Skip to main content

Your Research & Development Partner

Menu

Privacy Policy

Last Updated: September 15, 2026

Introduction

iRESlab, Inc. (“iRESlab,” “we,” “us,” or “our”) is a custom software development and IT consulting company based in San Jose, California, United States. We provide technology services including custom software development, web and mobile application development, enterprise solutions, artificial intelligence and machine learning, data analytics, cloud and DevOps services, quality assurance, UI/UX design, application modernization, IT consulting, startup and MVP development, and system integration.

We respect the privacy of our website visitors, prospective clients, clients, business partners, vendors, job applicants, and other individuals who interact with us.

This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you visit our website, communicate with us, request information about our services, apply for employment, or otherwise interact with iRESlab in circumstances covered by this Privacy Policy.

It also describes the privacy rights and choices that may be available to you depending on your location and applicable law.

This Privacy Policy does not necessarily govern personal information that iRESlab processes on behalf of its clients when providing software development, cloud, maintenance, support, data, or other technology services. Such processing may instead be governed by the applicable client agreement, data processing agreement, or other contractual terms.

Scope of This Privacy Policy

This Privacy Policy applies to personal information collected through:

  • Our website and webpages operated by iRESlab;
  • Contact, consultation, and request-for-quote forms;
  • Business development and sales communications;
  • Email, telephone, and other communications with us;
  • Newsletter and marketing subscriptions;
  • Customer and prospective customer interactions;
  • Recruiting and job application processes;
  • Customer support communications;
  • Website analytics and similar technologies; and
  • Other interactions where this Privacy Policy is referenced or made available.

This Privacy Policy does not apply to third-party websites, applications, products, or services that maintain their own privacy policies or notices.

Where iRESlab processes personal information solely on behalf of a client, our role and responsibilities may be governed by our agreement with that client and applicable privacy laws rather than this Privacy Policy.

Information We Collect

The personal information we collect depends on how you interact with us and the services or information you request.

3.1 Information You Provide Directly

You may provide personal information to us when you contact us, request information, submit a form, communicate with our team, apply for a position, or otherwise interact with iRESlab.

This information may include:

  • Name;
  • Business email address;
  • Personal email address, where applicable;
  • Telephone number;
  • Company or organization name;
  • Job title or professional role;
  • Country, state, or general location;
  • Information contained in inquiries or messages;
  • Project requirements and business needs;
  • Information submitted through Contact Us forms;
  • Information submitted through Request a Quote or consultation forms;
  • Newsletter subscription information;
  • Customer support communications;
  • Business correspondence; and
  • Other information you voluntarily provide to us.

3.2 Job Applicant Information

If you apply for employment or another professional opportunity with iRESlab, we may collect information such as:

  • Name and contact details;
  • Resume or curriculum vitae;
  • Employment history;
  • Education and qualifications;
  • Professional skills and experience;
  • Portfolio or professional profile information;
  • Information provided during interviews or recruiting communications; and
  • Other information you voluntarily submit as part of the recruitment process.

Additional information may be collected where permitted or required by applicable employment laws.

3.3 Information Collected Automatically

When you visit our website, certain information may be collected automatically through cookies, server logs, analytics technologies, and similar mechanisms.

Depending on our website configuration, this information may include:

  • Internet Protocol (IP) address;
  • Approximate geographic location derived from an IP address;
  • Browser type and version;
  • Device type;
  • Operating system;
  • Screen or device characteristics;
  • Referring website or URL;
  • Pages visited;
  • Date and time of visits;
  • Time spent on pages;
  • Navigation and interaction information;
  • Website performance information; and
  • Other technical information relating to your interaction with our website.

Some of this information may constitute personal information under applicable privacy laws.

3.4 Information From Third Parties

We may receive information from third parties in connection with our business activities. Depending on the circumstances, these sources may include:

  • Business partners;
  • Referral partners;
  • Prospective or existing clients;
  • Publicly available professional or business sources;
  • Recruiting sources;
  • Service providers; and
  • Other parties that are legally permitted to provide information to us.

We may combine information obtained from third parties with information collected directly from you where permitted by applicable law.

How We Collect Information

We may collect personal information:

Directly From You

For example, when you:

  • Complete a website form;
  • Request a consultation;
  • Request a proposal or estimate;
  • Contact us by email or telephone;
  • Subscribe to communications;
  • Communicate with our sales or support teams;
  • Apply for a job; or
  • Provide information during a business relationship.

