Privacy Policy

This Privacy Policy describes how Sideways Lab Ltd ("we", "us", or "our") handles personal data across our website and applications. Each application also has its own policy covering what that product collects; where the two differ, the application's own policy governs that app.

1. Who We Are

Sideways Lab Ltd is the data controller for the personal data described in this policy — we decide why and how it is used. We are registered in England and Wales under company number 17139067, with a registered office at Apartment 405 Manor Apartments, 2-4 Manor Row, Bradford, BD1 4AZ.

For any privacy question, or to exercise your rights, email [email protected] or write to us at the address above.

Responsibility for data protection at Sideways Lab Ltd sits with our Privacy Officer, who can be reached at [email protected] or at the registered office above. Requests and complaints reach a person, not an unmonitored inbox.

2. What This Policy Covers

This policy covers our website at sidewayslab.com and any enquiry you send us directly. Our applications collect more than the website does, so each has a fuller policy of its own:

• ChapterUp Privacy Policy — the reading habit tracker.
• LoveLedger Privacy Policy — the points-and-appreciation app for couples.

3. Our Website

sidewayslab.com is a static site. It sets no cookies, uses no tracking pixels, and runs no analytics. We do not build a profile of you from your visit.

The site is hosted on Cloudflare Pages. Like any web host, Cloudflare processes your IP address and basic request information in order to deliver pages to you and to protect the site from abuse. Cloudflare acts as our processor for this.

4. When You Contact Us

If you email us, we receive your email address, your message, and anything you choose to include in it. We use that solely to answer you and to keep a record of the exchange. We do not use it for marketing, and we do not sell it or share it with anyone for their own purposes.

5. Our Legal Bases

Under the UK GDPR we must have a lawful basis for each use of personal data. Ours are:

• Legitimate interests — to run and secure the website, and to read and reply to enquiries you send us. Our interest is in operating a reliable service and answering the people who contact us; it does not override your rights, and you can object at any time (see section 9).
• Legal obligation — where we must keep records or respond to a lawful request, for example for tax or in response to a valid legal demand.
• Consent — where we ask for it explicitly. You can withdraw consent at any time, and withdrawing it is as easy as giving it.

The lawful bases our applications rely on are set out in their own policies, linked in section 2.

6. Data Retention

We keep personal data only as long as we need it for the purpose we collected it for. Correspondence is kept for up to 24 months after the enquiry is resolved, so we have context if you write to us again. Records we are legally required to hold — such as records relating to purchases — are kept for as long as the law requires, typically six years for UK tax purposes. We delete or anonymise data once the applicable period ends.

7. Data Security

We implement appropriate technical and organisational measures to protect your data, including encryption in transit and at rest, access controls, and regular security reviews. No system is perfectly secure, but we take this seriously and will notify you and the ICO where the law requires it after a breach.

8. Third-Party Links

Our website and applications may contain links to third-party services such as app stores and external websites. Once you follow one of those links you are on someone else's service, and their privacy practices apply rather than ours. We are not responsible for them.

9. Your Rights

If you are in the UK or the EU/EEA, data protection law gives you the following rights over your personal data. We honour these rights for all our users, wherever you live:

• Access — get a copy of the personal data we hold about you.
• Rectification — have inaccurate or incomplete data corrected.
• Erasure — have your data deleted where there is no ongoing reason to keep it.
• Restrict processing — ask us to pause how we use your data while a concern is resolved.
• Object — object to processing we base on legitimate interests, including at any time to direct marketing.
• Portability — receive the data you gave us in a portable, machine-readable format.
• Withdraw consent — where we rely on consent, withdraw it without affecting processing already carried out.

To exercise any of these, email [email protected]. We will respond within one month. There is no charge, and we may ask you to verify your identity first. To delete data held inside an app, see that app's policy — both ChapterUp and LoveLedger let you delete your account from within the app.

If you are unhappy with how we have handled your data, you can complain to your local data protection authority. In the UK that is the Information Commissioner's Office (ICO) — ico.org.uk/make-a-complaint, helpline 0303 123 1113. We would appreciate the chance to put things right first.

10. Changes

We may update this policy from time to time. We will revise the "Last updated" date above, and communicate material changes through our website or applications.

11. Contact

For privacy-related enquiries, email [email protected], or write to Sideways Lab Ltd, Apartment 405 Manor Apartments, 2-4 Manor Row, Bradford, BD1 4AZ.