Privacy Policy — Lanespace

Lanespace ("we", "us", "our") operates the Lanespace curated knowledge platform for logistics and supply chain (the "Service"). This Privacy Policy explains what data we collect, how we use it, who we share it with, and the rights you have over your data. We comply with the EU General Data Protection Regulation (GDPR), the UK Data Protection Act 2018, and applicable equivalents.

1. Who is the data controller

Lanespace is the data controller for personal data processed through the Service. You can reach our privacy team via our contact form.

2. What we collect

Account data

Name and email address you provide at sign-up.
An encrypted password (we never see your plain-text password).
Your role (job title) and the company you work for, if you choose to provide them at sign-up. You can also indicate that you don't currently work for a company.
Your onboarding preferences (what brings you to Lanespace, which segment of logistics interests you, how you prefer to consume insights) — used to personalise what we show you.

Usage data

Videos viewed, companies opened, briefings read, search and filter activity.
Interactions with the AI Expert (the questions you ask and the responses returned).
Device, browser, IP address, approximate location, and crash diagnostics.

Contact form

Name, email, and message body submitted via the contact form.

3. Third-party content (YouTube and similar)

Lanespace curates publicly available content hosted on third-party platforms, primarily YouTube. When a video plays on Lanespace it is delivered by the platform's embedded player (e.g. YouTube, operated by Google LLC), which may set cookies, collect playback telemetry, and apply its own privacy practices independently of Lanespace. By watching embedded videos you also accept Google's Privacy Policy and the YouTube Terms of Service.

4. How we use your data

Provide the Service — authenticate you, deliver curated content, and remember preferences.
Power the AI Expert — send your prompts and library context to our AI provider so it can respond.
Improve and secure the platform — diagnose bugs, prevent abuse, refine recommendations.
Communicate with you — send transactional emails. Marketing emails only with consent.
Feedback & product development — contact you occasionally to gather feedback and understand how we can extend Lanespace's capabilities, and use your in-product analytics (in aggregated, de-identified form, including sharing with affiliates and partners) to evaluate and develop new services. See section 7B of our Terms & Conditions for the full consent scope; you can opt out at any time via our contact form.

5. Legal bases (GDPR)

Contract — to deliver the Service you've signed up for.
Legitimate interests — to keep Lanespace secure, prevent fraud, and improve curation.
Consent — for non-essential cookies and marketing emails.
Legal obligation — when required to comply with applicable law.

6. AI Expert processing

The Lanespace AI Expert is grounded in the curated library. When you send a message, your prompt and a summary of the relevant library context are forwarded to our AI gateway provider for processing. We do not allow our AI provider to use your prompts to train their public models. Conversations may be logged in an aggregated and de-identified form to monitor quality and abuse. Do not share sensitive commercial, personal, or financial information in chat.

7. How we protect your data

Data is encrypted in transit (TLS) and at rest on our managed backend.
Database access is enforced row-by-row using Row-Level Security policies.
We perform regular dependency and security scans and patch high-severity issues promptly.
Passwords are stored as salted hashes — they are never visible to Lanespace staff.

8. Sharing your data

We do not sell your personal data. We share limited data with vetted processors strictly to operate Lanespace:

Cloud infrastructure & database — managed backend hosting.
AI gateway provider — to power the AI Expert.
Email delivery — for transactional messages.
Third-party video platforms — when you play an embedded video, as described above.
Authorities — only when legally required.

9. Retention

Account data — kept while your account is active, then deleted within 30 days of account deletion.
AI Expert logs — retained in aggregated form for up to 12 months.
Contact messages — retained for up to 24 months.
Backups — purged on a rolling 30-day cycle.

10. Your rights

Subject to applicable law, you can:

Access the personal data we hold about you.
Correct inaccurate data or complete incomplete data.
Delete your account and associated data.
Export your profile data in a portable format.
Object to or restrict certain processing.
Withdraw consent at any time, where consent is the basis.
Lodge a complaint with your local data protection authority.

To exercise these rights, get in touch via our contact form. We respond within 30 days.

11. Children

Lanespace is intended for users aged 16 and above. We do not knowingly collect data from children under 16.

12. Changes to this policy

We may update this policy as Lanespace evolves. Material changes will be highlighted on the Service. The "Last updated" date above always reflects the current version.