1. Who is responsible
Somos Digilab LLC, 1100 24th Street, Des Moines, Iowa 50311, United States, is responsible for personal information it collects for its own enquiries, customer administration and marketing. Contact info@somosdigilab.com with privacy questions or requests. This notice covers somosdigilab.com and the DigiLab service and AI Video Studio pages linked from it; independently operated client websites have their own notices.
When DigiLab handles your customer or employee information on your instructions as part of a project, your organisation may be the controller and DigiLab a processor. That relationship needs a separate data processing agreement.
2. Information we collect
Information you provide may include your name, contact details, business name, website or social account, project goals, budget range, billing details, correspondence, approvals and files needed for the agreed service. Filming and creative projects can involve photographs, video, voices and authorised likeness references. Please do not submit passwords, payment-card details, health information or confidential customer datasets in a general enquiry form.
Website and payment providers may process device and browser information, IP addresses, access logs, session identifiers, transaction details and cookie preferences. Payments are processed through Wix and the payment services presented at checkout. DigiLab uses order, payment-status and billing information to administer purchases; do not send full card details to our team.
3. Purposes and legal bases
Where GDPR applies, the basis depends on the purpose:
- Enquiries, quotes and service delivery: taking steps at your request before a contract and performing our contract with you. For business representatives, our legitimate interest is managing a requested business relationship.
- Billing, accounting and required records: applicable legal obligations and, where relevant, contract administration.
- Security, support and disputes: legitimate interests in protecting accounts, resolving problems and establishing or defending claims, subject to your rights.
- Optional marketing, consent-based cookies and portfolio use: consent where required. These choices are separate from purchasing a service and may be withdrawn.
Required form fields enable us to answer or process your request; without the necessary information we may be unable to provide the requested service. Optional fields and marketing choices are not required to purchase.
4. Providers and recipients
Our website uses Wix for website functions, forms, bookings, customer administration and checkout. Some linked service pages are hosted through ChatGPT Sites. Booking links can open Google Calendar. A project may also require approved cloud storage, communication, design, video, AI or automation providers and authorised team members or contractors. The project scope determines which tools receive its materials.
Information may also be disclosed to professional advisers, payment providers or competent authorities where required for a lawful purpose. A link to another service opens an environment governed by that provider’s own notice; an embedded service may also receive technical connection information.
Provider information: Wix Privacy Policy, OpenAI Privacy Policy, and Google Privacy Policy. Ask us for the providers relevant to your project before supplying restricted information.
5. International processing
DigiLab is a US company and uses international service providers. Information may be processed in the United States, Europe and other locations used by the relevant provider. Storage is not represented as exclusively within the EU.
Where GDPR transfer restrictions apply, an appropriate transfer mechanism and any required supplementary measures must be established for that transfer. Depending on the recipient and circumstances, this may involve an applicable adequacy decision or Standard Contractual Clauses. Contact us for information about the destination and applicable safeguards for your project, or to request a copy where available. This notice does not itself establish a transfer agreement or claim that every provider is certified under a particular framework.
6. Retention and project downloads
Shared final-delivery folders are removed seven calendar days after the service ends or after all contracted final deliverables are made available, whichever is later. We provide the download deadline. Retention of other records is separate:
- Enquiries and correspondence: while needed to handle the request, an active relationship or a related claim; reviewed when that purpose ends.
- Invoices, contracts and acceptance records: for applicable accounting, tax, evidential and limitation requirements.
- Working files and backups: according to the project’s delivery obligations, necessary recovery period, provider deletion cycles and any legal hold.
- Selected portfolio materials: only within the scope and duration of the separate permission, with withdrawal handled where consent applies.
The seven-day delivery window does not mean every copy, financial record or backup disappears on that date. Ask us about a particular record or project; information no longer needed for its lawful purpose should be deleted or anonymised.
7. Your choices and rights
Where applicable, you may request access, correction, erasure, restriction or portability of your personal data, and object to processing based on legitimate interests. You may object to direct marketing and withdraw consent at any time, without affecting processing that was lawful before withdrawal. Rights are subject to their legal conditions, including records that must be retained.
Email info@somosdigilab.com. We may request proportionate information to verify your identity. Where GDPR applies, we normally respond within one month; if a lawful extension is needed, we will explain it. You can complain to your local supervisory authority, including the Irish Data Protection Commission where relevant.
8. Security, children and changes
We aim to limit access and information sharing to what is needed for the service and require appropriate confidentiality and handling arrangements. No website, cloud system or transfer can be guaranteed completely secure. Report a suspected privacy or security issue to info@somosdigilab.com; please do not include passwords in your message.
Our enquiry and purchasing services are intended for adults. A project involving a child’s image or voice requires appropriate authorisation from a parent or guardian and a specific agreed purpose. General portfolio permission is not a substitute for this.
This notice may be updated as our services or data practices change. A notice update is not retroactive consent for a new use. This policy explains our practices and requirements; it is not a certification of GDPR compliance.