Privacy notice

Who I am

Ultimate Human Labs is a trading name of PSYNCD LTD, a private limited company registered in England and Wales, company no. 16730550. Registered office: 71–75 Shelton Street, London, WC2H 9JQ. It is run by Stephan Scantlebury. Email: info@ultimatehumanlabs.com. I'm responsible for your information (the "controller").

What I collect

From this website: your name and email when you ask me to hold a place at a breakfast or to tell you when the book is out. If you write to me about your organisation: your name, work email, the organisation's name and anything you write in the message box.

At a café session: nothing is booked and nothing is written down about you unless you ask me to stay in touch.

If we work together: what the work needs, as agreed with you or your organisation, and payment records.

What you have to give: anything marked optional you can leave out. Without your name and email I can’t hold your place at a breakfast, reply about your organisation, or tell you when the book is out.

Why I hold it, and on what basis

To hold your place at a breakfast and send you the details: because you've asked me to (taking steps at your request). To tell you when the book is out: your consent. To reply when you write about your organisation: my legitimate interest in answering an enquiry you sent. To deliver work we agree: our agreement. Financial records: because the law requires me to keep them. I don't send marketing to anyone who hasn't said yes. No decisions about you are made automatically: every decision is mine.

Who sees it, and where it's stored

Only me. Never your employer: what your organisation sees when I work inside it is set out on the For organisations page.

What you send through this website goes straight into my client records system, which runs on Google Firebase (Google Cloud). The part that receives it runs in Google's London region. The same system holds the work of PSYNC’D, my one-to-one survey: your record shows which of the two you've been in touch with, and nothing is shared with anyone outside it. To limit misuse, the website records only a scrambled form of your connection's address, never the address itself. My email is provided by IONOS: emails between us are sent and stored in my IONOS mailbox. This website is hosted on Google Firebase. My client records system uses AI from Anthropic to help me write emails and find things in my records. Before anything is sent, my clients’ names, email addresses and phone numbers are swapped for stand-ins, except your first name when I ask it to help write an email to you. Anthropic acts on my instructions as a processor and is not allowed to use what it’s sent to train its AI. It handles it in the US, under the UK’s approved data-transfer terms. Google and IONOS act on my instructions as processors. Where any of them handle information outside the UK, it is either in a country the UK has approved as protecting personal information properly, or under the UK’s approved data-transfer terms. Email me if you’d like a copy of the safeguards relied on.

Inner Trove, when it opens, will be a separate service with its own privacy notice and its own records, kept outside my client records system. Nothing from your Inner Trove results, reports or briefs will come to me.

Cookies and tracking

This website sets no cookies and uses no analytics or advertising trackers. Its fonts are served from the site itself, so opening a page sends nothing to anyone else. If you pause the moving banner at the top, your browser remembers that until you close the tab; nothing about it is sent anywhere.

How long I keep it

A breakfast place or an organisation enquiry that goes no further: 12 months, then deleted. Book interest: until I've told you the book is out, or sooner if you ask. Records of work we do together: six years after it ends, then deleted, because that is how long a legal claim about the work can be brought. Financial records: six years, as the law requires.

How it's kept safe

My client records can only be opened by me, after signing in. Google encrypts the information while it travels and while it's stored. The website's forms turn away automated submissions, and limit how many can come from one connection. My accounts are protected with two-step sign-in.

Your rights

You can ask to see what I hold about you, have it corrected or deleted, restrict or object to how I use it, receive a copy to take elsewhere, or withdraw your consent. Email info@ultimatehumanlabs.com. I'll reply within one month.

Complaints

You have the right to complain to me about how I handle your information. Email info@ultimatehumanlabs.com, or contact me any other way. I'll acknowledge your complaint within 30 days, look into it without undue delay, keep you updated, and tell you the outcome. You can also complain to the Information Commissioner's Office (ICO) at ico.org.uk.