Automatically

We may collect certain technical and usage information automatically when you interact with our website through cookies, server logs, analytics tools, and similar technologies.

From Third Parties

We may obtain information through business referrals, recruiting activities, business partners, publicly available sources, and service providers where permitted by law.

How We Use Personal Information

We may use personal information for legitimate business and operational purposes, including to:

  • Respond to inquiries and requests;
  • Schedule consultations and business discussions;
  • Understand prospective clients’ requirements;
  • Prepare proposals, estimates, and statements of work;
  • Provide and manage requested services;
  • Manage client and prospective client relationships;
  • Communicate about projects, services, and business matters;
  • Provide customer and technical support;
  • Operate, maintain, and improve our website;
  • Understand website usage and visitor interactions;
  • Analyze website traffic and performance;
  • Improve our services and customer experience;
  • Maintain website, network, and information security;
  • Detect, investigate, and prevent fraud, abuse, security incidents, or unauthorized activity;
  • Conduct recruiting, hiring, and workforce planning;
  • Send marketing or informational communications where permitted;
  • Maintain business and operational records;
  • Enforce agreements and protect our legal rights;
  • Comply with applicable contractual, regulatory, and legal obligations;
  • Respond to lawful requests from government authorities; and
  • Establish, exercise, or defend legal claims.

We may also use information for other purposes disclosed at the time of collection or with your consent where required.

Legal Bases for Processing

Where laws such as the General Data Protection Regulation (“GDPR”) or UK GDPR require us to identify a legal basis for processing personal information, our legal bases may include:

Consent

We may process personal information when you have provided consent for a particular purpose. Where processing is based on consent, you may withdraw your consent subject to applicable law.

Performance of a Contract

We may process personal information when necessary to enter into or perform a contract with you or take requested steps before entering into a contract.

Legitimate Interests

We may process personal information when necessary for our legitimate business interests, provided those interests are not overridden by your applicable privacy rights.

These interests may include:

  • Operating and improving our business;
  • Responding to business inquiries;
  • Managing client relationships;
  • Improving our website and services;
  • Maintaining security;
  • Preventing fraud; and
  • Conducting appropriate B2B marketing activities.

Legal Obligations

We may process information when necessary to comply with applicable laws, regulations, court orders, or other legal obligations.

Other Legal Bases

Where permitted by applicable law, other legal bases may apply depending on the circumstances.

Cookies and Similar Technologies

Our website may use cookies and similar technologies to operate the website, remember preferences, understand website performance, and improve visitor experience.

A cookie is a small data file that may be stored on your device when you visit a website.

Essential Cookies

These cookies may be necessary for the website to function properly, provide requested functionality, maintain security, or manage website sessions.

Functional Cookies

Functional cookies may allow the website to remember choices or preferences and provide enhanced functionality.

Analytics and Performance Cookies

Analytics and performance technologies may help us understand how visitors use our website, which pages are visited, how visitors navigate the site, and how the website performs.

Advertising and Marketing Cookies

We may use advertising or marketing cookies if such technologies are implemented on our website.

[CONFIRM WHETHER ADVERTISING OR MARKETING COOKIES ARE USED]

Where required by applicable law, non-essential cookies will be used subject to appropriate consent or preference-management requirements.

Managing Cookie Preferences

Depending on your location and our website configuration, you may be able to manage cookie preferences through a cookie consent or preference tool. You can also configure your browser to block or delete certain cookies.

Blocking certain cookies may affect the functionality or performance of portions of the website.

How We Share Personal Information

We may disclose personal information when reasonably necessary for legitimate business purposes, to provide our services, or to comply with legal obligations.

Recipients may include:

Service Providers

We may engage third parties that provide services such as:

  • Cloud infrastructure;
  • Website hosting;
  • Website administration;
  • Analytics;
  • Customer relationship management;
  • Email and communications;
  • IT support;
  • Cybersecurity;
  • Data storage;
  • Business operations; and
  • Recruiting support.

These providers may process personal information on our behalf or for purposes specified in their applicable terms, depending on the nature of the relationship.

Contractors and Subcontractors

We may share information with contractors or subcontractors where reasonably necessary to perform services or support our business operations, subject to appropriate contractual and confidentiality requirements where applicable.

Professional Advisers

Information may be disclosed to attorneys, accountants, auditors, insurers, consultants, and other professional advisers where reasonably necessary.

Business Partners

We may disclose information to business partners when necessary for legitimate business purposes, providing requested services, or pursuing business opportunities, subject to applicable law.

