Legal
Privacy policy
What we collect, why, who we share it with, and how to make us stop. Written to be read, not to be skimmed past.
Last updated: 13 August 2026
Who we are
Levara Ltd (“Levara”, “we”) is the data controller for this website. We are registered in Scotland, company number SC866604, at 2/3 48 West George Street, Glasgow, Scotland, G2 1BP.
For anything in this policy, or to exercise any of the rights below, email [email protected]. A person reads that inbox and will reply within one working day.
What we collect
When you fill in a form
Our forms ask for your name, email address and a description of your project. Company name, role, website, budget and timeline are optional — the forms work without them. We also record your IP address, browser user agent and the page you came from, to detect automated abuse.
When you book a call
Booking is handled by Cal.com. You give them your name, email address and chosen time, and they share it with us so we can attend.
When you simply browse
With your consent, our analytics and advertising tools record which pages you visit, roughly where in the world you are, and what device you used. Without your consent, they record nothing. We do not attempt to identify you personally from browsing alone.
What we never collect
We do not ask for or store payment card details on this site, and we do not collect special category data — health, ethnicity, political opinions, religious beliefs, biometrics or sexual orientation. Please do not include any of that in a form.
Why, and our legal basis
| What we do | Legal basis |
|---|---|
| Reply to your enquiry and discuss your project | Legitimate interests, and steps prior to a contract |
| Arrange and attend a call you booked | Steps prior to a contract, at your request |
| Analytics, advertising measurement and audiences | Consent — withdrawable at any time |
| Rate limiting and spam prevention on our forms | Legitimate interests in keeping the service available |
| Keeping records of work and correspondence | Legal obligation, and legitimate interests |
We do not sell your personal data, and we do not send marketing emails to people who have not asked for them.
Cookies and tracking
Nothing that requires consent is set before you give it. Until you choose, our analytics and advertising tools are held in a blocked state: Google Consent Mode is set to denied, the Meta Pixel is initialised with consent revoked so no events are transmitted, and PostHog captures nothing and writes nothing to storage.
One thing is stored regardless: a single entry recording your consent choice, so we do not ask again on every page. That is strictly necessary to honour your decision and is kept in your browser's local storage rather than a cookie, so it is never sent to us in a request.
You can change your mind whenever you like using , which is also linked in the footer of every page. Declining costs you nothing: the site works identically.
We self-host our fonts, so no font provider sees your IP address when you load a page.
Who we share it with
We use the following processors. Those marked as consent-based receive nothing at all unless you have accepted.
-
Google Analytics 4
Their policy- Provider
- Google Ireland Ltd / Google LLC
- Purpose
- Aggregated site analytics and ad conversion measurement.
- Data
- Pseudonymised identifiers, pages viewed, approximate location, device and browser.
- Processed in
- EU and United States
- Basis
- Only with your consent.
-
Meta Pixel
Their policy- Provider
- Meta Platforms Ireland Ltd
- Purpose
- Measuring which adverts lead to enquiries, and building advertising audiences.
- Data
- Pseudonymised identifiers, pages viewed, and which conversion events you triggered.
- Processed in
- EU and United States
- Basis
- Only with your consent.
-
PostHog
Their policy- Provider
- PostHog Inc.
- Purpose
- Product analytics: understanding how the site is used.
- Data
- Pseudonymised identifiers, pages viewed, clicks and interactions.
- Processed in
- United States
- Basis
- Only with your consent.
-
Cal.com
Their policy- Provider
- Cal.com, Inc.
- Purpose
- Scheduling calls when you book on our booking page.
- Data
- Your name, email address, chosen time and anything you write in the booking form.
- Processed in
- United States
- Basis
- Necessary to provide the booking you requested.
We also use a hosting provider to serve this site, and our own server-side endpoint forwards form submissions into our internal systems. Both process data on our instructions only.
We may disclose information if we are legally required to, or to establish or defend legal claims.
International transfers
Some of the processors above are based in, or transfer data to, the United States. Where that happens we rely on the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or the UK Extension to the EU–US Data Privacy Framework, depending on the provider.
If you would like details of the safeguards in place for a specific provider, ask us and we will tell you.
How long we keep it
- Enquiries that do not become projects: up to 24 months, then deleted.
- Client records and correspondence: for the engagement, then 6 years to meet UK accounting and limitation requirements.
- Analytics data: according to each provider's retention setting, up to 14 months.
- Your consent choice: until you clear it or your browser storage is cleared.
Your rights
Under UK GDPR you have the right to:
- Access
- Ask for a copy of the personal data we hold about you.
- Rectification
- Ask us to correct anything inaccurate.
- Erasure
- Ask us to delete your data where we have no overriding reason to keep it.
- Restriction
- Ask us to pause processing while a concern is resolved.
- Objection
- Object to processing we carry out on the basis of legitimate interests.
- Portability
- Ask for your data in a portable, machine-readable format.
- Withdraw consent
- Withdraw analytics and advertising consent at any time, using the cookie settings link in the footer.
Email [email protected] to exercise any of these. We will respond within one month. There is no charge, and we will not ask you why.
Security
The site is served over HTTPS. Form submissions are transmitted to our own endpoint, which validates and rate-limits them before forwarding. We restrict access to enquiry data to the people who need it, which on a team of our size is a very small number.
No system is perfectly secure. If you believe you have found a vulnerability, please email us and we will act on it.
Complaints
If you are unhappy with how we have handled your data, tell us first and we will try to put it right. You also have the right to complain to the UK's supervisory authority:
Information Commissioner's Office — ico.org.uk/make-a-complaint . You do not need to come to us first.
Changes to this policy
If we change how we use personal data we will update this page and the date at the top. Material changes affecting consent will re-prompt you.