Wunderlab Ltd Policies

Privacy Policy

 

Organisation:Wunderlab Ltd

Policy Owner: Directors, Wunderlab Ltd

Effective Date: 1st  May 2026

Review Cycle: Annual or as required

 

Wunderlab (“we”, “our”, or “us”) respects your privacy and is committed to protecting your personal information. This policy explains how we collect, use, and store your data when you visit our website, contact us, or work with us.

 

1. Who We Are

 

Wunderlab is a UK-based consultancy helping businesses grow through strategy, culture, and creativity.

Our website address is: www.wunderlab.co.uk

You can contact us at: info@wunderlab.co.uk

 

2. The Information We Collect

 

We collect and process personal data in the following ways:

 

Information you provide directly

 

When you:

• Fill in a contact form or enquiry form on our website

• Subscribe to updates or resources

• Contact us by email, phone, or social media

we may collect your name, email address, company name, role, and any other details you choose to provide.

 

Information collected automatically

 

When you visit our website, we may collect:

• Technical information such as your IP address, browser type, and device type

• Usage data, such as pages visited, time spent, and referring websites

This helps us understand how people use our site and improve the experience.

 

 

Cookies

 

We use cookies and similar technologies to help our website function effectively and to analyse traffic.

You can adjust your browser settings to refuse cookies if you prefer.

 

 

3. How We Use Your Information

 

We use your information to:

• Respond to your enquiries and provide our services

• Communicate with you about projects or proposals

• Improve our website, content, and services

• Send occasional insights or updates (only if you’ve opted in)

• Comply with any legal or regulatory obligations

 

We do not sell or share your personal information with third parties for marketing purposes.

 

4. Legal Basis for Processing

 

We process personal data under the following legal bases:

• Contract: to provide our services or respond to your enquiries

• Consent: when you subscribe to updates or marketing communications

• Legitimate interests: to operate and improve our website and consultancy services

 

5. How We Store and Protect Your Information

 

Your data is stored securely using reputable cloud-based systems and email providers.

We apply appropriate technical and organisational measures to prevent unauthorised access, loss, or misuse.

 

We retain personal data only as long as necessary for the purpose it was collected, unless required to keep it longer by law.

 

 

 

 

 

 

6. Sharing Your Information

 

We may share your data with trusted third-party providers who help us operate our business (for example, email services, analytics, or IT support).

 

These partners only process your information on our instructions and are bound by strict data protection agreements.

 

7. Your Rights

 

Under UK GDPR, you have the right to:

• Access a copy of the personal data we hold about you

• Request correction or deletion of your data

• Object to or restrict certain types of processing

• Withdraw your consent at any time (for marketing communications)

• Lodge a complaint with the UK Information Commissioner’s Office (ICO)

 

To exercise any of these rights, contact us at [insert contact email address].

 

8. Links to Other Websites

 

Our website may contain links to other websites. This policy only applies to Wunderlab, so please check the privacy policies of other sites if you follow those links.

 

9. Updates to This Policy

 

We may update this policy from time to time to reflect legal or operational changes. The updated version will always be posted on this page with a new “Last updated” date.

 

 

Responsible Digital Use & Online Conduct Policy

 

Organisation:Wunderlab Ltd

Policy Owner: Directors, Wunderlab Ltd

Effective Date: 1st  May 2026

Review Cycle: Annual or as required

 

Purpose

 

This policy outlines expectations for responsible, secure, and professional use of digital tools and online platforms when working on behalf of the organisation. It supports good digital practice and sits alongside our Privacy, Equality, and Modern Slavery policies.

 

Scope

 

This policy applies to employees, contractors, freelancers, associates, and third parties engaged to deliver work for or with the organisation.

 

Digital Conduct & Acceptable Use

 

All individuals are expected to:

 

• Act professionally, respectfully, and ethically in all digital and online interactions

• Use digital tools primarily for legitimate business purposes

• Avoid offensive, discriminatory, harassing, or unlawful behaviour online

 

Reasonable personal use of digital tools is acceptable provided it does not compromise work responsibilities, security, or reputation.

 

Data Protection, Security & Responsibility

 

Personal data must be handled in accordance with the organisation’s Privacy Policy

Strong passwords and appropriate security measures should be used at all times

 

 

Confidential or client-sensitive information must not be shared through unsecured channels or public platforms

 

Third-party providers, contractors, and partners are responsible for managing and protecting any personal or confidential data they process in line with their own data protection obligations and applicable law.

