Privacy Policy

Last updated: September 14, 2026

This Privacy Policy describes how Disklab Data Recovery (“the Company,” “We,” “Us,” or “Our”) collects, uses, discloses, and protects information when you use our website and data recovery services (the “Service”), and explains your privacy rights and choices.

By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy.

1. Definitions

• Account — a unique account created for you to access parts of the Service.
• Company — Disklab Data Recovery, 12747 Olive Blvd, Suite 300, St. Louis, MO 63141, United States.
• Cookies — small files placed on your device by a website to store browsing information.
• Customer Data — any files, data, or information contained on a physical or digital storage device (hard drive, RAID array, SSD, flash drive, tape, virtual machine, or other media) that you submit to us for diagnostic, recovery, or migration services.
• Device — any device used to access the Service.
• Personal Data — information that relates to an identified or identifiable individual.
• Service — the Disklab website and data recovery services.
• Service Provider — a third party that processes data on the Company’s behalf.
• Usage Data — data collected automatically through use of the Service (e.g., page visit duration, IP address).
• You — the individual, or the entity on whose behalf that individual is acting, using the Service.

2. Information We Collect

2.1 Personal Data You Provide

When you request a quote, start a case, or contact us, we may collect:

• Name, email address, phone number
• Billing and shipping address
• Payment information (processed by a third-party payment processor; we do not store full card numbers)
• Details about your device and the nature of the data loss

2.2 Customer Data (Recovered Data)

Because our Service involves recovering data from physical devices, we may come into contact with the contents of your device, which could include personal, financial, medical, business, or other sensitive information. This is distinct from the Personal Data described above, and we handle it under the specific safeguards in Section 5 below.

2.3 Usage Data

Collected automatically, including IP address, browser type and version, pages visited, time and date of visit, device identifiers, and diagnostic data. If you use a mobile device, we may also collect device type, unique device ID, and mobile OS information.

2.4 Cookies and Tracking Technologies

We use cookies and similar technologies (web beacons, tags, scripts) for the following purposes:

You can instruct your browser to refuse cookies, though some features of the Service may not function properly without them. See our [Cookie Settings] for granular controls.

3. How We Use Your Information

We use Personal Data and Usage Data to:

• Provide, maintain, and improve the Service
• Process your data recovery case, including diagnostics, quotes, and status updates
• Manage your account and respond to inquiries
• Process payments and fulfill contracts
• Send service-related communications (case updates, security notices)
• Send marketing communications, only where you have opted in or as otherwise permitted by law, and always with an easy opt-out
• Analyze usage trends and improve our website and services
• Evaluate or conduct a merger, acquisition, or sale of assets (see Section 7)
• Comply with legal obligations

We do not use the contents of your recovered Customer Data for any of the above purposes. Customer Data is accessed only as necessary to perform the recovery service you requested. See Section 5.

4. How We Share Information

We may share Personal Data and Usage Data with:

• Service Providers who help us operate the Service (e.g., payment processors, IT/hosting providers, shipping carriers), under contractual confidentiality obligations
• Affiliates, bound by this Privacy Policy
• Business partners, for jointly offered promotions (opt-in only)
• Legal or regulatory authorities, where required by law or valid legal process
• A successor entity, in the event of a merger, acquisition, or asset sale (with notice to you — see Section 7)
• Anyone else, only with your explicit consent

We do not sell Personal Data or Customer Data to third parties for monetary or other valuable consideration.

Customer Data is never shared, sold, disclosed, or used except: (a) as strictly necessary to perform the recovery service, (b) with your explicit authorization, or (c) where legally compelled by valid law enforcement process, in which case we will notify you unless prohibited by law.

5. Handling of Customer Data (Recovered Data)

Because data recovery involves direct access to potentially sensitive device contents, we apply the following safeguards:

• Access control: Only technicians directly assigned to your case may access your Customer Data. Access is logged.
• Encryption: Customer Data is encrypted at rest on our recovery systems and encrypted in transit if delivered electronically.
• Confidentiality: All staff and contractors with potential access to Customer Data are bound by confidentiality agreements.
• No secondary use: We do not view, use, analyze, or share the substantive contents of your files beyond what is needed to diagnose and recover them.
• Retention: Recovered Customer Data is retained on our systems for [30 days — fill in your actual retention window] after case completion or delivery to you, whichever is later, to allow for delivery troubleshooting, after which it is securely and permanently deleted using industry-standard data destruction methods.
• Physical media: Original devices are returned to you or securely destroyed at your request; we do not retain physical media without your authorization.
• Your right to request early deletion: You may request immediate deletion of recovered Customer Data from our systems once you’ve confirmed successful delivery, by contacting us (Section 11).
• NDA availability: For sensitive business, medical, financial, or legal data, we can execute a mutual non-disclosure agreement upon request prior to beginning work.

6. Data Retention (General)

We retain Personal Data only as long as necessary for the purposes in this Policy, to comply with legal obligations, resolve disputes, and enforce agreements. Usage Data is generally retained for a shorter period, except where needed for security, functionality, or legal compliance.

7. Business Transfer

If the Company is involved in a merger, acquisition, or asset sale, your Personal Data may be transferred. We will provide notice before your Personal Data becomes subject to a different privacy policy, and — for Customer Data specifically — will seek your consent before any transfer of recovered data to a successor entity, where required by law.

8. International Data Transfers

Your information may be processed at our operating offices in the United States. If you are located outside the United States, note that your information may be transferred to, stored, and processed in the U.S., where data protection laws may differ from those in your jurisdiction. We take reasonable steps to ensure your data is treated securely and in accordance with this Policy wherever it is processed.

9. Your Privacy Rights

Depending on your state or country of residence, you may have the right to:

• Know/Access what personal information we have collected about you
• Delete your personal information (subject to legal retention requirements)
• Correct inaccurate personal information
• Opt out of the sale or sharing of personal information (Note: we do not sell personal information)
• Opt out of targeted advertising, if applicable
• Non-discrimination for exercising these rights

This applies to residents of California, Colorado, Connecticut, Virginia, Illinois, and other states with comprehensive privacy laws, as well as individuals in jurisdictions covered by GDPR, to the extent applicable.

To exercise any of these rights, contact us using the details in Section 11. We will respond within the timeframe required by applicable law and may need to verify your identity first.

10. Children’s Privacy

Our Service is not directed to anyone under the age of 13, and we do not knowingly collect Personal Data from children under 13. If you believe a child has provided us with Personal Data, please contact us so we can delete it. If parental consent is required under your jurisdiction’s law, we will not knowingly process a minor’s data without it.

11. Security

We use commercially reasonable administrative, technical, and physical safeguards to protect your Personal Data and Customer Data, including encryption, access controls, and secure facilities. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

12. Links to Other Websites

Our Service may link to third-party websites not operated by us. We are not responsible for the content, privacy policies, or practices of any third-party site. We encourage you to review their privacy policies.

13. Changes to This Privacy Policy

We may update this Privacy Policy periodically. We will notify you of material changes via email and/or a prominent notice on our website prior to the change taking effect, and update the “Last updated” date above. Continued use of the Service after changes take effect constitutes acceptance of the revised Policy.

14. Contact Us

If you have questions about this Privacy Policy, or wish to exercise your privacy rights, contact us:

• By phone: +1-844-347-5522
• By mail: 12747 Olive Blvd, Suite 300, St. Louis, MO 63141, United States
• By email: info@disklab.co