Dola Labs

Effective Date: December 3, 2025

This Privacy Policy describes how Dolalabs (referred to as "Dolalabs," "we," "us," or "our") collects, uses, and shares information in connection with your use of our website at https://dolalabs.com (the "Site") and our consulting services (the "Services").

By accessing or using our Site or Services, you signify that you have read, understood, and agree to our collection, storage, use, and disclosure of your personal information as described in this Privacy Policy.

1. Information We Collect

We collect information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household ("Personal Data").

A. Information You Provide to Us Directly

We collect Personal Data when you contact us, request a consultation, sign up for a newsletter, or engage us for Services. This may include:

Contact Data: Your name, email address, mailing address, and phone number.
Professional Data: Your job title, company name, and industry.
Billing Data: Financial information necessary for processing payments for our Services (this is typically handled by a third-party payment processor).
Communication Data: Records of your correspondence with us, including emails and other messages.

B. Information Collected During Client Engagements (Crucial for AI Consulting)

As an AI consulting firm, we process various types of data on behalf of our clients to perform the contracted Services, such as AI strategy, model development, data analysis, and implementation.

Client Project Data: Data provided by clients for the purpose of the engagement, which may include proprietary business data, operational metrics, and data sets for model training or testing.
Sensitive Data: When processing any sensitive or restricted Personal Data (e.g., PII, PHI) for a client, we do so strictly as a "Processor" or "Service Provider" on the client’s behalf and under the terms of a separate Master Services Agreement (MSA) or Data Processing Addendum (DPA). We process such data only as instructed by the client.
Data Minimization: We only request and process the minimum amount of data necessary to complete the contracted Services.

Dolalabs does not retain ownership of, or claim rights to, any client-provided data (including training data) unless explicitly agreed upon in a written, separate contract.

C. Information We Collect Automatically

When you visit our Site, we automatically collect certain information about your device and usage:

Usage Data: Information about how you access and use the Site, such as the time and date of access, pages viewed, links clicked, and the duration of your visit.
Device Data: Your Internet Protocol (IP) address, browser type and version, operating system, and unique device identifiers.
Tracking Data: Data collected via cookies and other tracking technologies.

2. How We Use Your Information

We use the collected Personal Data for several purposes, primarily based on the necessity of fulfilling our contract with you, our legitimate business interests, or your consent:

To Provide and Manage Services: We use your information to deliver our consulting services, manage client accounts, process transactions, and fulfill contractual obligations. This processing is necessary for the performance of a contract with you.
To Communicate with You: We use your Contact Data to respond to inquiries, send administrative information, and provide necessary updates about our Services. This is in our legitimate interest to maintain business communications.
For Marketing and Promotions: We may use your information to send you newsletters, promotional materials, and information about our Services. You can opt out of these communications at any time. This processing is based on your consent or our legitimate interest in marketing our services.
To Improve Our Site and Services: We analyze Usage Data and Device Data to diagnose technical issues, understand usage trends, and continually improve the user experience and effectiveness of our offerings. This is necessary for our legitimate business interests in continuous improvement.
For Legal Compliance and Security: We process information as necessary to comply with legal obligations (such as accounting or tax requirements), enforce our terms and conditions, and protect the security of our Site, systems, and clients against fraud or unauthorized access.

3. How We Share Your Information

We do not sell or rent your Personal Data to third parties. We may share Personal Data in the following circumstances:

Service Providers: We engage trusted third-party companies and individuals to perform services on our behalf (e.g., website hosting, email delivery, payment processing). These third parties are bound by confidentiality obligations and are authorized to use your Personal Data only as necessary to provide these services to us.
With Client Consent: If we have your explicit consent to disclose your Personal Data.
Business Transfers: In connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business by another company.
Legal Requirements: To comply with legal or regulatory obligations, including responding to a subpoena, court order, or government request.
Protection of Rights and Safety: To protect the rights, property, or safety of Dolalabs, our clients, or others.

4. Your Data Protection Rights

Depending on your location (e.g., if you are a resident of the EU/EEA, UK, or California), you may have the following rights regarding your Personal Data:

Right of Access: You have the right to request copies of your Personal Data.
Right to Rectification: You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.
Right to Erasure (Right to be Forgotten): You have the right to request that we erase your Personal Data, under certain conditions.
Right to Restrict Processing: You have the right to request that we restrict the processing of your Personal Data, under certain conditions.
Right to Object to Processing: You have the right to object to our processing of your Personal Data, under certain conditions.
Right to Data Portability: You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.
Right to Opt-Out of Marketing: You can always unsubscribe from our marketing communications by clicking the "unsubscribe" link provided in any email.

To exercise any of these rights, please contact us using the contact information provided in Section 7.

5. Data Security and Retention

A. Data Security

We implement appropriate technical and organizational measures to protect the Personal Data we hold from loss, misuse, and unauthorized access, disclosure, alteration, and destruction, considering the nature of the data and the risks involved. However, no internet or email transmission is ever fully secure or error-free, and we cannot guarantee absolute security.

B. Data Retention

We retain Personal Data only for as long as necessary to fulfill the purposes for which it was collected, including for the purpose of satisfying any legal, accounting, or reporting requirements. When we are a processor of client data, our retention is governed by the terms of our contract with the client.

6. Children's Privacy

Our Site and Services are not directed to individuals under the age of 16. We do not knowingly collect Personal Data from children under 16. If we become aware that a child under 16 has provided us with Personal Data, we will take steps to delete such information.

7. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Effective Date" at the top. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

‍