Privacy Notice

1. Controller and scope

The controller is MB3R LAB LLC (Russian legal name: LLC «EMBETRIERLAB»).

Registration number (OGRN)

1251600051450

Tax numbers (INN / KPP)

1683030458 / 168301001

Registered address

Building 5, premises 115, Universitetskaya Street, Innopolis, Verkhneuslonsky District, Republic of Tatarstan, 420500, Russia

Privacy contact

[email protected]

This notice covers the public website, the pilot-enquiry form, and follow-up correspondence. It does not replace separate notices or agreements for employees, applicants, suppliers, or customers under a signed contract.

2. Information we collect

• a shared company email address that does not identify a particular employee;
• your company name;
• the selected pilot context and message you choose to provide;
• submission date and time, country inferred from a technical request header, and technical information used for anti-abuse controls;
• the time, policy version, and record of your consent.

Please do not send named personal email addresses, special-category data, passwords, government secrets, or other confidential information through the free-text field. The form is not intended for children.

By submitting the form, the submitter confirms that they are authorised to provide the information on the organisation’s behalf and that the email supplied is a shared functional company inbox that does not identify an individual employee. The submitter is responsible for the accuracy of that confirmation and for having the necessary authority to provide the information.

3. Why we use information and legal bases

We use the information to review and respond to a pilot enquiry, communicate about a potential engagement, prepare for a contract at your request, and protect the form and website from fraud or abuse. We do not use enquiry data for marketing mailings without a separate consent.

Where consent is the appropriate basis, we rely on the clear checkbox beside the form. Where applicable law permits, we may also rely on steps requested before entering a contract, compliance with legal obligations, or our legitimate interests in operating a secure business website. For individuals in the EEA or United Kingdom, this notice is intended to provide the information described in Article 13 GDPR / the UK GDPR; applicable local law may provide additional rights.

4. Service providers and international processing

We use Cloudflare Pages, Functions, D1, and Turnstile to host the website, process the form, store enquiries, and prevent bots. We use Resend for enquiry notifications and business email. These providers process information only as needed to provide their services to us, subject to their own contractual and privacy terms.

Provider infrastructure or support may be located in countries other than yours. Where international transfers are regulated, we will use a transfer mechanism or safeguard required by applicable law. We do not sell personal information or use enquiry data for cross-context behavioural advertising.

5. Retention, security, and disclosure

We keep enquiry information only for as long as necessary to answer the enquiry, manage related business communication, comply with legal duties, or establish, exercise, or defend legal claims. We then delete or de-identify it unless a longer retention period is required by law.

We apply reasonable technical and organisational safeguards, including restricted administrative access, encrypted transport, anti-bot verification, and rate limiting. No method of transmission or storage is perfectly secure. We may disclose information where required by law or to protect rights, safety, and the integrity of our services.

6. Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or receive a portable copy of your personal data, and to withdraw consent. To make a request, email [email protected] with the subject “Privacy request” and the work email used in the form. We may need information to verify your identity and will respond as required by applicable law.

You may also complain to your local data-protection authority. Withdrawal of consent does not affect processing that was lawful before withdrawal.

7. Regional information

This is a global business-enquiry notice, not a claim that one document exhaustively implements every privacy law. If a mandatory local rule gives you more protection than this notice, that rule applies. We will provide additional disclosures, obtain additional consent, or use another legal basis where required by applicable law.

8. Updates

We may update this notice when our services, data practices, or legal requirements change. The current version is published at this address with its effective date.