Privacy Policy

PearLabs is the data controller responsible for the personal data processed through this website.

PearLabs, S.à r.l.-S
63 Rue Joseph Philippart, L-4845 Rodange, Luxembourg

Registered with the Luxembourg Trade and Companies Register under RCS B310390. Establishment authorisation N° 10197830 / 0. PearLabs is not currently registered for VAT.

The contact form collects your name, email address, company, message, and any optional budget or project-type details you provide. The website configurator collects your project and business selections, name, email address, and any optional phone or company details. While you use the configurator, your in-progress selections are stored in this tab's session storage and are cleared after a successful submission or when the tab session ends. A submitted configurator request may be sent to and stored in the shared Supabase database used by the PearLabs client portal when delivery succeeds; a website response alone does not prove portal storage. Vercel Analytics and Vercel Speed Insights load only for the optional purpose you select.

The client portal processes invitation details and emails, passwordless magic-link authentication and session/security metadata, client contacts, projects and status history, project messages, internal staff notes, private project files and filenames, public CMS text and images, invoice and billing identity/address/status data, data-export and erasure cases, and security/request/device logs. Website quote requests and portal records use one shared Supabase database; files and CMS media use private or public Supabase Storage according to their function.

We receive data directly from you, through a website contact or configurator request. We may also receive it indirectly, when PearLabs staff or a client organisation using our portal creates a contact record and invites that person to the portal. In that indirect case, the portal invitation email itself is the point of first communication with that person, and it links to this Privacy Policy — satisfying the notice requirement under Article 14(3)(b) GDPR.

Submitting a contact or configurator request does not mean accepting this Privacy Policy. We process contact-form and configurator submissions under Article 6(1)(b) GDPR, as steps you asked us to take before a possible service agreement. We process the minimum technical data needed to operate and secure the website under Article 6(1)(f) GDPR, our legitimate interest in keeping the site functional and safe. Vercel Analytics, Vercel Speed Insights, and the Cal.com scheduling embed each run only on your consent (Article 6(1)(a)), given independently for each purpose through the cookie banner.

We use contact-form data to respond to your inquiry. We use configurator data to prepare and send your estimate, notify our team, and create a quote request in the client portal. We also operate and secure the website. We do not sell or rent this data to third parties.

Resend delivers contact-form messages to our inbox. For configurator requests, Resend delivers a confirmation email to you and a project summary to our inbox. The request may also be sent server-to-server to the PearLabs client portal and stored in the shared Supabase database when delivery succeeds. Vercel Analytics, Vercel Speed Insights, and the Cal.com widget each load only for their separately selected optional purpose; without scheduling-embed consent, booking remains available as a plain link. Provider information: https://resend.com/legal/privacy-policy, https://supabase.com/privacy, https://vercel.com/docs/analytics/privacy-policy, https://vercel.com/docs/speed-insights/privacy-policy, and https://cal.com/privacy.

PearLabs acts as controller for its own marketing, inquiry intake, portal account administration, service delivery, billing, and security purposes — this covers all data described above about our own website visitors, prospects, and portal account holders. When a client instead uses the portal to store or manage personal data about that client's own customers, contacts, or staff, PearLabs acts as that client's processor: the client determines why and how that data is used, and our client services agreement sets out our processing obligations to them.

Resend, Supabase, Vercel, and Cal.com each process data in the United States. Each relies on the European Commission's Standard Contractual Clauses to lawfully transfer that data from the EEA: Resend also self-certifies under the EU-U.S. Data Privacy Framework (including its UK extension); Cal.com relies on Standard Contractual Clauses or the EU-U.S. Data Privacy Framework. See each provider's own policy, linked above, for their current safeguards and any sub-processor transfers.

We do not keep personal data for longer than we need it. How long that is depends on why we hold it, so we describe the criteria we use rather than a single fixed period. Enquiries and quote requests: while we are discussing a possible project with you, and afterwards while there is a realistic prospect of working together or we need the record to answer a later question about it. Client project data in the portal: while your account and our working relationship continue. Invoices and accounting records: for the period Luxembourg accounting and tax law requires. Optional analytics: only while your consent stands — withdrawing it stops further collection. Removal is currently carried out by us on request or on review, not automatically. You can ask us to delete your data at any time using the contact details below, and we will do so unless a legal retention requirement applies.

A portal export is a convenience copy and may not contain every record held across the shared database, Storage, email providers, security logs, or backups. A complete access, export, or erasure request therefore requires manual review of project/status history, messages, staff notes, file contents and filenames, CMS text/images, billing records, provider copies, and rights-case records. Deletion may leave material that must be reviewed manually or retained under a valid legal exception or backup schedule; PearLabs does not claim immediate or complete automated deletion.

Under the GDPR, you have the following rights over your personal data:

• Access. Request a copy of the personal data we hold about you.
• Rectification. Ask us to correct inaccurate or incomplete data.
• Erasure. Ask us to delete your personal data, subject to any legal retention requirements.
• Restriction. Ask us to limit how we use your data while a request is being resolved.
• Portability. Request your data in a structured, commonly used, machine-readable format.
• Objection. Object to processing that is based on our legitimate interests.

If you believe we have not handled your personal data properly, you have the right to lodge a complaint with Luxembourg's data protection authority, the Commission Nationale pour la Protection des Données (CNPD).

Open the CNPD complaint form (cnpd.public.lu)

To exercise any of the rights listed above, or to ask a question about how we handle your data, contact us by email.

Email us at: contact@pearlabs.lu

This site stores versioned, purpose-specific choices in local storage and your temporary, in-progress configurator selections in session storage. Each optional Vercel service and the Cal.com embed loads only when its own purpose is selected. See our Cookie Policy and use Cookie settings in the footer to change each choice.

Read the: Cookie Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by the updated date at the top of this page.