Privacy Policy

01

Who We Are

RWA LAB is a service operated by DPMF Technology, a company governed by the laws of England and Wales. We provide free professional 3D artwork scanning, NFT minting, and fractional tokenisation services for artists.

When this policy refers to "we", "us", or "RWA LAB", it means DPMF Technology.

02

What Data We Collect

When you submit a booking enquiry through our website, we collect the following information:

• Name — first and last name
• Email address
• Phone number — if provided
• Studio location — city or area
• Artwork details — medium, number of pieces, and any description you provide
• How you heard about us

We also collect standard website analytics data automatically when you visit rwalab.art, including pages visited, time on site, device type, and approximate location. This is collected via Google Analytics 4 and does not identify you personally.

03

How We Use Your Data

We use the information you submit solely for the following purposes:

• To respond to your booking enquiry and arrange your free scan session
• To communicate with you about your session, including scheduling and preparation
• To maintain a record of our artist engagements
• To improve our service and website based on aggregate analytics data

We will never use your data to send unsolicited marketing from third parties, sell it to anyone, or use it for any purpose unrelated to your booking enquiry and our service.

04

Legal Basis for Processing

Under UK GDPR, we process your personal data on the following legal bases:

• Legitimate interests — to respond to your enquiry and deliver the service you have requested
• Consent — you explicitly tick a box agreeing to us contacting you before submitting the form
• Legal obligation — where we are required to retain certain records under English law

05

Who We Share Your Data With

We do not sell your data. We share it only with the following trusted services that help us operate:

• Formspree — our form submission processor, which delivers your enquiry to our inbox. Formspree processes data in accordance with its own privacy policy.
• Google Analytics 4 — anonymous website analytics. Google may process data outside the UK; they are certified under the UK-US Data Bridge.
• Meta (Facebook) Pixel — anonymous ad measurement, only if you have consented via your browser or device settings. No personally identifiable data is shared.

Beyond these processors, your data is not shared with any other third parties.

06

How Long We Keep Your Data

We retain booking enquiry data for up to 3 years from the date of your submission, or until you ask us to delete it, whichever comes first. This allows us to follow up on sessions and maintain a reasonable record of artist engagements.

Anonymous analytics data is retained in line with Google Analytics' standard data retention settings.

07

Your Rights

Under UK GDPR you have the following rights regarding your personal data:

• Right of access — to request a copy of the data we hold about you
• Right to rectification — to ask us to correct inaccurate data
• Right to erasure — to ask us to delete your data ("right to be forgotten")
• Right to restrict processing — to ask us to limit how we use your data
• Right to object — to object to us processing your data for legitimate interests
• Right to data portability — to receive your data in a portable format
• Right to withdraw consent — to withdraw consent at any time, without affecting the lawfulness of processing before withdrawal

To exercise any of these rights, email us at merchandiselabs@gmail.com. We will respond within 30 days.

If you are unsatisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

08

Cookies

Our website uses the following cookies and tracking technologies:

• Google Analytics (_ga, _gid) — analytics cookies that help us understand how visitors use the site. These do not identify you personally. They expire after 2 years (_ga) and 24 hours (_gid).
• Meta Pixel — used for measuring the effectiveness of advertising. This is only active if you have not opted out via your browser or device ad settings.

We do not use any essential session cookies. You can control or disable analytics cookies through your browser settings or via Google's opt-out tool.

09

Data Security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. Our website is served over HTTPS and form submissions are processed by Formspree using encrypted transport.

No method of transmission over the internet is completely secure. If you have concerns about the security of your data, please contact us at merchandiselabs@gmail.com.

10

Changes to This Policy

We may update this privacy policy from time to time. When we do, we will update the "last updated" date at the top of this page. We encourage you to review this policy periodically.

Continued use of our website or services after any changes constitutes your acceptance of the updated policy.

11

Contact Us

If you have any questions about this privacy policy or how we handle your data, please get in touch: