Privacy, in plain English.

Who this notice covers

This notice explains how Waverly Lab ("Waverly," "we," "us") handles personal information about visitors to waverlylab.com, people who book or inquire about our services, and other business contacts. Edgar Li operates Waverly Lab and can be reached through the booking page or Waverly Lab on LinkedIn ↗.

Information processed inside a client's systems during an engagement is governed by the applicable services agreement and, where appropriate, a data-processing agreement.

What we collect

When you contact or schedule with us

We may receive your name, email address, company, time zone, meeting details, answers to booking questions, and anything you choose to include in an email or message. Please do not submit sensitive personal information through a booking field or email.

Website analytics

Google Analytics may receive the page viewed, referring page, approximate location, browser and device information, session activity, and interactions such as scrolling or outbound-link clicks. Google uses an IP address at collection time to determine approximate location and states that the address is discarded before it is logged in Analytics.

Ordinary website delivery

Our hosting and content-delivery providers necessarily process technical request information such as IP address, browser type, requested URL, and timestamp to deliver and secure the site.

Why we use it

• To respond to inquiries and take steps toward an engagement.
• To schedule, run, and follow up on meetings.
• To deliver services and maintain business records.
• To protect the site, prevent abuse, and meet legal obligations.
• To understand aggregate site traffic and improve the usefulness of the site.

Where a law requires a legal basis, these activities rely on steps requested before a contract, performance of a contract, our legitimate interests in operating, securing, and improving the business, or legal obligations.

Who processes information

We use a small set of providers for specific purposes:

• Google Analytics for site measurement. We disable Google signals and advertising-personalization signals.
• Cal.com to display availability and process bookings on our behalf. Connected calendar, email, and video providers receive the meeting information needed to provide those functions.
• Cloudflare to host, deliver, and protect the site.
• Webflow's content-delivery network to serve the typefaces used on the site.

We may also disclose information when required by law, to protect rights or safety, or as part of a business transaction. We do not sell or rent personal information, and we do not share it for cross-context behavioral advertising.

How Google uses partner-site information ↗Cal.com privacy policy ↗Cloudflare privacy policy ↗

Cookies and your choice

Google Analytics may set first-party cookies beginning with _ga to distinguish visits and sessions. We configure those cookies to expire six months after they are first set rather than refreshing the expiration on each visit.

If your browser sends a Global Privacy Control signal, we do not load Google Analytics. You can also block or delete analytics cookies through your browser or install Google's Analytics opt-out add-on ↗. Because analytics is not used here for cross-site advertising, we do not separately respond to the older Do Not Track signal.

How long we keep it

We generally keep unanswered inquiries and prospective-client records for no more than 24 months after the last interaction. Client, contract, invoice, and tax records may be retained longer when needed to provide services, resolve disputes, or meet legal and accounting requirements.

Google Analytics may retain user- and event-level data for up to 14 months, depending on the property setting. Standard aggregate reports may remain available for longer.

Your rights and controls

Depending on where you live, you may have rights to request access, correction, deletion, restriction, objection, or a portable copy of your personal information, and to object to certain uses. You may also have the right to complain to your local data-protection authority.

Contact Waverly Lab through the booking page or LinkedIn page ↗ to request the appropriate privacy-response channel. We may need to verify your identity before completing a request. Because we do not sell or share personal information for behavioral advertising, there is no sale or sharing to opt out of.

Other details

International processing

Waverly and its providers primarily process information in the United States. Providers may use contractual or other recognized safeguards when information is transferred across borders.

Security

We use reasonable administrative and technical measures appropriate to the information we handle. No method of transmission or storage is completely secure.

Children

The site and our services are intended for business audiences. We do not knowingly collect personal information from children under 18.

Changes

We will post changes here and revise the date at the top. If a change materially affects how we use information already collected, we will provide additional notice when appropriate.