Privacy Policy

Effective Date: February 4, 2026

This Privacy Policy explains how DoodadLabs collects, uses, and protects information when you use our Services. It should be read together with our Terms of Service and Cookie Policy.


1. Information We Collect

  • Account details (name, email, credentials)

  • Website and traffic metadata processed by our WAF

  • Optional AI-processed security data

  • Cookies and analytics data (see Cookie Policy)


2. How We Use Information and Legal Bases

We process personal data only where we have a lawful basis under UK GDPR, including:

  • Contractual necessity – to provide the Services you request

  • Legitimate interests – to secure, monitor, and improve our Services

  • Legal obligations – to comply with applicable laws

  • Consent – where required (e.g. non-essential cookies or optional AI processing)

We do not sell personal data.


3. Sharing Information and International Transfers

We may share personal data with trusted processors acting on our instructions (such as hosting and analytics providers).

Where data is transferred outside the UK, we ensure appropriate safeguards are in place, including adequacy regulations or standard contractual clauses.

We may also disclose data where required by law or lawful authority.


4. User Rights (UK GDPR)

Where applicable under the UK General Data Protection Regulation (UK GDPR), you have the right to:

  • Request access to your personal data

  • Request correction of inaccurate or incomplete data

  • Request erasure of your personal data ("right to be forgotten")

  • Restrict or object to certain processing activities

  • Request data portability where technically feasible

  • Withdraw consent at any time where processing is based on consent

To exercise these rights, contact us at legal@doodadlabs.org. We may require verification of identity before responding.


5. Data Security

We apply appropriate technical and organisational safeguards but cannot guarantee absolute security.


6. Children’s Privacy

Our Services are not intended for children under 13.


7. Changes

We may update this Privacy Policy at any time without notice.

Contact Us

If you have questions or concerns about these Terms of Service, please contact us at:

Email: legal@doodadlabs.org