Website Privacy Notice

Privacy Notice

Website Privacy Notice

Effective date: 13 August 2026
Last updated: 13 August 2026

This notice covers the ladder-labs.com website and our business services. If you are looking for the privacy policy for the Ladder Growth-Retail AI Agent mobile application, see our App Privacy Policy.

1. Who we are

DEEP INSIGHT SOLUTION LIMITED, trading as Ladder Labs (“we”, “us”, “our”), is a company registered in the Hong Kong Special Administrative Region, with its registered office at Unit 2223, 22/F, Yan’s Tower, 25–27 Wong Chuk Hang Road, Aberdeen, Hong Kong.

We are the data controller for personal data collected through this website and in the course of selling and administering our services.

Questions about this notice or your data: phil@ladder-labs.com

2. What this notice covers

This notice explains what personal data we collect when you visit ladder-labs.com, contact us, book a demo, or purchase a subscription or consulting engagement — and how we use, share, and protect it.

Where you are our client and we process personal data contained in your own customer records through our services, we act as a data processor on your instructions, and that processing is governed by your Terms of Service rather than by this notice.

3. Information we collect

3.1 Information you give us

Enquiry and demo requests: your name, work email address, company or store name, phone number, number of locations, and the content of your message.
Account and billing information: business name, billing contact, billing address, business registration or tax details where required, and your plan.
Support and correspondence: the content of emails, calls, and messages you exchange with us.

3.2 Information collected automatically

Usage and device data: IP address, browser type, operating system, device type, referring URL, pages viewed, and time spent.
Cookies and similar technologies: see Section 7.

3.3 Payment information

When you subscribe or pay an invoice, your card details are entered directly into a secure form hosted by our payment processor, Stripe.

We never receive, transmit, or store your full card number, expiry date, or security code. From Stripe we receive only limited transaction information such as the card brand, the last four digits, the amount, and whether the payment succeeded.

3.4 Information from third parties

Where you authorise it, we may receive business account information from platforms you connect to our services (for example advertising or CRM platforms). We access only what is needed to deliver the services you have purchased. We do not buy personal data from data brokers.

4. How we use your information, and our legal basis

Respond to your enquiry, provide a quote, run a demo — performance of a contract, or steps taken at your request.
Provide, operate, and support the services you purchase — performance of a contract.
Process payments, issue invoices, manage subscriptions and renewals — performance of a contract; legal obligation.
Prevent fraud, abuse, and unauthorised access; keep the site secure — legitimate interests.
Analyse site usage to improve our content and services — legitimate interests, or consent where required for analytics cookies.
Send service and billing notices — performance of a contract.
Send marketing emails about our services — consent, or legitimate interests for existing business clients. You can opt out at any time.
Comply with legal, tax, accounting, and regulatory obligations — legal obligation.

We do not sell your personal data, and we do not share it with third parties for their own direct marketing.

5. Who we share information with

We share personal data only as needed to run the business:

Payment processing — Stripe, Inc. Handles card payments, subscriptions, and invoicing. Stripe is a data controller in its own right for payment data; see the Stripe Privacy Policy.
Hosting and website infrastructure — Webflow, Inc. Hosts this website and processes form submissions.
Email, calendar, and communications providers. Deliver our correspondence with you and our scheduling.
Analytics providers. Provide aggregated statistics about site usage.
Professional advisers. Accountants, auditors, and lawyers, under duties of confidentiality.
Authorities. Where required by law, to enforce our terms, or to protect the rights, property, or safety of any person.
A successor entity. In connection with a merger, acquisition, or sale of assets, subject to this notice.

All service providers act under written agreements that limit their use of the data to providing services to us.

6. International transfers

We are based in Hong Kong and our service providers operate in a number of jurisdictions, including the United States and the European Union. Your personal data may therefore be transferred to, and processed in, countries other than your own.

Where we transfer personal data from the European Economic Area or the United Kingdom, we rely on appropriate safeguards, including the European Commission’s Standard Contractual Clauses (and the UK Addendum where applicable), together with additional measures where necessary. You can request a copy of the relevant safeguards by emailing phil@ladder-labs.com.

7. Cookies and analytics

We use cookies and similar technologies to keep the site working (strictly necessary cookies for security, load balancing, and form submission) and to understand usage (analytics cookies that tell us which pages are visited and how the site performs).

You can block or delete cookies through your browser settings. Blocking strictly necessary cookies may stop parts of the site from working. Where required by applicable law, we ask for your consent before setting non-essential cookies, and you can withdraw that consent at any time.

We do not use cookies to build advertising profiles of website visitors, and we do not permit third parties to do so on this site.

8. How long we keep information

Enquiries that do not become clients: up to 24 months from last contact, then deleted.
Client account and service records: for the duration of the relationship and up to 7 years afterwards, to meet Hong Kong accounting, tax, and limitation-period requirements.
Billing and transaction records: 7 years, as required by law.
Website analytics data: up to 26 months in identifiable form.
Marketing contacts: until you unsubscribe, then a minimal suppression record so we do not contact you again.

When data is no longer needed, we delete it or irreversibly anonymise it.

9. Your rights

Subject to the law that applies to you, you may access the personal data we hold about you, correct data that is inaccurate, delete your personal data where we have no overriding legal basis to keep it, restrict or object to certain processing including direct marketing, port data you provided to us, withdraw consent at any time, and opt out of marketing at any point.

How to exercise these rights: email phil@ladder-labs.com with “Data request” in the subject line. We respond within 30 days. We may ask you to verify your identity before acting.

If you are in Hong Kong, you may also complain to the Office of the Privacy Commissioner for Personal Data (PCPD) at pcpd.org.hk. If you are in the EEA or UK, you may complain to your local supervisory authority. We would appreciate the chance to address your concern first.

10. Security

We apply reasonable technical and organisational measures to protect personal data, including:

encryption in transit — the entire site and all form submissions are served over HTTPS/TLS;
access controls — access to client data is limited to personnel who need it, on a least-privilege basis;
PCI-DSS compliant payment handling — card data is captured directly by Stripe, certified to PCI-DSS Level 1, and never touches our systems;
confidentiality obligations on all personnel and contractors.

No method of transmission or storage over the internet is completely secure. We cannot guarantee absolute security, but we take our obligations seriously and will notify you and the relevant authorities of a personal data breach where required by law.

11. Children

This website and our services are intended for businesses and are not directed to children. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with personal data, contact us and we will delete it.

12. Automated decision-making

Our services use AI and automation to route leads, generate responses, and allocate advertising budgets on behalf of our business clients. These systems operate on business data supplied by our clients and do not produce legal or similarly significant effects on individual website visitors. We do not carry out automated decision-making about you as a website visitor.

13. Changes to this notice

We may update this notice from time to time. We will post the updated version on this page with a new “Last updated” date. For material changes, we will notify active clients by email at least 30 days before the change takes effect.

14. Contact us

DEEP INSIGHT SOLUTION LIMITED (trading as Ladder Labs)
Unit 2223, 22/F, Yan’s Tower, 25–27 Wong Chuk Hang Road, Aberdeen, Hong Kong

Email: phil@ladder-labs.com
Phone: +1 (949) 204-7671
Web: https://ladder-labs.com