1. Information We Collect
Information you provide: Name, email address, phone number, social media handles (including LinkedIn and WhatsApp), company, role, billing details necessary to process your digital product purchases, and any specific details you submit through our contact, intake, download, or lead-capture forms.
Information collected automatically: IP address, device and browser type, pages viewed, referring URL, and interaction events captured via cookies and similar technologies (see Section 14).
Information from third parties: Limited business context from analytics, ad platforms, and enrichment services (such as data append or business intelligence tools) when you interact with our campaigns, social media profiles, or automated messaging systems. These services provide general firmographic or behavioral signals, not sensitive personal data, to help us understand our audience.
2. How We Use Information
- Respond to inquiries, process transactions, and deliver downloaded digital content.
- Operate, secure, track access to, and improve our website and internal systems.
- Measure marketing performance, run conversion tracking, and optimize our content.
- Send relevant updates and marketing communications via email, SMS/text messaging, WhatsApp, and social media direct messages (DMs) where you have explicitly opted in.
- Meet legal, tax, regulatory, and contractual obligations.
3. Legal Bases
Where applicable (including under GDPR and UK GDPR), we process personal data on the following legal bases:
| Processing Activity | Legal Basis |
|---|---|
| Sending marketing emails, SMS, or WhatsApp messages | Consent. You have explicitly opted in via our marketing consent form. |
| Processing purchases and delivering contracted services | Performance of a contract. |
| Website analytics and conversion tracking | Consent. Analytics storage defaults to denied until you accept via our cookie banner. |
| Security, fraud prevention, and abuse detection | Legitimate interests, to protect our systems and users. |
| Legal, tax, and regulatory compliance | Legal obligation. |
| Responding to inquiries and service communications | Legitimate interests, to operate our business and respond to requests. |
Where we rely on legitimate interests, we have assessed that those interests are not overridden by your rights. You may contact us at privacy@infinitylabssolutions.ai to request details of that assessment.
4. Cookies, Analytics & Advertising
We use cookies and similar technologies for necessary site function, analytics (Google Analytics 4 via Google Tag Manager), and marketing measurement. We use Google Consent Mode v2: until you choose, analytics and marketing storage default to denied. You can change your choices anytime through the "Manage preferences" control in the cookie banner. See Section 14 for a full cookie and sub-processor inventory.
Detailed Cookie List
This list is generated and kept current automatically by our consent management platform.
5. Sharing of Information
We do not sell personal information. We share limited data with vetted service providers (hosting providers, analytics platforms, payment processors, email deployment systems, and communication/CRM tools) that act strictly on our instructions, and where required by law or to protect our rights. See Section 14 for a list of key sub-processors.
Mobile Information Protection: Notwithstanding any other provision in this policy, mobile phone numbers, SMS consent data, and opt-in information will not be shared, sold, rented, or leased to third parties, affiliates, or partners for marketing or promotional purposes under any circumstances.
6. Data Retention
We retain personal information only as long as necessary for the purposes described in this policy. Specific periods by data type:
| Data Type | Retention Period |
|---|---|
| Marketing contact data (email, phone, preferences) | Until consent is withdrawn or a deletion request is fulfilled. |
| Transaction and billing records | 7 years (US federal tax retention requirement). |
| Website analytics data | 14 months (as configured in Google Analytics 4). |
| Contact form and inquiry submissions | 2 years from last contact. |
| Suppression records (opt-out / do-not-contact lists) | Indefinitely, to honor your preferences and prevent re-contact. |
| Security and access logs | 90 days. |
When data is no longer required, it is securely deleted or anonymized. To request early deletion of your data, see Section 7.
7. Your Rights
Depending on your location, you have the following rights regarding your personal information:
- Access: request a copy of the personal data we hold about you.
- Rectification: ask us to correct inaccurate or incomplete information.
- Erasure ("right to be forgotten"): request deletion of your personal data where we have no legal basis to retain it.
- Restriction: ask us to pause processing of your data in certain circumstances.
- Portability: receive your data in a structured, machine-readable format.
- Objection: object to processing based on legitimate interests or for direct marketing purposes.
- Withdraw consent: where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
How to exercise your rights: Submit a request to privacy@infinitylabssolutions.ai or via our Marketing Consent page. We will respond within 30 days of receiving a verifiable request. Complex requests may be extended by an additional 60 days with notice.
Opt-out shortcuts:
- Email: click the "Unsubscribe" link in any email.
- SMS: reply STOP.
- WhatsApp: reply STOP or contact privacy@infinitylabssolutions.ai.
Automated decision-making: We use analytics and AI-native systems to understand engagement patterns and improve our content. We do not make automated decisions about individuals that produce legal or similarly significant effects without human review.
Right to complain: If you are located in the EU or UK and believe we have not handled your data lawfully, you have the right to lodge a complaint with your local supervisory authority. In the EU, contact your national Data Protection Authority (edpb.europa.eu). In the UK, contact the Information Commissioner's Office (ICO) at ico.org.uk/make-a-complaint.
8. Security
We use reasonable administrative, technical, and physical safeguards designed to protect personal information. No method of transmission or storage is 100% secure; we work to remediate vulnerabilities promptly when identified.
9. International Transfers
Our services are operated from the United States. If you access them from the EU, EEA, UK, or another jurisdiction with data transfer restrictions, your personal information may be transferred to and processed in the United States, which has different data protection laws than your country of residence.
