Who we are and what this notice covers
Emergent AI is the website brand of EmergentLab.ai LLC, a Delaware LLC. Our owner-supplied mailing address is 16192 Coastal Highway, Lewes, DE 19958, United States. Contact we@emergentlab.ai for privacy requests and legal notices.
This notice concerns visitors to https://emergentlab.ai and people who contact us about our business. We serve an international audience. Customer products, enterprise deployments and employment relationships may have separate notices and agreements; this website notice does not establish their data-processing terms.
The owner supplied this identity and address on 13 November 2026. Formation-record verification remains pending. Counsel must confirm controller roles and whether UK, EU or other local representatives are required.
Information you provide
If you email us, we receive your address, message and any information you choose to include. The website enquiry form requests your name, work email, interest and a description of your challenge; organisation, product URL and expert specialty are optional. When delivery is enabled, submissions also include the privacy acknowledgement version and submission time.
Please share only a non-confidential summary. Do not send sensitive personal information, identification documents, passwords or customer records through this website. The form does not subscribe you to marketing. This marketing site has no account registration, payment checkout, newsletter, document upload or CRM enrichment.
How enquiries are handled
Website form delivery is currently unavailable while the Gmail connection is being completed. The send control is disabled, and the unconfigured server endpoint returns an unavailable response before reading the submitted message. You can still contact us by email.
Once connected, the server will validate a submission and send it through Google’s Gmail API to the business inbox selected by the owner. It will confirm acceptance only after Google acknowledges the message. The application has no separate lead database and does not intentionally log enquiry content. Direct email and delivered enquiries are held in the business mailbox according to its settings.
Before enabling delivery, verify actual receipt, restrict mailbox access to authorised people, and approve the Google service arrangements and mailbox deletion procedure.
Website delivery and security
Cloudflare Workers hosts this website. Cloudflare processes technical request information, such as IP addresses, requested URLs, browser information and timing, to deliver and protect the site. Application Workers logs and traces are disabled in the deployment configuration; that does not mean Cloudflare processes no operational data.
The live host currently sends Network Error Logging and Report-To headers. Supporting browsers may send delivery-failure reports to Cloudflare. This is separate from application cookies and does not send enquiry messages to an analytics service.
When the enquiry service is configured, it uses a daily rotating HMAC of the request IP for rate limiting, signed form tokens and in-memory replay markers lasting up to 30 minutes. The replay markers contain no enquiry message. The application does not intentionally log raw IP addresses.
Confirm provider-level logging, reporting settings, retention, locations and contractual safeguards. Review the legal basis and any consent requirements for browser-generated network reports.
Why information is used
Information is used to respond to requested enquiries, discuss prospective engagements, operate the website and protect it against misuse. This website does not make automated decisions about people or submit enquiry content to an AI model.
For jurisdictions requiring a lawful basis, the proposed bases are legitimate interests in business correspondence and website security, and taking steps at your request before entering a contract where that applies. Any legal obligation would apply only where the relevant law requires processing. Checking a privacy acknowledgement is not blanket consent to all processing.
Counsel must approve the basis for each activity, any legitimate-interests assessment and local requirements. No optional marketing or advertising purpose is currently implemented.
Who may receive information
Website delivery involves Cloudflare. Business email involves Google and the authorised people who handle correspondence. Professional advisers or authorities may receive relevant information where necessary for advice, legal obligations or a dispute. Actual account access and service contracts still need operational review.
Fonts, images and videos are served with the website. There is no analytics SDK, advertising pixel, chatbot, third-party video embed or CRM integration in the active pages. This implementation does not sell enquiry information or share it through an advertising integration. Separate enterprise products require their own provider and data-flow assessment.
Confirm the complete processor and recipient inventory, contracts, access permissions and whether regional sale/sharing definitions require additional disclosures.
International processing
We serve people worldwide and use hosting and email providers that may process information in more than one country. A person’s information may therefore be processed outside their home jurisdiction.
The locations and safeguards applicable to the actual Cloudflare and Google accounts have not yet been verified. This draft does not claim that a particular certification, adequacy decision, standard contractual clause or other transfer arrangement is in place.
Verify processing locations and applicable safeguards, including any required UK or EU transfer terms, before approving the final notice.
How long information is kept
Owner-approved policy, awaiting operational implementation: delete enquiries that do not become customer relationships 12 months after the last substantive contact, or earlier when they are no longer needed or a valid deletion request applies. A documented legal obligation, dispute or legal hold may require particular records to be retained longer. The owner approved this period on 13 November 2026. A mailbox deletion process and responsible person still need to be put in place; this notice does not claim that automatic deletion is running.
Customer, contract, accounting and dispute records need separate retention rules. The website has no lead database. Mailbox copies, sent messages, backups and provider records must be included when implementing deletion; deleting a website preference does not delete email.
The application treats a saved privacy choice as valid for 180 days. Expired or outdated choices are removed when the website next checks them. You can use “Clear saved settings” in Cookie Preferences at any time. The old preview’s playback-preference key is removed on site load.
Implement the owner-approved enquiry period, assign a deletion owner, and document mailbox/backups, customer records, legal holds and provider retention. Counsel must review the schedule against applicable obligations. The 180-day preference period also needs legal sign-off.
Security and confidentiality
The form implementation includes validation, size limits, origin checks, spam controls and rate limiting. Provider credentials stay on the server. These measures reduce particular risks but do not guarantee security or establish a certification.
Use an agreed secure channel for confidential business materials. Confidentiality, intellectual property and enterprise data handling must be addressed in the applicable signed agreement.
Your privacy rights
Depending on the law that applies, you may have rights to access, correct, delete or obtain a copy of personal information; restrict or object to its use; or withdraw consent where processing relies on consent. To make a request, email we@emergentlab.ai with enough information to identify the correspondence concerned. Please do not send identity documents unless specifically requested through an appropriate channel.
We may need proportionate information to verify identity or authority before disclosing or changing records. Rights may be subject to legal exceptions. Where applicable, you can complain to your local data-protection regulator; UK residents can contact the Information Commissioner’s Office, and EEA residents their local supervisory authority.
Approve request ownership, identity checks, jurisdiction-specific deadlines and any appeal, authorised-agent or regional rights process. No single worldwide response deadline is asserted.
Children and external links
This website describes business services and is not directed at children. We do not intentionally request children’s information. If you believe a child has provided personal information, contact the privacy mailbox so it can be reviewed. Third-party websites reached through links have their own notices and practices.
Counsel must confirm any applicable age rules and the procedure for information received from children.
Updates and contact
Questions and privacy requests: we@emergentlab.ai. Mailing address: EmergentLab.ai LLC, a Delaware LLC, 16192 Coastal Highway, Lewes, DE 19958, United States.
This review draft was revised on 13 November 2026. That is a revision date, not an effective date. Final wording and an effective date require owner and counsel approval; material changes should be reflected in a revised notice.
Formation-record verification and final owner/counsel approval remain outstanding.
Draft version: website-draft-2026-11-13. Final text, effective date and unresolved decisions require owner and counsel approval.