 

Any suspected data breach, loss of device, or security concern should be reported promptly.

 

Social Media & Online Presence

 

• Only authorised individuals may post on official organisational channels

• Personal online activity should not imply representation of the organisation unless authorised

• Confidential information, client details, or internal matters must not be shared publicly

 

Use of AI & Digital Tools (Our full AI policy is also below)

 

• AI and emerging technologies may be used responsibly to support work

• Confidential, personal, or client-sensitive information must not be uploaded to public or unsecured AI tools

• Individuals remain accountable for the accuracy, quality, and appropriate use of AI-generated outputs

 

Equality, Respect & Inclusion Online

 

All digital activity must reflect the organisation’s commitment to equality, dignity, and respect. Discriminatory or exclusionary behaviour will not be tolerated in any online environment.

 

Review

 

This policy will be reviewed periodically to ensure it remains appropriate as technologies and ways of working evolve.

 

 

 

Second MIND - USE, PRIVACY & AI GOVERNANCE POLICY

 

Organisation:Wunderlab Ltd

Policy Owner: Directors, Wunderlab Ltd

Effective Date: 1st  May 2026

Review Cycle: Annual or as required

 

1. Purpose of Second Mind

 

Second Mind is a conversational strategic thinking environment developed by Wunderlab and informed by the principles of the Anti-Theatre Manifesto.

 

The system is designed to:

 

* support clearer thinking

* challenge weak reasoning

* improve judgement under pressure

* expose organisational noise, avoidance, and false progress

 

Second Mind is designed to assist human thinking, not replace human judgement.

 

Technology assists. Humans decide.

 

 

2. Nature of Outputs

 

Outputs generated by Second Mind are AI-assisted reflections, prompts, summaries, and strategic thinking support.

 

Outputs:

 

* are not authoritative advice

* are not legal, medical, therapeutic, HR, financial, safeguarding, or crisis guidance

* may contain inaccuracies, incomplete reasoning, or imperfect interpretation

* require human review, judgement, and verification

 

Users remain responsible for all decisions, actions, interpretations, and outcomes arising from use of the system.

 

Wunderlab does not guarantee the accuracy, completeness, or suitability of outputs for any particular purpose.

 

 

3. Acceptable Use

 

Users may use Second Mind for:

 

* workplace and leadership reflection

* strategic thinking

* organisational analysis

* communication preparation

* decision support

* structured exploration of business challenges

 

Users must not upload, submit, or share:

 

* highly sensitive personal data

* confidential client information without appropriate authority

* information involving immediate risk of harm

* medical, safeguarding, or crisis situations

* regulated, classified, or protected information

* unlawful, abusive, discriminatory, or harmful material

 

Users are responsible for ensuring they have appropriate rights and permissions to submit any information into the system.

 

If you cannot safely share the information in a standard digital tool, do not upload it into Second Mind.

 

 

4. Human Responsibility & AI Governance

 

Second Mind follows Wunderlab’s human-centred AI governance principles:

 

* AI assists

* humans remain accountable

* judgement remains human

* outputs require review

* automation should not replace critical thinking

 

Second Mind is intended to strengthen reasoning and reflection, not automate responsibility or remove human accountability.

 

Wunderlab’s governance approach is informed by frameworks including:

 

* NIST AI Risk Management Framework (AI RMF)

* ISO/IEC 42001 principles

* OWASP guidance for LLM application security

 

These frameworks inform internal governance and operational practices but do not imply certification or formal compliance unless explicitly stated.

 

 

5. Data Handling & Privacy

 

Second Mind operates using cloud-hosted infrastructure, AI model providers, analytics systems, and operational tooling supplied by third-party providers.

 

Information submitted into the system may be processed for purposes including:

 

* delivering application functionality

* generating outputs

* maintaining security and reliability

 

* operational monitoring

* governance review

* improving system quality and user experience

 

Wunderlab aims to apply proportionate technical and organisational safeguards to protect information handled through the platform.

 

Users should avoid submitting unnecessary personal or confidential information.

 

 

6. Conversation Review & Quality Improvement

 

Limited conversation data may be reviewed by authorised Wunderlab personnel for purposes including:

 

* improving output quality

* identifying weak or generic responses

* improving governance and system behaviour

* refining tone, usability, and user experience

* monitoring misuse, safety, or operational concerns

 

Where reasonably possible, review processes aim to minimise personal or identifiable information.

