Privacy Policy

VittoriLabs (“VittoriLabs”, “we”, “us”, or “our”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect personal data when you visit vittorilabs.com or contact us.

1. About VittoriLabs

VittoriLabs is a digital content-repurposing business currently being established. At the time of publication of this Privacy Policy, VittoriLabs has not yet been incorporated as a separate legal entity.

• Business name: VittoriLabs
• Email: contact@vittorilabs.com
• Website: vittorilabs.com

Once VittoriLabs is formally registered, this section will be updated with the applicable legal entity name, legal form, registered office, registration number, and other legally required business information. For purposes of applicable data protection legislation, the person or legal entity responsible for processing personal data through the website will act as the data controller.

2. Personal Data We Collect

Depending on how you interact with our website, we may process:

Information you provide

Our website does not include a contact form. If you contact us by email, phone, or WhatsApp, or if you book a call through our scheduling link, we (and, in the case of scheduling, our scheduling provider — see Section 6) may receive:

• your name
• email address or phone number
• company or organisation name
• information contained in your message
• any other information you voluntarily provide

Our website does not require visitors to create an account, and it does not currently provide a system through which visitors can upload podcast, video, or other files.

Technical information

As with essentially any website, our hosting provider may automatically log basic technical information when you visit our website, such as your IP address, browser type, device type, operating system, pages visited, approximate location, date and time of access, and referring website. We do not currently use Google Analytics or any other analytics, advertising, or tracking tool to analyse this information. If we introduce such a tool in the future, we will update this Privacy Policy and, where legally required, request your consent beforehand.

3. How We Use Personal Data

We may use personal data to:

• respond to enquiries
• communicate with potential and existing customers
• provide information about our services
• prepare quotations or proposals
• provide and administer services
• maintain and improve our website
• maintain website security
• prevent fraud, abuse, or unlawful activity
• comply with legal obligations
• establish, exercise, or defend legal claims

We will not use personal data for purposes incompatible with those described in this Privacy Policy unless permitted or required by law.

4. Legal Bases for Processing

Depending on the circumstances, we may rely on the following legal bases under the GDPR:

Contract

We may process personal data when processing is necessary to enter into or perform a contract with you.

Legitimate Interests

We may process personal data where necessary for our legitimate interests, provided those interests do not override your fundamental rights and freedoms. Examples may include responding to business enquiries, securing our systems, preventing abuse, and defending legal claims.

Legal Obligation

We may process personal data where necessary to comply with a legal obligation.

Consent

Where required, we may process personal data based on your consent. Where processing is based on consent, you may withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing that occurred before withdrawal.

5. Cookies and Tracking Technologies

Our website does not use cookies, and it does not use any analytics, advertising, or tracking technology. We do not use Google Analytics, advertising pixels, or any other analytics or marketing tracking tool.

The typefaces used on this website are downloaded and hosted directly by our website when it is built, so your browser does not contact any third-party font service when you visit our site, and no cookies are set as a result. Our scheduling provider, Cal.com, is only linked to from our Contact page as an external site you may choose to visit — it is not embedded on our website, and no data is exchanged with Cal.com unless you click through and use it yourself. Similarly, WhatsApp is only an external link on our website; visiting it takes you to WhatsApp’s own site or app.

If we introduce cookies, analytics, advertising, or other tracking technologies in the future, we will update this section and, where legally required, request your consent beforehand.

6. Service Providers

We may use third-party service providers to operate our website and business. Based on how our website currently works, this may include:

• our website hosting and infrastructure provider
• our scheduling provider, Cal.com, which our Contact page links to so you can book a call — if you book a call, Cal.com will separately collect and process information such as your name, email address, and selected time slot, under its own privacy policy
• WhatsApp (operated by Meta), if you choose to contact us via the WhatsApp link on our website
• our email provider, if you contact us by email
• professional advisers

Where a third party processes personal data on our behalf, we will take reasonable steps to ensure that appropriate contractual and security safeguards are in place. Our website describes an intended intake process where customers share long-form content via a YouTube link, Google Drive folder, Dropbox link, or Zoom cloud recording. Once VittoriLabs formally launches its content-repurposing services, providers such as these — along with any AI-assisted editing tools used to deliver the service — may process content and any personal data it contains, as described in Sections 7 to 9.

