The short version. We are a small studio. We collect your name, email and the project details you send us so we can quote and deliver work. We use privacy-respecting analytics only if you allow cookies. We do not sell your data, we do not run advertising trackers, and you can ask us to delete everything at any time.

1 · Who we are

The Foresight Lab ("we", "us") is an interior design visualization and documentation studio operated by Carlo Pontanilla, based in the Philippines and working with clients internationally, including in the United States, the United Kingdom and the European Union.

For the purposes of the EU General Data Protection Regulation (GDPR) and the UK GDPR, we act as the data controller for the personal data described in this policy. Where we handle project material that contains your clients' personal data, we act as a data processor on your behalf.

Contact for privacy matters: info@theforesightlab.com

2 · What we collect

  • Information you give us. Name, email address, studio or company name, and the project details, files, drawings, plans, images and references you send when you enquire or engage us.
  • Newsletter details. If you subscribe, your email address and (optionally) your first name.
  • Purchase details. If you buy a digital product, the order information provided by our payment processor. We never see or store your full card details — payment is handled entirely by the processor.
  • Technical and usage data. If you consent to analytics cookies: pages visited, approximate region, device and browser type, and how you arrived. This is aggregated and not used to identify you.
  • Correspondence. Emails and messages you send us, kept so we can service the project and honour our agreements.

We do not knowingly collect data from children, and we do not seek out special categories of personal data.

3 · Why we use it, and our legal basis

  • To answer enquiries and prepare quotes — necessary to take steps at your request before entering a contract.
  • To deliver projects and support — necessary for the performance of our contract with you.
  • To send invoices and keep financial records — necessary to comply with legal and tax obligations.
  • To send our newsletter — only with your consent, which you can withdraw at any time via the unsubscribe link in every email.
  • To understand how the site is used — only with your consent to analytics cookies.
  • To protect the studio (security, preventing misuse, resolving disputes) — our legitimate interests, balanced against your rights.

4 · Who we share it with

We never sell your personal data. We share it only with the service providers that make the studio run, and only as far as needed:

  • Hosting and site delivery — to serve this website.
  • Email and file sharing — Google Workspace, for correspondence and project files.
  • Newsletter delivery — our email marketing provider, if you subscribe.
  • Payment processing — our payment provider, if you purchase a product.
  • Analytics — only if you consent.
  • Professional advisers or authorities — where we are legally required to do so.

Each provider is bound by its own contractual and data-protection obligations. We do not permit them to use your data for their own marketing.

5 · International transfers

We are based in the Philippines, and our providers may store data in the United States, the European Union or elsewhere. Where personal data of individuals in the UK or EU is transferred outside those territories, we rely on appropriate safeguards — most commonly the European Commission's Standard Contractual Clauses (and the UK Addendum) as implemented by our providers, together with the security measures described below.

6 · How long we keep it

  • Enquiries that don't become projects — up to 24 months, then deleted.
  • Project files and correspondence — for the life of the engagement and up to 7 years afterwards, so we can honour warranties, support past work and meet tax and accounting requirements.
  • Newsletter data — until you unsubscribe.
  • Analytics data — retained in aggregate by our analytics provider, typically no more than 14 months.

You can ask us to delete your data sooner — see your rights below.

7 · Your rights

If you are in the UK or EU (GDPR / UK GDPR), you have the right to: access your data; correct it; have it erased; restrict or object to our processing; receive it in a portable format; and withdraw consent at any time. You also have the right to complain to your supervisory authority — in the UK, the Information Commissioner's Office (ICO).

If you are in California (CCPA/CPRA), you have the right to know what personal information we collect and why, to request deletion or correction, and to be free from discrimination for exercising those rights. We do not sell or share personal information as those terms are defined by the CCPA, and we do not process it for cross-context behavioural advertising.

If you are in the Philippines (Data Privacy Act of 2012), you have the rights to be informed, to object, to access, to correct, to erasure or blocking, to damages, and to data portability, and may lodge a complaint with the National Privacy Commission.

To exercise any right, email info@theforesightlab.com. We respond within 30 days and never charge for a reasonable request.

8 · Cookies

We use a small number of cookies and similar storage. Strictly necessary ones (your theme preference and your consent choice) are always on because the site cannot work properly without them. Analytics cookies load only after you opt in, and you can change your mind at any time through the "Cookie preferences" link in the footer. Full detail is in our Cookie Policy.

9 · How we protect your data

Access is limited to those who need it to do the work. Accounts are protected with strong, unique credentials and two-factor authentication where available; files are transferred and stored through reputable providers with encryption in transit. No system is perfectly secure, but we take these obligations seriously — and if a breach ever affected your rights, we would notify you and the relevant authority as required by law.

10 · Client confidentiality

Much of our work is white-labelled. Project material you send us is treated as confidential: it is used solely to produce your deliverables, never resold or shared, and never published without your permission. Where you need it in writing, we are happy to sign an NDA or add a confidentiality clause to our agreement.

11 · Changes to this policy

If we change how we handle personal data, we will update this page and revise the "last updated" date above. Material changes affecting your rights will be communicated directly where we hold your contact details.

12 · Contact

Questions, requests or concerns: info@theforesightlab.com. We read every message ourselves.

This policy is provided for transparency and general information. It is not legal advice, and it does not create a contract. If you have specific legal requirements — particularly around your own clients' data — please take independent advice.