Privacy Policy

1. Introduction

Welcome to ALABS. We respect your privacy and are committed to protecting your personal data. This privacy policy will inform you as to how we look after your personal data when you visit our website and tell you about your privacy rights and how the law protects you.

2. Controller

ALABS is the controller and responsible for your personal data.

If you have any questions about this privacy policy, including any requests to exercise your legal rights, please contact us using the details set out below.

3. The Data We Collect

We may collect, use, store and transfer different kinds of personal data about you which we have grouped together follows:

• Identity Data: includes first name, last name, username or similar identifier (via OAuth providers).
• Contact Data: includes email address.
• Technical Data: includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access this website.
• Profile Data: includes your username, password (if applicable), profile pictures, feedback and survey responses.
• Content Data: includes posts, comments, and images you upload (stored via Firebase Storage).

4. How We Use Your Data

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

• Where we need to perform the contract we are about to enter into or have entered into with you (e.g., providing access to the platform).
• Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.
• Where we need to comply with a legal or regulatory obligation.

5. Data Sharing

We may share your personal data with the parties set out below for the purposes set out in this policy:

• Service Providers: We use third-party services for data hosting and processing:
  • MongoDB Atlas: For database hosting.
  • Firebase (Google): For image storage and authentication services.
• Authentication Providers: Google, GitHub, and LinkedIn for OAuth login services.

We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.

6. Cookie Policy

Our website uses cookies to distinguish you from other users of our website. This helps us to provide you with a good experience when you browse our website and also allows us to improve our site.

We use the following types of cookies:

• Strictly necessary cookies: These are cookies that are required for the operation of our website (e.g., authentication cookies).
• Functionality cookies: These are used to recognize you when you return to our website (e.g., remembering your dark mode preference).

7. Data Retention

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.

8. Your Legal Rights (GDPR)

Under certain circumstances, you have rights under data protection laws in relation to your personal data, including the right to:

• Request access to your personal data.
• Request correction of your personal data.
• Request erasure of your personal data ("Right to be Forgotten").
• Object to processing of your personal data.
• Request restriction of processing your personal data.
• Request transfer of your personal data.
• Right to withdraw consent.

If you wish to exercise any of the rights set out above, please contact us.

9. Contact Us

If you have any questions about this privacy policy or our privacy practices, please contact our Data Protection Officer (DPO) via email at:

alabs@abdevweb.com