1. Who we are
Carrier Labs Ltd ("Carrier Labs", "we", "our") is a company registered in England and Wales (Company No. 14078078), with a registered address at Unit 41 Silk Mill Business Park, Brook St, Tring, HP23 5EF.
We are the data controller for personal data collected through our website (carrierlabs.net) and any applications we develop and distribute, including those available via the Google Play Store.
You can contact us about data protection matters at [email protected].
2. What data we collect
When you sign in with Google (Firebase Authentication)
Our applications use Google Sign-In via Firebase Authentication. When you authenticate, we receive from Google:
- Your name and email address (as held on your Google account)
- A unique identifier tied to your Google account
- Your profile picture URL, if your Google account has one
We do not receive or store your Google password. Authentication is handled securely by Google and Firebase.
When you submit a contact form or sign up for updates
If you get in touch via our website or opt in to hear from us, we collect:
- Your name
- Your email address
- Any message you choose to send us
Usage and analytics data
We use Google Analytics to understand how visitors use our website. This collects anonymised information including pages visited, time spent, and broad geographic location. It does not identify you personally. You can opt out using the Google Analytics opt-out browser add-on.
Technical data
When you use our apps or visit our website, standard technical data is logged automatically, such as your device type, operating system version, and IP address. This is collected by our hosting infrastructure and by Google Play Services where applicable.
3. How we use your data
| Purpose | Data used | Legal basis (UK GDPR) |
|---|---|---|
| Providing and operating our applications | Account data from Google Sign-In | Contract performance (Art. 6(1)(b)) |
| Responding to your enquiries | Name, email, message content | Legitimate interests (Art. 6(1)(f)) |
| Sending marketing updates (where you have opted in) | Email address, name | Consent (Art. 6(1)(a)) |
| Understanding website usage and improving our services | Anonymised analytics data | Legitimate interests (Art. 6(1)(f)) |
| Complying with legal obligations | As required | Legal obligation (Art. 6(1)(c)) |
4. Marketing emails
We will only send you marketing communications if you have explicitly opted in. We use a third-party email platform to manage and send these communications; your email address is shared with that platform for this purpose only.
You can unsubscribe at any time using the link in any email we send, or by contacting us at [email protected].
5. Who we share your data with
We do not sell your personal data. We share it only in the following circumstances:
- Google LLC for authentication (Firebase Auth), analytics (Google Analytics), and app distribution (Google Play). Google's privacy policy is available at policies.google.com/privacy.
- Email marketing platform, a third-party provider we use to manage our mailing list. Only your name and email address are shared, and only when you have opted in.
- Legal or regulatory bodies, if required by law or to protect our legal rights.
6. International data transfers
Some of our third-party providers (including Google) process data outside the UK. Where this occurs, we rely on appropriate safeguards including the UK International Data Transfer Agreement (IDTA) or adequacy decisions. Google participates in the UK Extension to the EU-US Data Privacy Framework.
7. How long we keep your data
- Account data, retained for as long as you hold an active account, then deleted within 90 days of account closure.
- Contact enquiries, retained for up to 2 years.
- Marketing list, retained until you unsubscribe, then removed promptly.
- Analytics data, retained by Google for 14 months (our configured retention period), after which it is automatically deleted.
8. Cookies
Our website uses cookies for analytics (Google Analytics). A cookie is a small text file stored on your device. You can control cookies through your browser settings. Disabling analytics cookies does not affect your ability to use the site.
9. Your rights
Under the UK GDPR you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request erasure of your data ("right to be forgotten")
- Object to or restrict certain processing
- Withdraw consent at any time (where processing is based on consent)
- Data portability (where applicable)
To exercise any of these rights, contact us at [email protected]. We will respond within one month.
10. Complaints
If you are unhappy with how we handle your data, you have the right to complain to the UK's data protection authority, the Information Commissioner's Office (ICO):
- Website: ico.org.uk
- Helpline: 0303 123 1113
We would always appreciate the chance to address your concerns first, so please contact us before approaching the ICO.
11. Changes to this policy
We may update this policy from time to time. Material changes will be communicated via the website or, where appropriate, by email. The date at the top of this page shows when it was last updated.