 

Conversation review is operational and quality-focused.

 

Second Mind is not designed as a confidential advisory, therapeutic, or privileged communication environment.

 

 

7. Voice Input

 

Second Mind may include voice-input functionality that converts spoken thoughts into editable written prompts before submission.

 

In the current version:

 

* voice is used as an input-assistance feature

* spoken input is converted into editable text before submission

 

* audio is not intentionally retained by Wunderlab unless explicitly stated otherwise

 

Users remain responsible for reviewing and editing submitted text before sending.

 

 

8. Escalation & Human Contact

 

Second Mind may include “Ask Wunderlab” or similar escalation functionality allowing users to voluntarily submit contextual information or conversations for human review or support.

 

Submission of escalation forms is voluntary.

 

Use of escalation functionality does not create:

 

* a consultancy relationship

* legal advice

* therapeutic support

* fiduciary obligations

* regulated professional services

 

Any guidance provided remains subject to human interpretation and organisational judgement.

 

 

9. Security & Responsible Use

 

Users are expected to:

 

* act professionally

* protect sensitive information

* use secure systems and devices

* avoid unnecessary disclosure of personal or confidential data

* use the platform responsibly and lawfully

 

Users should not rely on AI-generated outputs without appropriate review and verification.

 

If an output materially matters, it should be checked.

 

 

10. Risk & Crisis Boundary

 

Second Mind is a thinking-support environment only.

 

It is not designed for:

 

* emergency situations

* mental health crisis support

* safeguarding intervention

* medical diagnosis

* legal representation

* regulated decision-making

 

If a situation involves immediate harm, mental health crisis, safeguarding concerns, or urgent legal/medical issues, users should contact an appropriate qualified professional or emergency service.

 

 

11. Retention & Operational Governance

 

Wunderlab may retain limited operational data, logs, and system records for purposes including:

 

* security

* troubleshooting

* governance

* abuse prevention

* service improvement

* operational continuity

 

Retention periods may vary depending on operational, legal, or security requirements.

 

Wunderlab aims to apply commercially reasonable governance and security measures proportionate to the nature of the platform.

 

 

 

 

 

12. Policy Position

 

Wunderlab believes:

 

* technology should sharpen human thinking, not replace it

* organisational clarity matters more than automation theatre

* AI should support judgement, not displace accountability

* responsible AI requires restraint, review, and clear boundaries

 

Technology assists. Humans decide.

 

 

Wunderlab Ltd - Equality, Diversity & Inclusion (EDI) Statement 2025

 

Organisation:Wunderlab Ltd

Policy Owner: Directors, Wunderlab Ltd

Effective Date: 1st  May 2026

Review Cycle: Annual or as required

 

Wunderlab Ltd is committed to creating an inclusive, fair and respectful environment for everyone we work with, including employees, associates, freelancers, partners, clients and participants in our workshops and programmes.

 

Although we are a small organisation, we recognise the importance of diversity and inclusion in everything we do. We actively promote equality of opportunity and do not tolerate discrimination of any kind, in line with the ‘Equality Act 2010’.

 

Our Commitments

 

1. Equal Access & Fair Treatment

 

• All individuals we work with employees, collaborators and contractors  are treated fairly and without bias.

• Opportunities for work, development and participation are based on skills, experience and merit.

• We ensure both employees have equal access to training, progression and learning opportunities.

 

2. Inclusive Working Practices

 

• We aim to create an environment where everyone feels respected, valued and able to contribute fully.

• We recognise and respect individual differences including background, gender, ethnicity, age, disability, neurodiversity, sexual orientation, beliefs and life experience.

• We use accessible, inclusive design principles when creating workshops, digital content and learning materials.

 

3. Ethical & Responsible Use of AI

 

• As we integrate AI into our learning and consultancy services, we are committed to using these tools responsibly.

• We take steps to minimise bias, support transparency, and ensure AI-enhanced content remains inclusive and fair for diverse audiences.

 

 

4. Working With Associates

 

• When engaging external consultants, facilitators or creatives, we ensure our EDI values are upheld.

• We work only with individuals who share our commitment to inclusion, respect and professional integrity.

 

5. Continuous Improvement

 

• Our EDI approach is reviewed periodically to ensure it remains relevant as we grow.

