal data; rectify inaccurate data; erase data where there is no overriding reason to keep it; restrict processing while a dispute is resolved; port data you provided to another controller; object to processing based on legitimate interests; and withdraw consent at any time without affecting processing already carried out. You also have the right to lodge a complaint with a supervisory authority — in the UK, the Information Commissioner's Office at ico.org.uk.
If you are a California resident, the CCPA as amended gives you the right to know what personal information is collected and for what purpose, the right to request deletion, the right to correct inaccurate information, the right to opt out of any sale or sharing of personal information, and the right not to be discriminated against for exercising these rights. We do not sell or share personal information as those terms are defined, so no "Do Not Sell or Share" mechanism is required; you may still submit a request using the contacts below.
To exercise any right, email [email protected]. We respond within one month and may ask for information sufficient to verify that the request comes from you or an authorised agent. Verification data is used only for that purpose and then deleted.
8. Security
The site is served over HTTPS. Administrative access is limited to named individuals using multi-factor authentication. Form submissions are transmitted encrypted, and stored correspondence is held in access-controlled mailboxes. No system is perfectly secure; if a breach occurs that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of it and inform affected individuals where required.
9. Changes to this policy
We may update this policy to reflect changes in our processing or in the law. The "last updated" date at the top of the page always reflects the current version. Material changes affecting how we use data collected about you will be announced on this page before they take effect.