Privacy notice

Metrra Lab (“we”) is the controller of personal data collected on www.metrra.com. Write to contact@metrra.com. This notice covers visitors, people who request a quote, and people who exercise a privacy right. It is written for GDPR, UK GDPR, and comparable global rules including CCPA/CPRA notice requirements.

What we collect

• Quote briefs — name, email, optional company and phone, the discipline you name, your message, and the page you wrote from.
• Privacy requests — name, email, the right you exercise, and your note.
• Cookie choices — a first-party record of essential / preferences / analytics / marketing decisions, stored as metrra_consent.
• Conservatory sign-in — an HttpOnly session cookie for staff only, never set for public browsing.

We do not run analytics or marketing tags until you allow those categories. We do not sell personal information and we do not share it for cross-context behavioural advertising.

Why we use it (legal bases)

• Quote briefs — steps prior to a contract (GDPR Art. 6(1)(b)) and our legitimate interest in answering a professional enquiry (Art. 6(1)(f)). You confirm this on the form.
• Privacy requests — legal obligation (Art. 6(1)(c)).
• Essential cookies — legitimate interest in running a secure site, or necessity for the service you asked for.
• Preferences, analytics, marketing cookies — consent (Art. 6(1)(a) and ePrivacy). You may refuse or withdraw at any time via Cookie settings.

How long we keep it

Quote briefs and privacy requests stay in The Conservatory until we have answered them and for up to 24 months unless a longer legal hold applies or you ask us to erase them sooner where the law allows. Cookie choices last 180 days, then we ask again. Staff sessions last seven days.

Who we share it with

Hosting and email infrastructure that process data on our instructions. We do not sell lists. If a processor sits outside your country, we use a lawful transfer tool where required (for example Standard Contractual Clauses).

Your rights

Depending on where you live, you may request access, correction, erasure, restriction, objection, portability, and withdrawal of consent. California residents may also request to know, delete, or correct personal information and to opt out of sale or sharing — we do not sell or share. We honour Global Privacy Control (GPC) as a reject of non-essential cookies. You may complain to a supervisory authority; in the EEA that is your local DPA, in the UK the ICO.

Cookie details live on the Cookie policy. Change a choice any time from Cookie settings in the footer.