Where such transfers are subject to GDPR or UK GDPR requirements, we rely on appropriate safeguards, including Standard Contractual Clauses (SCCs) approved by the European Commission, to protect your data. Our key service providers (including Customer.io for email and SMS delivery, and Google for analytics) maintain their own transfer mechanisms. Details are available in their respective privacy policies.
You may request information about the transfer safeguards we apply by contacting privacy@infinitylabssolutions.ai.
10. Contact
Questions or privacy requests? Reach our team via our contact channels or email privacy@infinitylabssolutions.ai. You can also update marketing preferences on our Marketing Consent page.
Policy questions? Contact us directly: compliance@infinitylabssolutions.ai.
11. Changes To This Policy
We may update this policy from time to time. The "Last updated" date above reflects the most recent revision. Material changes will be highlighted on this page.
12. California Privacy Rights (CCPA / CPRA)
For California Residents
If you are a California resident, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) grant you the following additional rights:
- Know: the categories of personal information we collect, the purposes for which it is used, and the categories of third parties with whom it is shared.
- Delete: request deletion of personal information we have collected about you, subject to certain exceptions.
- Correct: request correction of inaccurate personal information.
- Opt out of sale or sharing: we do not sell or share your personal information with third parties for their own marketing purposes.
- Limit use of sensitive personal information: we do not use sensitive personal information beyond the purposes authorized by the CPRA.
- Non-discrimination: we will not discriminate against you for exercising any of these rights.
Categories of personal information collected: Identifiers (name, email, phone), commercial information (purchase history), internet activity (pages viewed, analytics), and inferences drawn from this data to understand preferences.
To submit a California rights request: Email privacy@infinitylabssolutions.ai with the subject line "California Privacy Request." We will verify your identity and respond within 45 days.
California residents may also authorize an agent to submit requests on their behalf.
13. Children's Privacy
Our website and services are not directed at children under the age of 13, and we do not knowingly collect personal information from children under 13. If we learn that we have inadvertently collected personal information from a child under 13, we will delete it promptly.
If you believe we may have collected information from a child, please contact us at privacy@infinitylabssolutions.ai.
14. Cookies, Sub-processors & Third-Party Services
Cookies we use:
We use cookies and similar technologies for the purposes described below. Visitors from the EU, EEA, and UK are presented with an opt-in consent banner; these cookies are set only after you actively accept them. Visitors from the United States are opted in by default and may opt out at any time via the "Manage preferences" control in our cookie banner.
| Category | Purpose | Provider | Default State |
|---|---|---|---|
| Strictly Necessary | Core site function and security | Infinity Labs Solutions | Always active, no consent required |
| Analytics | Page views, session data, and traffic analysis to help us understand how visitors use our site | Google Analytics 4 (via Google Tag Manager) | US visitors: active by default (opt-out available). EU/EEA/UK visitors: denied until consent. |
| Marketing & Advertising | Conversion tracking, remarketing, and paid media measurement across our advertising platforms | Google Ads / Google Tag Manager. Meta (Facebook & Instagram): pixel not yet active, planned for future activation. YouTube / Google Video Ads: not yet active, planned for future activation. | US visitors: active by default (opt-out available). EU/EEA/UK visitors: denied until consent. |
You can change your cookie preferences at any time using the "Manage preferences" control in our cookie banner or by adjusting your browser settings. Withdrawing consent does not affect any processing that occurred before withdrawal.
We use Google Consent Mode v2. Until consent is provided (for visitors where consent is required), analytics and advertising signals default to denied. Google may use modeled conversions in place of measured data during the denied period.
Key sub-processors (third-party services we use to process your data):
| Provider | Purpose | Privacy Policy |
|---|---|---|
| Customer.io | Email and SMS delivery, marketing automation | customer.io/legal/privacy-policy Customer.io DPA: email privacy@customer.io |
| CookieYes | Cookie consent management and compliance | cookieyes.com/privacy-policy |
| Google (Analytics, Ads, Tag Manager) | Analytics, advertising measurement, tag management | policies.google.com/privacy |
| Tinybird | Web analytics data processing | tinybird.co/privacy |
| Meta (Facebook, Instagram) | Advertising measurement and remarketing (planned, not yet active) | facebook.com/privacy/policy |
| YouTube / Google | Video advertising and remarketing (planned, not yet active) | policies.google.com/privacy |
A full list of sub-processors is available upon request at privacy@infinitylabssolutions.ai.
15. AI-Native Systems & Automated Processing
Infinity Labs Solutions is an AI-Native firm and uses AI technologies in our operations and content. Here is how that may involve your personal data:
Content personalization: We may use analytics signals (pages viewed, content engaged with) to inform what content or communications may be relevant to you. This is not fully automated; humans review and approve all communications strategy.
AI agents: We operate AI agents internally for operational tasks (scheduling, drafting, analysis). These agents may process information you share with us in the course of our business relationship, under the same data handling standards as human team members.
No high-stakes automated decisions: We do not use automated systems to make decisions that produce legal effects or similarly significant impacts on individuals (such as credit decisions, employment decisions, or access to services) without human review and approval.
If you have questions about how AI is used in relation to your personal data, contact privacy@infinitylabssolutions.ai.