Bytesized-Labs
Last updated: 24 October 2026
1. Who We Are
Bytesized-Labs is an independent UK technology business specialising in artificial intelligence, business automation and practical digital solutions for small businesses.
Bytesized-Labs is operated by Robert Duggan, trading as Bytesized-Labs.
Website: www.bytesized-labs.com
General enquiries: rob@bytesized-labs.com
Data protection enquiries: security@bytesized-labs.com
For personal information collected through our website and our own business activities, Bytesized-Labs acts as the data controller.
We are committed to protecting your privacy and handling personal information responsibly in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2. Information We Collect
We may collect the following information when you interact with our website or contact us:
- Your name and business name.
- Your email address and telephone number, where provided.
- Information included in enquiries, correspondence or contact forms.
- Business contact information provided during discussions about our services.
- Technical information associated with website operation, security and troubleshooting.
We do not intentionally collect sensitive personal information through our public website.
Please avoid submitting passwords, payment details, medical information or other sensitive information through general enquiry channels.
3. How We Use Your Information
We use personal information to:
- Respond to enquiries and provide requested information.
- Discuss potential projects and commercial opportunities.
- Deliver and support agreed services.
- Manage business relationships and contractual obligations.
- Maintain website security and reliability.
- Comply with applicable legal and regulatory requirements.
Our lawful bases for processing information may include legitimate interests, taking steps before entering a contract, fulfilling contractual obligations and complying with legal requirements.
Where consent is required, we will request it separately.
4. Artificial Intelligence and Automation Services
Bytesized-Labs develops AI assistants and business automation solutions designed to help organisations improve efficiency and manage everyday operations.
Where we provide these services to another business, that business will generally act as the data controller for its customer and operational information, while Bytesized-Labs acts as a data processor under an appropriate agreement.
Our approach includes:
- Processing only information necessary for an agreed purpose.
- Minimising personally identifiable information shared with external AI providers.
- Replacing identifying details with reference codes where supported.
- Applying appropriate security and access controls.
- Not using client personal information to train our own AI models.
Specific arrangements for customer deployments, including external AI providers, data retention and international transfers, are addressed in the relevant agreements and privacy information.
5. Sharing Your Information
We do not sell personal information.
We may share information with trusted technology providers where necessary to operate our business, including:
- IONOS: Website hosting and business email services.
- Google: Business document management and administration.
- Other technology providers: Where required to deliver agreed services.
We may also disclose information where required by law.
Where third parties process personal information on our behalf, we seek to ensure appropriate contractual and security safeguards are in place.
6. International Data Transfers
Some technology providers may process personal information outside the United Kingdom.
Where international transfers occur, we assess the applicable legal requirements and use appropriate safeguards, including recognised adequacy arrangements or approved contractual protections.
7. How Long We Keep Information
We retain personal information only for as long as reasonably necessary for legitimate business, contractual and legal purposes.
Our intended standard retention periods are:
- General enquiries: Up to two years after the last contact.
- Client correspondence: Normally up to two years after the engagement ends.
- Contractual and financial records: Generally up to six years, subject to applicable legal obligations.
- Website technical logs: According to the hosting provider’s applicable retention arrangements.
Information processed for individual customer projects may be subject to separate retention periods specified in the relevant agreements.
8. Cookies and Website Technologies
Our website may use essential technologies required for its operation, functionality and security.
Where optional analytics, marketing or other non-essential cookies are used, we will provide appropriate information and obtain consent where required by law.
Details of any cookies used will reflect the website’s actual configuration.
9. Your Data Protection Rights
Under UK data protection law, you may have the right to:
- Request access to personal information we hold about you.
- Request correction of inaccurate information.
- Request deletion of information in certain circumstances.
- Restrict or object to certain processing activities.
- Request data portability where applicable.
- Withdraw consent where processing relies on consent.
To exercise your rights, please contact:
We will normally respond within one month, subject to applicable legal requirements.
If you are dissatisfied with how we handle your information, you may contact the Information Commissioner’s Office (ICO):
Website: www.ico.org.uk
Telephone: 0303 123 1113
10. Information Processed on Behalf of Clients
Where Bytesized-Labs operates AI assistants or automation systems on behalf of another organisation, that organisation generally determines how its customers’ personal information is used.
Requests concerning information controlled by one of our clients should normally be directed to that organisation.
We will assist our clients in meeting their applicable data protection obligations.
11. Information Security
We use proportionate technical and organisational measures to protect information against unauthorised access, misuse, loss and disclosure.
These measures may include encrypted communications, access restrictions, secure hosting and administrative security controls.
Although we take information security seriously, no internet-based service can guarantee absolute security.
12. Changes to This Policy
We may update this Privacy Policy to reflect changes in our business, services, technology or legal obligations.
The latest version will be published on this website with its revision date.
13. Contact Us
For questions about this Privacy Policy or how we handle personal information, contact:
Bytesized-Labs
Robert Duggan, trading as Bytesized-Labs
Email: security@bytesized-labs.com
Website: www.bytesized-labs.com