Privacy
Privacy & Cookie Policy
Version 2026-07-24-v2 · Last updated 24 July 2026
1. Scope
This policy explains how NetLabs.club handles personal data relating to website visitors, account holders, trial and paid members, TradeLink users, PropSim users, affiliate-eligible customers, Exclusivity Partners, support contacts and administrators.
2. Data we collect
| Category | Examples | Why we use it |
|---|---|---|
| Account and identity | Name, email, user and account IDs, role, status, verification timestamps, password hash and preferences. | Create and secure accounts, authenticate users, provide dashboards and communicate service information. |
| Membership and billing | Plan, trial history, Stripe customer/subscription/invoice references, amounts, status, recovery dates and cancellation state. NetLabs does not store full card numbers. | Provide trials and subscriptions, prevent duplicate trials, reconcile payments, recover failed payments and keep financial records. |
| Licensing and TradeLink | Licence key or masked key, product, status, device binding, activation authorisation, code redemption record, eligibility state and lifecycle reasons. | Issue, validate, activate, suspend, restore and audit licences. |
| Affiliate eligibility | Affiliate relationship, external reference, eligibility result, verification dates, data-sharing acknowledgement, masked portal identity and confidential licence-review requests. | Provide affiliate-restricted TradeLink access, prevent fraud, administer exclusivity and review disputes. |
| PropSim desktop | Account email, licence key reference, installation ID, app version, platform, licence-check times and limited diagnostics. Simulation inputs and results normally remain on your device unless you choose to send them to support. | Issue and validate desktop access, manage device binding, provide downloads, troubleshoot and secure the service. |
| Technical and security | IP address, device and browser details, session data, timestamps, request IDs, logs, webhook IDs, audit events and security indicators. | Operate the service, detect abuse, investigate incidents, prevent replay or duplicate processing and protect accounts. |
| Communications | Support messages, email delivery records, complaints, eligibility reviews and marketing preference. | Respond, deliver transactional notices, manage disputes and send optional marketing where permitted. |
| Public content | Only information you deliberately publish, such as a public quiz result. | Display the public feature you request. Private account and email data are not included. |
3. How we obtain data
We collect data directly from you, automatically from your device and use of the service, from Stripe and other processors, from an affiliate or authorised Exclusivity Partner, and from administrators acting on a supported account. Where data comes from an affiliate, it is limited to eligibility, reference, verification, fraud or account-review information needed for TradeLink.
4. Lawful bases
- Contract: to create an account, provide a membership, run PropSim, issue and validate licences, process billing, provide support and administer requested services.
- Legitimate interests: to secure systems, prevent fraud and duplicate trials, maintain audit records, improve reliability, enforce terms, administer affiliate restrictions and defend legal claims. We assess necessity and impact and use safeguards such as masking, access control and limited retention.
- Legal obligation: to maintain tax, accounting, consumer, security and regulatory records and respond to lawful requests.
- Consent: for optional marketing and non-essential cookies where required. Consent can be withdrawn without affecting prior lawful processing.
The TradeLink data-sharing acknowledgement is presented when you start a TradeLink-qualifying paid membership or trial. It confirms that you have read the service-specific notice. The underlying processing relies on contract, legitimate interests or legal obligation as appropriate, rather than treating a compulsory service condition as optional consent.
5. Who we share data with
- Stripe for checkout, subscriptions, invoices, payment recovery, refunds and fraud controls.
- Hosting, database, email and security providers used to operate NetLabs.club and deliver messages.
- Infrastructure and hosting providers used to operate NetLabs websites, databases, downloads, licence validation, security logging and support.
- Affiliate organisations and authorised Exclusivity Partners for TradeLink eligibility, activation, fraud prevention and licence review, subject to the TradeLink notice and access controls.
- Professional advisers, insurers, courts, regulators and law-enforcement bodies where reasonably necessary or legally required.
- A purchaser or successor in a business sale or reorganisation, subject to confidentiality and continued protection.
We do not sell personal data to advertisers. We do not give an Exclusivity Partner unrestricted access to customer records. The partner portal returns masked identity data and scoped operational information.
6. International transfers
Some providers may process data outside the United Kingdom. Where UK data-protection law requires a transfer safeguard, we use an applicable adequacy regulation, the UK International Data Transfer Agreement, the UK Addendum to approved standard contractual clauses, or another lawful mechanism, together with appropriate technical and organisational measures.
7. Retention
- Active account and entitlement data: for the life of the account and as needed to provide the service.
- Financial, invoice, tax and subscription records: normally seven years after the relevant transaction or account closure.
- Security, access and audit logs: normally up to two years, or longer where an investigation, dispute or legal requirement justifies it.
- Failed checkout and webhook records: normally up to two years to support reconciliation, fraud prevention and idempotency.
- Activation codes: plaintext is not retained after issuance; hashes and redemption/audit records are retained for the licence lifecycle and normally up to seven years afterwards where needed for disputes or fraud prevention.
- PropSim licence checks and device-binding records: while the account or licence is active and for a limited period afterward for security, support and legal records. Local simulation inputs and results are controlled by the user on their device.
- Support and complaint records: normally six years after closure.
- Optional marketing data: until withdrawal or when no longer needed, with a suppression record retained to respect opt-out.
We may retain data longer where a legal claim, chargeback, fraud investigation, security incident or statutory obligation requires it. We delete or anonymise data when it is no longer needed.
8. Security
We use access controls, password hashing, encrypted transport, restricted administrator and partner roles, CSRF protection, signed webhooks, rate limits, secure code hashing, audit logs, backups and environment separation. No system is risk-free. Notify support@netlabs.club promptly if you suspect compromise.
9. Cookies and similar technologies
Essential cookies support sessions, security, login, preferences and legal records. Non-essential analytics or advertising storage is used only where configured and permitted. You can use the cookie control and browser settings to reject non-essential cookies. Blocking essential cookies may prevent account features from working.
Stripe, Google and other external pages may set their own cookies when you interact with them. Their privacy notices apply to those services.
10. TradeLink affiliate and partner sharing
TradeLink may be restricted by an affiliate arrangement. We may exchange limited identity, account, subscription, activation, licence and eligibility information with the relevant affiliate. Partner users see masked names and emails, approved status fields and scoped history. Full values may be used server-side for an authorised search but are not returned to the partner browser.
Partners may activate eligible pending licences and submit confidential suspension or revocation requests. NetLabs reviews those requests. Confidential reasons are restricted to authorised reviewers, subject to legal rights and disclosure obligations. See the TradeLink Affiliate Eligibility and Data-Sharing Notice.
11. Automated decisions
Rules may automatically block duplicate trials, classify a licence as pending, suspend access after payment failure or apply an eligibility state received from a trusted source. These rules do not make investment decisions. You may contact us for a human review of a significant account, licence or eligibility outcome.
12. Your rights
Depending on the circumstances, you may have rights to access, correct, erase, restrict or object to processing, and to receive portable data. You may withdraw consent where consent is the basis. You may complain to the UK Information Commissioner’s Office. Contact support@netlabs.club to exercise a right. We may verify your identity and may retain information where an exemption or legal obligation applies.
13. Children
NetLabs is intended for adults aged 18 or over and is not directed to children.
14. Changes and contact
We may update this policy when services, providers or legal requirements change. Material changes may require renewed acceptance. Questions and privacy requests should be sent to support@netlabs.club.