v2 · 20 May 2026
Privacy Policy
This policy explains how GearedApp Ltd(“we”, “us”, “our”) collects, uses, shares, and protects personal information through our website at gearedapp.co.uk. It also describes the rights you have under the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and where applicable the EU GDPR.
Who we are
- Controller: GearedApp Ltd, a company registered in Scotland (Company number SC457732).
- Registered office: Clockwise, 84 Commercial St, Edinburgh, EH6 6LX.
- VAT number: GB244030059.
- ICO registration: ZA493339 (you can verify this on the ICO register).
- Privacy contact: privacy@gearedapp.co.uk. Josh Carson is our named data-protection contact. We are not required to designate a Data Protection Officer and have not done so.
What we collect and why
Information you give us
When you complete our contact form, the chatbot, or the schedule-a- call form, we collect:
- Your name and work email
- Your company name and (optionally) your role
- An optional phone number
- The details of your enquiry — what you're looking to build, your rough timeline, budget bucket and whether funding is involved
We use this information to respond to your enquiry, prepare for a discovery call, and follow up if appropriate. Our lawful basis is legitimate interests (responding to a business enquiry you have initiated). You can object to this processing at any time by emailing the address above.
Information collected automatically
- Error and security telemetry. When something goes wrong in your browser, we capture the error, stack trace, page URL, browser type, and approximate region (from IP). We do not record your screen, mouse movements, form values, or keystrokes. Lawful basis: legitimate interests (keeping the site working and secure).
- Anonymous performance metrics. We measure page- loading speed using Vercel Speed Insights. No cookies or identifiers are set. Lawful basis: legitimate interests (improving site performance).
- Analytics — only if you accept. If you accept the cookie banner, we use PostHog (hosted in the EU) to understand which pages visitors find useful. We do not enable autocapture, session recording or surveys. Lawful basis: consent. You can withdraw at any time via the “Cookie preferences” link in our footer.
Who we share it with
We do not sell, rent or trade your personal data. We use a small number of third-party service providers to run this site and respond to enquiries. Each acts as our processor under a data-processing agreement that includes the UK International Data Transfer Addendum and EU Standard Contractual Clauses where relevant.
| Category | Purpose | Region |
|---|---|---|
| Hosting and infrastructure | Serving the website and routing requests. | UK / EU edge, US backend |
| Transactional email | Delivering your enquiry to our inbox so we can reply. | United States |
| CRM and internal lead routing | Recording your enquiry so the team can follow up and reply consistently. | United States |
| Scheduling | Letting you book a discovery call. | European Union |
| Error monitoring (Sentry) | Capturing uncaught errors so we can fix bugs. No session recording, no behavioural tracking. | European Union |
| Analytics — with your consent (PostHog) | Understanding which pages visitors find useful. Loads only if you accept the cookie banner. | European Union |
A current list of named sub-processors is available on request from privacy@gearedapp.co.uk.
International transfers
Where personal data leaves the United Kingdom or the European Economic Area, the transfer is governed by the UK International Data Transfer Addendum to the EU Standard Contractual Clauses (or equivalent safeguards), as included in each processor's data-processing agreement. You can ask us for a copy of these by emailing the address above.
How long we keep it
| Type of data | Retention |
|---|---|
| Enquiry emails and CRM records | 24 months after our last meaningful interaction |
| Booking and meeting records | 24 months after the meeting |
| Analytics events | 12 months rolling |
| Error logs | 90 days |
| Server access logs | 30 days |
| Cookie consent record | 13 months from your decision |
Your rights
Under UK GDPR you have the right to:
- Be told what personal data we hold about you and receive a copy (right of access)
- Have inaccurate data corrected (rectification)
- Ask us to delete your data (erasure)
- Ask us to restrict how we use it
- Receive your data in a portable format (portability)
- Object to our use of legitimate interests as a lawful basis
- Withdraw consent at any time, where consent is the lawful basis
To exercise any of these, email privacy@gearedapp.co.uk with the subject “Data subject request”. We will respond within one calendar month, extendable to three months for complex requests (we will tell you if that applies). We may ask for proof of identity before disclosing personal data.
Complaints
If you're unhappy with how we've handled your data, please contact us first so we have a chance to put it right. You also have the right to complain to the Information Commissioner's Office at ico.org.uk or by calling 0303 123 1113.
Cookies
For the cookies and similar technologies we set, what they do and how to manage them, see our Cookie Policy.
Changes to this policy
We may update this policy from time to time. The version and date at the top of this page tells you when it was last revised. Material changes (for example, adding a new processor or category of processing) will be flagged on the site and, where consent is involved, will trigger a fresh consent prompt.