Privacy

Last updated 20 September 2026. This notice describes what actually happens in the code, not what is customary to write. Where a section says "none", that is a statement about the software as it is deployed today.

Who is responsible

PANTHEON Labs is a sole trader operating from Cardiff, United Kingdom. Isaac Frayling is the data controller for this website and for pantheonlabs.info. Contact: isaac@pantheonlabs.co.uk.

Where a business uses PANTHEON to run its own assistant, that business is the controller for its customers' data and PANTHEON Labs is its processor. This notice covers the parts I control.

Cookies

This site sets no cookies and runs no analytics, advertising or tracking scripts, no Google Analytics, no Plausible, no Meta or LinkedIn pixels. That is why you are not being asked to accept anything.

Two values are stored in your browser's local storage and never leave it: pl-theme (light or dark, so the page does not flash on reload) and tutor_sid (keeps your place in the tutor demo). Both are strictly necessary for the feature you asked for and are readable only by this site. Clearing site data removes them.

On pantheonlabs.info, connecting a payment provider or a calendar sets a short-lived single-use cookie (square_nonce, sumup_nonce, gcal_nonce) to prevent cross-site request forgery during that connection. It is deleted as soon as the connection completes.

If you talk to the assistant

The chat widget on this site sends your message to my own server at pantheonlabs.info, which sends it to Anthropic to generate a reply. Anthropic processes it under its API terms and does not use API traffic to train its models. Do not put anything in the chat you would not send in an ordinary email.

Conversations are retained so I can see where the assistant answers badly and fix it. If you ask me to delete a conversation, I will.

If you send an enquiry

The assistant can take an enquiry. If you give them, it stores: your name, email address, phone number, your message, the size of your party, the dates you are interested in, and the conversation that led to the enquiry. It also records how you arrived at the page.

The lawful basis is legitimate interest. you asked to be contacted about a service, and I need your message and a way to reply. You can object at any time and I will delete it.

Enquiries are kept until the enquiry is resolved and for as long as I may need to answer a question about it afterwards. There is no automatic purge: ask and it is deleted.

Card numbers are never stored. The one place a card could appear is a message you typed, and the code strips card-shaped digit sequences before the message is written to the database.

Who else processes your data

Only these, and only for the purpose named:

• Anthropic (USA), generates assistant replies.
• Resend, sends email, so that an enquiry reaches an inbox and you get a reply.
• Stripe, Square, SumUp, PayPal, take payments, when a business using PANTHEON has connected one. They receive the payment details directly; I receive a reference and an amount.
• Hetzner, hosts the server (Germany).
• Google, only if a business connects its own Google Calendar or asks the assistant to look up a place.
• MapTiler and Open-Meteo, maps and weather, when a generated site uses them. Neither receives your identity.
• Telegram, only where a business has connected a Telegram channel.

Nothing is sold, and nothing is shared for advertising. Transfers outside the UK rely on the providers' standard contractual clauses.

Demonstration sites

Sites built in the public demo are temporary. Demo tenants and everything in them are deleted automatically after 30 days unless the site is claimed.

Your rights

You can ask for a copy of what I hold, ask me to correct it, ask me to delete it, or object to my holding it. Email isaac@pantheonlabs.co.uk and I will respond within 30 days. There is no charge.

If you are unhappy with how I have handled it you can complain to the Information Commissioner's Office at ico.org.uk.

Security

Each business's data is isolated by the database (row-level security), not only by application code that could forget to filter. Three sign-in and payment look-up tables are read before a business is known and are guarded in code instead. The isolation is tested, and the tests are published on the evidence page. Traffic is encrypted in transit. I am one person: I cannot promise a SOC 2 report, and I am not going to imply otherwise.

Changes

If this notice changes materially I will update the date at the top. The page is version-controlled, so the history is real.