← Back to the lab
Privacy Policy
Last updated: May 2025
Who we are
Data Governance Lab (datagovernancelab.com) is a personal sandbox operated by Donald Williams, based in Toronto, Ontario, Canada. This site is a practitioner-led experiment space for data governance research and exploration. It is not a commercial service.
What data we collect and why
We collect only the minimum data necessary to operate this site. Specifically:
- Contact form submissions — when you submit the contact form, your name, email address, sandbox of interest, and message are sent to Formspree (our form processor) and delivered to us via email. We use this solely to respond to your enquiry.
- Analytics (optional) — if you consent, we use Microsoft Clarity to understand how visitors navigate the site. Clarity collects anonymized session recordings and heatmaps. It does not collect personally identifiable information. You can opt out at any time via Cookie Settings.
- Cookies — we use a strictly necessary session cookie to remember your cookie consent preferences. No tracking cookies are set without your explicit consent.
Legal basis for processing (GDPR)
If you are located in the European Economic Area (EEA) or United Kingdom, we process your data on the following legal bases:
- Consent — for analytics cookies (Microsoft Clarity). You may withdraw consent at any time via Cookie Settings in the footer.
- Legitimate interests — for contact form submissions, where we have a legitimate interest in responding to enquiries directed at us.
Third-party services
This site uses the following third-party services:
- Formspree (Privacy Policy) — processes contact form submissions. Data is transmitted securely and not sold to third parties.
- Microsoft Clarity (Privacy Statement) — optional analytics tool. Only loaded after you provide explicit consent. Clarity may use cookies to track session behaviour anonymously.
- Google Fonts (Privacy Policy) — used for typography. Google may log your IP address when fonts are loaded.
- Netlify (Privacy Policy) — hosts this website. Netlify logs standard server access data (IP address, browser, page requested) for security and performance purposes.
Cookies
We use the following cookies:
- dgl_cookie_consent (necessary) — stores your cookie consent preferences locally in your browser. This cookie does not leave your device and is not shared with any third party. It expires after 365 days or when you clear your browser data.
- Microsoft Clarity cookies (analytics, optional) — set only if you consent to analytics. These include session identifiers used by Clarity to associate page visits in a session. See Microsoft's privacy statement for full details.
You can manage your cookie preferences at any time by clicking Cookie Settings in the footer.
Data retention
Contact form submissions are retained only for as long as necessary to respond to your enquiry and are not stored in any database on this site. Analytics data collected via Microsoft Clarity is governed by Microsoft's own retention policies.
Your rights
Depending on your jurisdiction, you may have the right to:
- Access the personal data we hold about you
- Request correction or deletion of your data
- Object to or restrict processing of your data
- Withdraw consent for analytics at any time
- Lodge a complaint with your local data protection authority
To exercise any of these rights, contact us at hello@datagovernancelab.com.
Children's privacy
This site is not directed at children under the age of 16 and we do not knowingly collect personal data from anyone under 16. If you believe a child has submitted personal information through this site, please contact us and we will delete it promptly.
Changes to this policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of the site after changes are posted constitutes acceptance of the updated policy.