Last updated 27 October 2026
Privacy notice
This interim notice covers the website. We are confirming the contractual and international-transfer arrangements for our hosting and email providers and will update this notice when those checks are complete.
This notice explains how TBFC Technologies Ltd handles personal information when you visit the Carrot website or contact us about privacy. This website does not offer app accounts, public downloads, a mailing list or a signup form. App access and its privacy information will be addressed separately before app access is offered.
Who is responsible for your information
Carrot is a service operated by TBFC Technologies Ltd, the controller for personal information handled through this website. The company is registered in England and Wales (company number 17540885). Its registered office is 115 London Road, Bozeat, Wellingborough, England, NN29 7JR.
For a privacy question, rights request or complaint, email privacy@carrot.news or write to the registered office above.
Information from website visits
When you visit, the hosting and network services used to deliver and protect the website can process connection and request information such as your IP address, requested page, date and time, and browser information. We use this information to deliver the site, maintain its security and investigate faults or abuse.
The interactive walkthrough uses prepared content. Text you enter in the walkthrough stays in the browser and is not sent to Carrot's app or research service. The demo does not access your microphone or create an app account.
Our legal basis for website operation and security is our legitimate interest in making the site available, diagnosing faults and protecting it from misuse.
Information you send us
If you email us, we receive your email address, your message and any other information you choose to include. We use it to respond, deal with privacy requests or complaints, and keep records where needed to demonstrate how a request was handled. Please do not send passwords or identity documents unless we have explained why they are needed and agreed a suitable way to send them.
Our legal basis for responding to ordinary enquiries and maintaining appropriate records is our legitimate interest in dealing with them. Where processing is necessary to meet a data-protection duty, our legal basis is compliance with a legal obligation.
Cookies and browser storage
We do not add advertising or analytics scripts to this website. The walkthrough runs in your browser. External sites linked from Carrot have their own privacy information and may use their own cookies or storage technologies. We are checking whether the hosting infrastructure uses any additional storage or access technologies.
Who receives information and international transfers
Render hosts the website. Microsoft 365, provided through GoDaddy, handles privacy email; messages to the privacy address are routed to the company inboxes that monitor it. Hosting, network and email providers may use service providers of their own.
Render states that its primary processing operations are in the United States. Its published terms incorporate a data-processing addendum that describes contractual safeguards for international transfers. Render, Microsoft Corporation and GoDaddy Operating Company LLC participate in the UK Extension to the EU–US Data Privacy Framework, an adequacy arrangement for qualifying transfers. We are confirming which arrangements and safeguards apply to our services; you can ask us for more information or a copy of any applicable contractual safeguards.
For information about the providers' own practices, see the Render privacy policy, Microsoft privacy statement and GoDaddy privacy notice. Those notices do not replace this notice or necessarily describe every way our providers process information on our behalf.
How long information is kept
Website request and security records may be held by hosting and network providers for operating, securing or investigating the service, according to their arrangements. Render describes its device and IP data retention in its privacy policy; we have asked it for the arrangements specific to our website's edge and security records.
We keep correspondence for as long as needed to respond, follow up, handle a complaint or request, establish or defend a claim, or meet a legal obligation. Our intended practice is to review closed ordinary enquiries within six months and periodically thereafter, including copies in both recipients' mailboxes. This is a manual review, not a promise of automatic deletion. Information may be kept longer where needed for a complaint, claim or legal obligation; provider-held or recoverable copies may remain separately.
Your rights and complaints
Under UK data protection law, you may have rights to access, correct or delete your information, restrict its use, or receive a copy in a portable format. The rights available depend on the circumstances and are subject to legal conditions and exceptions. Contact us at privacy@carrot.news; you do not need to use a special form. We may ask for information reasonably needed to identify you or locate the information.
Right to object: you may object to processing based on legitimate interests. Tell us which processing you object to and why; the right is subject to applicable legal conditions.
You can also complain to us about our handling of personal information. In the UK you may complain to the Information Commission. You may have additional rights or access to another supervisory authority depending on where you live or work.
Changes to this notice
We will update this notice if our website or its data-handling practices change.