Legal and Regulatory Authorities

We may disclose information where we reasonably believe disclosure is necessary to:

  • Comply with applicable law;
  • Respond to lawful legal processes;
  • Comply with court orders or governmental requests;
  • Protect our legal rights;
  • Protect the rights or safety of others;
  • Investigate suspected fraud or security incidents; or
  • Enforce agreements.
Corporate Transactions

Personal information may be disclosed in connection with a proposed or completed merger, acquisition, financing, restructuring, reorganization, sale of assets, or similar corporate transaction, subject to applicable legal requirements.

The use of third-party service providers to process personal information on our behalf does not, by itself, necessarily constitute a “sale” of personal information under applicable privacy laws. Certain disclosures may, however, constitute a “sale,” “sharing,” or use for targeted advertising under particular U.S. state privacy laws depending on how the information and technologies are used.

Third-Party Services and Links

Our website may contain links to third-party websites, applications, social networks, or other online services.

These third parties operate independently from iRESlab and may collect or process information according to their own privacy policies and practices.

We encourage you to review the privacy policies of third-party services before providing personal information to them.

This Privacy Policy does not govern the privacy, security, or information practices of independent third parties.

Data Security

iRESlab uses reasonable administrative, technical, and organizational measures designed to protect personal information against unauthorized access, disclosure, alteration, destruction, loss, or misuse.

Depending on the systems and circumstances involved, these measures may include:

  • Access controls;
  • Authentication mechanisms;
  • Encryption where appropriate;
  • Secure infrastructure;
  • System and security monitoring;
  • Employee and contractor access restrictions;
  • Security assessments;
  • Vulnerability management practices;
  • Backup and recovery measures; and
  • Incident management procedures.

Access to personal information may be limited to personnel, contractors, and service providers who reasonably require access for legitimate business purposes.

No method of transmission over the Internet, electronic storage system, or security control is completely secure. Accordingly, we cannot guarantee the absolute security of personal information.

Data Retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, subject to applicable legal, regulatory, contractual, accounting, security, and operational requirements.

The appropriate retention period may depend on factors such as:

  • The nature and sensitivity of the information;
  • The purpose for which the information was collected;
  • The duration of our business relationship;
  • Contractual requirements;
  • Legal and regulatory obligations;
  • Security and fraud-prevention considerations; and
  • The need to establish, exercise, or defend legal claims.

When personal information is no longer reasonably required, we may delete, anonymize, or otherwise dispose of it in accordance with applicable requirements and our information-management practices.

Specific retention periods may vary depending on the type of information and applicable circumstances.

Your Privacy Rights and Choices

Depending on your location and applicable law, you may have certain rights regarding your personal information.

These rights may include the right to:

  • Request access to personal information;
  • Request information about how personal information is collected, used, or disclosed;
  • Request correction of inaccurate information;
  • Request deletion of certain personal information;
  • Obtain a portable copy of certain personal information;
  • Restrict certain processing;
  • Object to certain processing;
  • Withdraw consent where processing is based on consent;
  • Opt out of certain sales, sharing, targeted advertising, or profiling where applicable;
  • Appeal certain decisions concerning privacy requests where provided by law; and
  • Lodge a complaint with an appropriate data protection or supervisory authority.

These rights are not absolute and may be subject to exceptions, limitations, identity-verification requirements, and other conditions under applicable law.

To submit a privacy request, contact us at info@ireslab.com.

We may need to verify your identity before processing certain requests. Where permitted by law, an authorized agent may submit a request on your behalf, subject to appropriate verification and authorization requirements.

We will respond to valid requests within the timeframe required by applicable law.

California and U.S. State Privacy Rights

Residents of California and certain other U.S. states may have additional privacy rights where applicable state privacy laws apply to iRESlab and the relevant processing activity.

Depending on the applicable law, these rights may include:

  • The right to know or access personal information;
  • The right to obtain information about categories of personal information collected, used, or disclosed;
  • The right to correct inaccurate personal information;
  • The right to request deletion;
  • The right to obtain a portable copy of certain information;
  • The right to opt out of the sale of personal information;
  • The right to opt out of certain sharing or targeted advertising;
  • The right to opt out of certain profiling activities;
  • The right to limit certain uses or disclosures of sensitive personal information where applicable;
  • The right to appeal certain privacy-request decisions; and
  • The right not to receive unlawful discriminatory treatment for exercising applicable privacy rights.