7. AI and Automated Processing

Our marketing website itself does not use artificial intelligence to process visitor data. Once VittoriLabs begins providing content-repurposing services to customers, we expect to use AI technologies as part of our internal workflow to help deliver those services — for example, for transcription, content analysis, identifying potentially useful sections of content, clip selection, scoring, categorisation, metadata generation, editing assistance, and workflow automation.

AI-assisted results may contain errors and may be reviewed or modified before being delivered to customers where appropriate. We will not use personal data for AI model training unless this is separately disclosed and legally permitted or the required consent has been obtained.

8. Client Content

When VittoriLabs begins providing services involving customer content, customers may provide podcasts, videos, audio recordings, transcripts, or other materials. Customers remain responsible for ensuring that they have the necessary rights and permissions to provide such content to VittoriLabs. Where customer content contains personal data, VittoriLabs will process that data only to the extent necessary to provide the agreed services and in accordance with applicable data protection law. Additional data-processing terms may apply where VittoriLabs acts as a processor on behalf of a customer.

9. Data Storage

Once VittoriLabs begins providing services, we expect to use secure cloud infrastructure — potentially including Google Drive, Dropbox, or similar file-storage and file-sharing services referenced on our website — to store business and client-related files. Personal data will be retained only for as long as reasonably necessary for the purpose for which it was collected, unless a longer period is required by law or necessary to establish, exercise, or defend legal claims. Specific retention periods may vary depending on the type of data and the purpose of processing.

10. International Data Transfers

Some third-party service providers used by VittoriLabs may process personal data outside the European Economic Area. Where personal data is transferred outside the EEA, we will use an appropriate lawful transfer mechanism where required, such as an adequacy decision, Standard Contractual Clauses, or another lawful mechanism recognised under applicable data protection law.

11. Data Security

We take reasonable technical and organisational measures designed to protect personal data against unauthorised access, accidental loss, destruction, alteration, unauthorised disclosure, and unlawful processing. However, no internet transmission or electronic storage system can be guaranteed to be completely secure.

12. Data Retention

We retain personal data only for as long as reasonably necessary for the relevant purpose. For example, enquiry communications may be retained while necessary to respond and manage the relationship, and customer and contractual information may be retained for the duration of the relationship and for periods required by law. When information is no longer required, we will delete or anonymise it where reasonably possible.

13. Your Rights

Subject to applicable law, you may have the right to:

• request access to your personal data
• request correction of inaccurate data
• request deletion of your data
• request restriction of processing
• object to certain processing
• request data portability
• withdraw consent
• lodge a complaint with a data protection supervisory authority

To exercise your rights, contact contact@vittorilabs.com. We may need to verify your identity before fulfilling certain requests.

14. Complaints

If you have concerns about how VittoriLabs processes your personal data, please contact us first so that we can attempt to resolve the issue. You may also lodge a complaint with the competent data protection supervisory authority in accordance with applicable law.

15. Children’s Privacy

Our website and services are not specifically directed toward children. We do not knowingly collect personal data from children for purposes requiring parental consent. If you believe that a child has provided personal data to us unlawfully, please contact us.

16. Third-Party Websites

Our website contains links to third-party websites and services, such as our scheduling provider and WhatsApp. We are not responsible for the privacy practices, security, or content of third-party websites. We recommend reviewing the privacy policies of any third-party website before providing personal information to it.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our services, our technology, our business, or applicable law. The latest version will be published on this page with an updated “Last updated” date.

18. Contact

If you have questions about this Privacy Policy or the processing of your personal data, contact VittoriLabs at contact@vittorilabs.com.

Legal entity information: to be updated following the formal registration of VittoriLabs.