Carryover Contact

Legal

Privacy Policy

Last updated: May 2025

Carryover takes data protection seriously. This policy explains what personal information we collect, why we collect it, and how we handle it. We aim to keep this plain and direct — no unnecessary legal scaffolding.

By using this website, you acknowledge the practices described here. If you have questions about anything, our contact page is the right place to start.

1. What data we collect

Information you provide directly

  • Name and email address submitted via our contact form
  • The content of your message or enquiry
  • Subject line or project context you choose to include

Information collected automatically

  • Browser type, device type, and operating system
  • Pages visited and time spent on each page
  • Approximate geographic region (country-level) via IP address
  • Referral source (how you arrived at this site)

Legal basis for processing

  • Contact form submissions: processed under legitimate interest to respond to enquiries
  • Analytics data: processed under consent, where granted via cookie preferences
  • Essential cookies: processed under legitimate interest for site functionality

2. How we use your data

Contact form information is used solely to respond to your enquiry. We do not add you to any mailing list without explicit consent, and we do not share your contact details with third parties for marketing purposes.

Analytics data, when consented to, is used to understand which parts of the site are useful and where we can improve the experience. This data is aggregated and not linked to individual identities.

We do not sell personal data to any third party, ever.

Data retention

  • Contact enquiries: retained for up to 24 months, then deleted
  • Analytics data: retained per the analytics provider's standard retention periods
  • Cookie preferences: stored locally in your browser until cleared

3. How we protect your data

We take reasonable technical steps to protect the information you share with us. Site communications are handled over HTTPS. Access to contact data is restricted to team members who need it to respond to your message.

Security measures include

  • Encrypted site connections (HTTPS/TLS)
  • Restricted internal access to contact submissions
  • No unnecessary storage of sensitive personal details
  • Regular review of data handling practices

In the unlikely event of a data breach affecting your personal information, we will notify you in accordance with applicable data protection law.

4. Your rights

Depending on where you are located, you may have rights under applicable data protection law, including:

  • Right to access — request a copy of personal data we hold about you
  • Right to rectification — ask us to correct inaccurate or incomplete data
  • Right to erasure — request deletion of your personal data where no legal basis for retention exists
  • Right to data portability — receive your data in a structured, commonly used format
  • Right to object — object to processing of your data in certain circumstances
  • Right to withdraw consent — where processing is based on consent, you can withdraw it at any time

To exercise any of these rights, please use our contact page. We'll respond within 30 days.

5. Your rights and opt-out instructions

You are not required to provide any personal information when using this website. If you prefer not to share your data, you may:

  • Avoid filling out contact forms, account registrations, or any data-submitting features.
  • Disable cookies through your browser settings (see our Cookie Policy for more details).
  • Contact us directly to request the deletion of any previously shared personal data.

We respect your privacy choices. If you would like us to delete your data, please reach out via our Contact page. We will process your request promptly.

6. Third-party services

We may use third-party analytics services (such as Google Analytics) to understand site usage, subject to your cookie consent. These services may collect anonymized usage data in accordance with their own privacy policies.

We do not embed third-party social widgets, advertising trackers, or other external services that collect data without your knowledge.

7. Changes to this policy

If we make material changes to this privacy policy, we will update the "Last updated" date at the top of this page. We recommend checking back occasionally if data privacy matters to you.