The specific rights available to you depend on your state of residence, whether the applicable privacy law applies to iRESlab, and the nature of our processing.

California Residents

Where the California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA/CPRA”), applies, California residents may have rights concerning their personal information as provided under California law.

iRESlab will process applicable requests in accordance with legal requirements, including identity verification where appropriate.

To exercise an applicable right, contact:

Email: info@ireslab.com

Sale and Sharing of Personal Information

Whether a particular disclosure constitutes a “sale” or “sharing” under California or another state privacy law depends on the nature and purpose of the disclosure.

If applicable law requires an opt-out mechanism, iRESlab will provide the appropriate method for exercising that right.

European Economic Area, United Kingdom, and Switzerland Privacy Rights

If you are located in the European Economic Area (“EEA”), United Kingdom, or Switzerland, applicable data protection laws may provide additional rights concerning your personal information.

Depending on applicable law and circumstances, these may include rights to:

  • Access your personal information;
  • Correct inaccurate or incomplete information;
  • Request deletion of personal information;
  • Restrict processing;
  • Object to certain processing;
  • Receive certain information in a portable format;
  • Withdraw consent where processing relies on consent; and
  • Lodge a complaint with an appropriate supervisory authority.

Where we rely on legitimate interests to process personal information, you may have the right to object to such processing in certain circumstances.

Where personal information is processed for direct marketing purposes, applicable law may provide a right to object to such processing.

To exercise an applicable privacy right, contact us at info@ireslab.com.

Marketing Communications

Where permitted by applicable law, we may send communications about our services, company updates, technology insights, events, or other business-related information that may be relevant to you.

You may opt out of marketing emails by using the unsubscribe mechanism provided in the communication, where available, or by contacting us at info@ireslab.com.

Opting out of marketing communications will not necessarily prevent us from sending non-marketing communications relating to an existing business relationship, requested services, transactions, security matters, or other operational matters.

Where consent is legally required for marketing communications, we will seek appropriate consent before sending such communications.

Children’s Privacy

Our website and services are intended primarily for businesses and professional users and are not directed to children.

We do not intentionally design our website to collect personal information from children.

If we become aware that personal information relating to a child has been collected in circumstances where parental or guardian consent or another legal basis is required, we will take appropriate steps consistent with applicable law.

If you believe that a child has provided personal information to us inappropriately, please contact us at info@ireslab.com.

Business Transfers

If iRESlab is involved in a merger, acquisition, financing, reorganization, restructuring, bankruptcy, sale of assets, or other corporate transaction, personal information may be disclosed or transferred as part of that transaction or related due diligence.

Any such handling of personal information will be subject to applicable legal requirements.

Processing Personal Information on Behalf of Clients

As a custom software development and IT consulting company, iRESlab may provide services that involve processing personal information on behalf of clients.

These services may include software development, application maintenance, cloud services, systems integration, data services, technical support, testing, DevOps, and other technology services.

In these circumstances, the client may determine the purposes and means of processing and may act as the relevant “controller,” “business,” or similar regulated entity, while iRESlab may act as a “processor,” “service provider,” or similar entity, depending on applicable law, contractual arrangements, and the specific processing activity.

Processing performed on behalf of a client may be governed by:

  • The applicable services agreement;
  • A data processing agreement;
  • Client instructions;
  • Confidentiality obligations;
  • Applicable security requirements; and
  • Applicable privacy and data protection laws.

If your personal information has been provided to or processed by iRESlab on behalf of one of our clients and you wish to exercise privacy rights relating to that information, you may need to contact the relevant client directly.

Where appropriate, iRESlab will support its clients in responding to applicable privacy requests in accordance with contractual and legal obligations.

This Privacy Policy does not modify or replace contractual privacy, confidentiality, or data-processing obligations agreed between iRESlab and its clients.

Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in:

  • Our business practices;
  • Website functionality;
  • Technologies;
  • Services;
  • Privacy and security practices; or
  • Applicable legal or regulatory requirements.

When we update this Privacy Policy, we will revise the “Last Updated” date at the top of this page.

Where required by applicable law, we may provide additional notice regarding material changes.

We encourage visitors to review this Privacy Policy periodically to stay informed about our privacy practices.

Contact Us

If you have questions about this Privacy Policy, our privacy practices, or wish to submit an applicable privacy request, you may contact us at:

iRESlab, Inc.
San Jose, California, USA
Email: info@ireslab.com
Website: www.ireslab.com