GDPR Statement
Our commitment to the European Union General Data Protection Regulation.
Last updated: 2026-04-16
Qilin Lab is a global technology services company headquartered in Bangalore, India. When we process personal data of individuals in the European Economic Area, the United Kingdom, or Switzerland, we do so in accordance with the General Data Protection Regulation (GDPR) and the UK GDPR. This statement summarises the rights available to data subjects, the lawful bases on which we rely, our retention schedule, and how enterprise customers can request a Data Processing Agreement.
Summary of Rights
If you are a data subject under the GDPR, you are entitled to exercise the following rights in relation to the personal data we hold about you:
- Right of access — obtain confirmation of whether we process your data and receive a copy of that data.
- Right to rectification — request correction of inaccurate or incomplete information.
- Right to erasure — request deletion of your data where we no longer have a lawful basis to retain it.
- Right to data portability — receive the data you provided in a structured, commonly used, machine-readable format.
- Right to restriction of processing — ask us to limit how your data is used in specified circumstances.
- Right to object — object to processing based on legitimate interests or for direct marketing.
- Rights related to automated decision-making — not to be subject to decisions based solely on automated processing, including profiling, that produce legal or similarly significant effects.
To exercise any of these rights, email us at hello@qilinlab.com. We will respond within one month as required by the GDPR.
Lawful Bases
We process personal data on one or more of the following lawful bases under Article 6 of the GDPR:
- Consent — for non-essential cookies, marketing communications, and other activities where we ask for your explicit permission.
- Performance of a contract — to deliver the services you or your employer has engaged us to provide and to manage the commercial relationship.
- Legal obligation — to meet tax, accounting, and regulatory requirements applicable to our business.
- Legitimate interests — to operate and secure our website, respond to enquiries, and improve our services, balanced against the rights and freedoms of data subjects.
Data Protection Officer
While Qilin Lab is not required to appoint a statutory Data Protection Officer, we maintain a dedicated privacy contact to handle data protection enquiries. You can reach this contact at hello@qilinlab.com.
How to File a Complaint
If you believe that our processing of your personal data infringes the GDPR, you have the right to lodge a complaint with a supervisory authority. You may file a complaint with the authority in the Member State of your habitual residence, place of work, or the location of the alleged infringement. Where appropriate, we encourage you to contact us first so that we can address your concern directly.
Data Retention Schedule
We retain personal data only for as long as necessary. At a high level:
- Contact-form submissions and sales enquiries: up to 24 months from last interaction.
- Client engagement records and deliverables: duration of the engagement plus 7 years for tax, audit, and contractual purposes.
- Marketing subscriber records: until you unsubscribe, and then a short suppression-list retention to honour your opt-out.
- Cookie-consent records: 12 months, after which we re-prompt for consent.
- Recruitment records: up to 12 months for unsuccessful candidates, unless you consent to be kept on file for longer.
Data Processing Agreement
Where Qilin Lab processes personal data on behalf of an enterprise customer as a processor, a Data Processing Agreement (DPA) is made available to formalise the obligations required by Article 28 of the GDPR. The DPA incorporates the European Commission’s Standard Contractual Clauses for international transfers where applicable. Enterprise customers can request our standard DPA by emailing hello@qilinlab.com.
This document is provided as a good-faith summary and is not legal advice. Consult your legal counsel before relying on it.