Effective Date: 29 August 2025
Last Updated: 29 August 2025
CARRERA LIMITED
Studley Grange, Guildford Road, Chobham, Surrey, GU24 8ED
Tel: 02392 610734
Email: contact@carrerauk.com
1. Introduction
CARRERA LIMITED ("we", "us", or "our") is committed to protecting the privacy and personal data of individuals and organisations we interact with. This Privacy Policy outlines how we collect, use, disclose, and protect your personal data, in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and related legislation.
We provide communication infrastructure consultancy and carrier/vendor management services to businesses across the UK and beyond. Our services are intended for commercial organisations, and we process limited personal data in the course of delivering these services.
2. Who This Policy Applies To
This Privacy Policy applies to:

• Website visitors
• Clients and prospective clients
• Vendors and partners
• Individuals who contact us via email, phone, or web forms
• Individuals whose data is provided to us by clients for service delivery

3. What Personal Data We Collect
We collect and process the following types of personal data:
a) Data You Provide Directly

• Full name
• Job title and role
• Company name
• Work email address
• Work phone number
• Enquiry details submitted via forms or emails
• Billing and invoicing contact information

b) Data We Collect Automatically (via website)

• IP address
• Browser type and version
• Device identifiers
• Referral URLs
• Website usage data (via cookies or analytics tools)

c) Data from Third Parties

• Referrals from partners or clients
• Publicly available contact data from professional directories (e.g. LinkedIn, company websites)
• Vendor information shared by our clients as part of engagement

4. How We Use Personal Data
We only use personal data where we have a valid legal basis under UK GDPR. The purposes and legal bases include:
We do not use personal data for automated decision-making or profiling.
5. Marketing Communications
We may contact business representatives with insights, service updates, or offers relevant to our services. You can opt out of these communications at any time by clicking the unsubscribe link in our emails or by contacting us directly.
We never sell your data or pass it to third parties for unrelated marketing.
6. Cookies and Tracking Technologies
Our website uses cookies and similar technologies to improve performance and analyse traffic. For detailed information, please refer to our [Cookies Policy].
You can manage your preferences via the cookie banner or through your browser settings.
7. Data Sharing and Disclosures
We only share personal data where necessary and with appropriate safeguards. This may include:

• Third-party service providers (e.g. cloud hosting, CRM, analytics providers)
• Subcontractors assisting with service delivery (under NDA and data processing agreements)
• Legal authorities where required by law
• Business advisors (e.g. accountants, legal counsel)

We ensure all data processors meet our security and compliance requirements.
8. International Transfers
We primarily store data in the UK or EEA. If any third-party providers process data outside the UK, we ensure appropriate safeguards are in place, such as:

• Adequacy decisions by the UK government
• Standard Contractual Clauses (SCCs)
• Data Processing Agreements (DPAs)

You may request a copy of these safeguards by contacting us.
9. How Long We Keep Your Data
We retain personal data only as long as necessary for the purposes for which it was collected, including:

• Client and project data: typically retained for 6–7 years for tax and contract record purposes
• Enquiry or marketing data: retained until unsubscribed or inactive for 24 months
• Analytics data: retained for 12–26 months, depending on tool settings

After this period, data is securely deleted or anonymised.
10. Data Security
We take appropriate technical and organisational measures to protect personal data, including:

• Encryption (in transit and at rest where appropriate)
• Access control and authentication
• Firewalls and secure cloud services
• Staff training and data handling policies

In the event of a data breach, we will follow our legal obligations and notify affected individuals where necessary.
11. Your Rights
Under the UK GDPR, you have rights including:

• Access – You can request a copy of your personal data
• Rectification – You can ask us to correct inaccurate data
• Erasure – You may request deletion of your data where there’s no legal reason to keep it
• Restriction – You can request we limit the processing of your data
• Objection – You can object to processing based on our legitimate interests
• Data portability – You can request data in a portable format

To exercise any of these rights, please contact us using the details below. We may need to verify your identity before responding.
12. Contact Details
If you have questions or requests regarding this Privacy Policy or your data, please contact:
Data Protection Contact
CARRERA LIMITED
Studley Grange, Guildford Road, Chobham, Surrey, GU24 8ED
Tel: 02392 610734
Email: contact@carrerauk.com
13. Complaints
You have the right to lodge a complaint with the UK’s data protection regulator:
Information Commissioner's Office (ICO)
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Website: https://ico.org.uk
Phone: 0303 123 1113
14. Updates to This Policy
We may update this Privacy Policy from time to time to reflect changes in law or business practices. The updated version will be posted on our website with the "Last Updated" date.