Skip to content
Mercier Labs

legal

Privacy Policy

What we collect, why we keep it, which providers handle it, and how to have it deleted. No advertising trackers and no dark patterns.

last updated 14 October 2026

01The short version

MERCIER LABS LIMITED is the controller of your personal data. We get it from the enrolment form and from any emails you send us, and we use it to talk to you about a course and then to teach it. We don’t sell it, and this site sets no advertising or analytics cookies.

To have your details deleted, email [email protected]. We’ll erase them, apart from anything tax or company law requires us to keep.

02What we collect

What you give us. The enrolment form collects your name, email address and phone number, and optionally your company, job title and country. You can also tell us what you hope to build and how well you know the course’s main tool. Anything you add by email or on the introductory call joins the same record.

What the server logs. Our web server keeps standard access logs: IP address, time, requested URL and browser user agent. We use them for security and fixing faults, and keep them briefly.

What we don’t collect. No advertising cookies, third-party trackers, session replays, fingerprinting or special category data. We never see your card number; payments go through a payment provider.

03What we use it for

  • Replying to your request and arranging the introductory call within one working day (legitimate interests, then contract).
  • Running the course you’ve paid for: session invitations, materials, recordings and code reviews (contract).
  • Invoicing, and keeping the accounting records a UK company must keep (legal obligation).
  • Answering support questions and, now and then, telling past students about a new cohort (legitimate interests). One reply stops those emails.

04Our lawful bases

We process personal data under the UK GDPR and the Data Protection Act 2018. We rely on contract to deliver a course you’ve bought, on legitimate interests to answer your enquiry and keep our systems secure, and on legal obligation to keep financial and company records. Where we rely on legitimate interests, we have balanced them against your rights and won’t use your data in ways you wouldn’t reasonably expect.

05Who else sees it

A few service providers help us run the business, and each one gets only what it needs:

  • a hosting provider, which runs this website;
  • an email provider, which carries our messages to you;
  • a video-call service, which runs live sessions and stores the recordings;
  • a code-hosting service, where cohort repositories live;
  • a payment provider, which handles payment links and invoices;
  • our accountant, who sees the financial records they need.

We never sell, rent or trade personal data, or share it for anyone else’s marketing. If the law requires us to disclose it, we will, and we’ll tell you unless we’re legally prevented from doing so.

06How long we keep it

  • Requests that don’t lead to enrolment: up to twelve months, then deleted.
  • Records of enrolled students: for as long as you could reasonably need your course materials, and no longer than we can justify.
  • Invoices and other financial records: six years from the end of the financial year they belong to, as UK tax and company law requires.
  • Server logs: a few weeks, on a rolling basis.

07Your rights

You can ask for a copy of your data, ask us to correct or delete it, ask us to restrict or stop processing it, or ask for it in a portable format. Email [email protected] and we’ll reply within one month. There’s no form to fill in and no fee for a reasonable request.

If you’re unhappy with how we’ve handled your data, you can complain to the Information Commissioner’s Office at ico.org.uk. We’d appreciate the chance to put things right first.

08Security

Traffic to this site is encrypted in transit. Only the people who need enrolment records to run a course can access them, and every service account we use is protected with multi-factor authentication. If a breach ever affects your data, we’ll tell you what happened, what we know and what we’re doing about it, as the UK GDPR requires.

09Under-18s

Our courses are for adults, and we don’t knowingly collect data from anyone under 18. If you think a child has sent us their details, email us and we’ll delete them.

10Where your data is held

MERCIER LABS LIMITED is a UK company with its registered office at 71-75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom. Our providers may process data in the UK, the EEA or elsewhere. When data leaves the UK, we rely on a recognised safeguard such as UK adequacy regulations or the International Data Transfer Agreement.

11Cookies

We don’t set advertising, analytics or tracking cookies. If a payment or video-call provider needs a strictly necessary cookie to work, that provider sets it when you use their service, not this site. We don’t use this site to build a profile of you.

12Changes to this policy

When this policy changes, the date at the top changes with it. If a change materially affects data we already hold about you, we’ll email you. MERCIER LABS LIMITED, registered in England and Wales, remains the controller, and questions go to [email protected].

Questions about this page?

Email us and a person replies. No ticket numbers, no chatbot.

[email protected]
MERCIER LABS LIMITED71-75 Shelton StreetCovent GardenLondon WC2H 9JQUnited KingdomRegistered in England and Wales, no. 17521215