Privacy policy

Controller

OnsetLab LLC, operating under the trade name Make Lab

Address

1001 S Main St, Ste 500, Kalispell, MT 59901, United States

Contact

contact@makelabco.com

We only collect what we need to review your project and get back to you.

• Messages: if you write to us on WhatsApp or by email, your name, your phone number or email address, and the content of your messages.
• Questionnaire and estimate: your answers about the project (type, situation, needs, square footage or number of products, finish, city, progress, budget, date, description).
• Forms (questionnaire, estimate, other need): first name, last name, email, phone (WhatsApp preferred), who is behind the project (existing company, company being formed or no company yet), company name if any, how you heard about us and, if you tell us, who referred you, the website language, your consent and its date.
• Where your visit came from: the campaign parameters in the landing URL (utm), the click identifier of a Google ad if there is one (gclid, gbraid or wbraid) and the first page viewed on the website, attached to your request.
• First call: if you book a time slot, the Cal.com calendar receives what you enter (first name, last name, email, phone, time slot, request reference). It only loads at that point.
• Audience measurement (Plausible): aggregate traffic statistics (pages viewed, referring site, device and browser type, country), with no cookies and no personal data.
• Security: an encrypted fingerprint of your IP address (never the address itself) to limit the number of submissions.
• Advertising campaign measurement (Google Ads): when you send a request, its technical number and the project profile, without your contact details, are reported to Google Tag Manager. If you accept the Advertising category in the cookie banner, the Google Ads cookies in your browser, your email address and your WhatsApp number, hashed (SHA-256 fingerprint, never in plain text), are also used to link the request to the ad.

Reviewing your request and getting back to you

Pre-contractual steps taken at your request, and your consent (form checkbox)

Emailing you your estimate, prepared by our team

Pre-contractual steps taken at your request

Organizing the first call

Pre-contractual steps taken at your request

Measuring website traffic, without cookies

Legitimate interest: understanding which pages are useful

Knowing which ad or campaign brought you to send a request

Legitimate interest: measuring how well our ads work

Protecting the forms from abuse

Legitimate interest: website security

Advertising campaign measurement: knowing whether a visit from a Google ad ends in a request

Your consent (Advertising category in the cookie banner), which you can withdraw at any time

The only automatic email is the confirmation that we received your request: no follow-ups, no newsletter. We never sell or rent your data.

Your data is read by the Make Lab team reviewing your project. It is hosted or transmitted on our behalf, and under our instructions, by the following providers.

Hostinger International Ltd. · Cyprus (European Union)

Website hosting, form processing, storage of requests and sending of the website’s emails (confirmation of receipt, team notification)

Plausible Insights OÜ · Estonia (European Union)

Cookie-free audience measurement, as aggregate statistics

Cal.com, Inc. · United States

Calendar for booking a call, only if you book a time slot

WhatsApp Ireland Limited · Ireland (European Union)

Messaging, if you choose to write to us on WhatsApp

Google (Gmail) · Ireland and United States

Email for contact@makelabco.com: receiving your emails and new-request notifications

Google Ireland Limited · Ireland (European Union): Google Ads and Google Tag Manager

Advertising campaign measurement: loading the tags (Google Tag Manager) and conversions from our ads (Google Ads), according to your cookie choices

OnsetLab LLC is established in the United States (State of Montana): the team reviewing your request accesses it from the United States.

Safeguards in place for each provider established outside the European Union:

Cal.com, Inc. · United States

Certified under the EU-U.S. Data Privacy Framework, with the European Commission’s standard contractual clauses as a complement

Google LLC · United States

Certified under the EU-U.S. Data Privacy Framework

Hostinger, Plausible and WhatsApp Ireland are established in the European Union. You can get a copy of these safeguards by writing to contact@makelabco.com.

Data Privacy Framework list (opens in a new tab)

Request or message with no follow-up

3 years after the last contact

Request followed by a project with us

For the duration of the relationship, then 5 years

Audience measurement

Aggregate statistics, no personal data

IP address fingerprint (submission limit)

1 day

Hosting backups

Weekly backups, kept for 6 weeks

Host’s technical logs

Set by Hostinger; Make Lab does not use them

Questionnaire saved in your browser

Until your request is sent successfully

Google Ads cookies, if you accept them

90 days at most; your cookie choice is kept for 6 months

So you don’t lose anything, your questionnaire answers (contact details included) are saved as you go in your browser (local storage). They’re only sent to us when you submit your request, and are erased as soon as it goes through. If sending fails, they stay on your device so you can try again.

You can erase them at any time by clearing the website’s data in your browser settings. The details of this storage are on the cookie settings page.

Cookie settings

• Access your data and get a copy of it.
• Have it corrected or completed.
• Have it erased.
• Object to its processing, or ask for it to be restricted.
• Receive it in a readable format to pass it on to another provider (portability).
• Withdraw your consent at any time, without affecting what was done before.
• Set instructions for what happens to your data after your death.

Write to us at contact@makelabco.com, including the email address or phone number used for your request. We reply within one month. We’ll only ask for proof of identity if we have reasonable doubt.

If you believe your rights aren’t being respected, you can file a complaint with the data protection authority of your country of residence. In France, that’s the CNIL (Commission nationale de l’informatique et des libertés), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, which also accepts complaints online.

File a complaint with the CNIL (opens in a new tab)

The website is served over HTTPS only. Requests are saved by our server in private files that can’t be accessed from a browser. Service access keys are never sent to the browser, and access to requests is limited to the team.

This policy may change, for example if a new service is added. The date of the last update is shown at the top of the page.