• We welcome feedback from clients, participants and collaborators to help us improve our inclusive practices.

 

Statement of Commitment

 

Wunderlab Ltd is dedicated to fostering a culture that values diversity, advances equality and promotes inclusive practices. We believe that diverse perspectives enhance creativity, problem-solving and the quality of experiences we offer to our clients and partners.

 

 

 

Anti‑Slavery & Human Trafficking Policy

 

Organisation:Wunderlab Ltd

Policy Owner: Directors, Wunderlab Ltd

Effective Date: 1st  May 2026

Review Cycle: Annual or as required

 

 

1. Policy Statement

 

Wunderlab Ltd is a small UK-based consultancy operated by its two directors. We are committed to preventing modern slavery and human trafficking in all aspects of our business activities.

 

We recognise our responsibility to act ethically, transparently, and with integrity, and we take a zero-tolerance approach to modern slavery, forced labour, child labour, and human trafficking. This commitment applies to:

 

• Our directors

• Any employees (where applicable)

• Any subcontractors, collaborators, or suppliers we engage now or in the future

 

We are committed to ensuring that our operations and professional relationships are conducted in a manner that respects human rights and complies with applicable UK legislation and recognised good practice.

 

 

2. Legal Context

 

Under Section 54 of the Modern Slavery Act 2015, organisations carrying on business in the UK with an annual global turnover of £36 million or more are required to publish an annual Modern Slavery Statement.

 

Wunderlab Ltd is not legally required to publish a Modern Slavery Statement, as we fall below the statutory turnover threshold. However, we voluntarily adopt the principles of the Act and this policy sets out our proportionate approach to preventing modern slavery and human trafficking.

 

 

 3. Our Business and Risk Profile

 

Wunderlab Ltd is a UK-based consultancy operated by two directors, providing professional services in learning and development, organisational design, creative strategy, and related advisory work.

 

Our operations are considered low risk in relation to modern slavery due to:

 

• A professional services model with no manufacturing or physical supply chains

• Delivery of services primarily within the UK

• A small, controlled operating model led by the directors

• Limited and carefully selected use of collaborators or subcontractors

 

Despite this low-risk profile, we remain vigilant and committed to identifying and addressing any potential risks, particularly where subcontractors or suppliers are engaged.

 

 

4. Due Diligence and Supply Chain Management

 

Where Wunderlab Ltd engages subcontractors, collaborators, or suppliers, we undertake proportionate and risk-based due diligence appropriate to the size and nature of our business. This includes:

 

• Working primarily with UK-based individuals and organisations where possible

• Engaging known, reputable professionals with appropriate experience and standing

• Seeking reasonable assurance that subcontractors and suppliers comply with applicable employment laws and ethical standards

• Avoiding engagement where there is reasonable concern regarding labour practices or human rights

 

All subcontractors and collaborators engaged by Wunderlab Ltd are expected to operate in line with the principles set out in this policy.

 

 

5. Responsibilities

 

The Directors of Wunderlab Ltd are responsible for implementing, maintaining, and reviewing this policy.

 

 

Subcontractors and collaborators engaged by Wunderlab Ltd are expected to comply with the principles set out in this policy.

Anyone working on behalf of Wunderlab Ltd is expected to raise concerns where they believe there may be a risk of modern slavery or human trafficking.

 

 

6. Reporting and Escalation

 

Any concerns relating to suspected modern slavery or human trafficking connected to Wunderlab Ltd, its directors, or its subcontractors or suppliers should be reported promptly.

 

Concerns should be raised:

 

• Directly with one of the Directors of Wunderlab Ltd, or with the relevant client or contract lead where appropriate

 

All concerns will be taken seriously, investigated proportionately, and handled confidentially where possible. Where concerns are substantiated, Wunderlab Ltd will take appropriate action, which may include terminating relationships with subcontractors or suppliers.

 

 

7. Training and Awareness

 

Given the size and nature of our business, formal training is not mandatory. However, directors and collaborators are expected to maintain awareness of modern slavery risks and to act in accordance with this policy and applicable laws.

 

 

8. Review and Continuous Improvement

 

This policy will be reviewed annually, or sooner if there are material changes to our business activities, risk profile, or legal obligations.

 

 

 

 

 

 

 

 

 

 

 

Contact us

If you have any questions about any of our policies.

Please contact us at: 

info@wunderlab.co.uk