Privacy Policy.

1. Who we are

The website labselevenagency.com and the services delivered under the trading name Labs Eleven are operated by Boho Paradise LLC, a U.S. Limited Liability Company registered in the State of Wyoming, with its registered office at 30 N Gould St, Ste R, Sheridan, WY 82801, United States.

For the purposes of the EU General Data Protection Regulation (“GDPR”), the California Consumer Privacy Act (“CCPA”) and any equivalent legislation, Boho Paradise LLC is the data controller for personal data collected through the Site and processed in the ordinary course of our business.

2. Data we collect

We only collect what we need to operate our business and serve our clients.

We do not collect special categories of personal data (e.g., health, biometric or political opinions) unless strictly necessary to deliver a contracted service and with your explicit consent.

3. How we use your data

We process personal data only for the following purposes:

• Responding to inbound business inquiries and pitches;
• Delivering the services contracted by our clients under a written SOW;
• Billing, accounting and meeting our tax and reporting obligations;
• Operating, securing and improving the Site (e.g., fraud and abuse prevention);
• Sending occasional, opt-in communications about our work — never automated marketing without consent.

4. Legal bases for processing

We rely on the following legal bases under the GDPR (or equivalent under U.S. and other jurisdictions):

• Performance of a contract — to deliver services to our clients;
• Legitimate interest — to respond to inquiries, run and secure the Site, and grow the business in proportionate ways;
• Legal obligation — to comply with tax, accounting and other regulatory duties;
• Consent — where we ask for it explicitly (e.g., subscribing to a future newsletter).

5. Sharing and disclosure

We do not sell, rent, or syndicate personal data. We share data only with trusted vendors who help us run the business, under a written data-processing agreement, and only for the purposes set out above. Current categories include:

• Hosting and edge delivery (Vercel Inc., USA);
• Business email and document storage providers;
• Accounting, invoicing and payment processors;
• Where required, professional advisers (legal, audit) bound by confidentiality.

We may also disclose personal data when required by law, in response to valid legal process, or to protect the rights, safety and property of Boho Paradise LLC, our clients or third parties.

6. International transfers

We are based in the United States. Personal data we process may be transferred to and stored in the U.S. and, where applicable, in the European Union. Where transfers from the EU/EEA, UK or Switzerland to the U.S. are involved, we rely on appropriate safeguards including the EU Standard Contractual Clauses and additional technical and organizational measures.

7. Retention

8. Your rights

Under the GDPR, CCPA and similar laws you may have the right to:

• Access the personal data we hold about you;
• Request rectification of inaccurate data;
• Request deletion of your data (the “right to be forgotten”);
• Restrict or object to processing;
• Request data portability in a structured, machine-readable format;
• Withdraw consent where processing relies on consent;
• Opt out of the “sale” or “sharing” of personal data (we do neither);
• Be free from discrimination for exercising your rights;
• Lodge a complaint with your local supervisory authority (e.g., CNIL in France, ICO in the UK, the California Attorney General).

To exercise any of these rights, write to hello@labselevenagency.com. We will respond within thirty (30) days.

9. Security

We use industry-standard administrative, technical and physical safeguards to protect personal data: encrypted transport (TLS), access controls, principle of least privilege, vendor due-diligence, periodic credential rotation, and offsite backups for critical systems. No method of transmission or storage is 100% secure; we cannot guarantee absolute security, but we will notify affected users and supervisory authorities within 72 hours of becoming aware of any reportable personal data breach.

10. Children

Our services are intended for businesses and adult professionals. We do not knowingly collect personal data from anyone under the age of 16. If you believe a child has provided us with personal data, please contact us and we will delete it.

11. Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top of the page shows when it was last revised. Material changes will be flagged on the Site or by email to active clients.

12. Contact

For any privacy question, request or complaint: