1. Who we are
This website, homelabglobal.com, is operated by Homelab Global, a safety, risk and compliance consultancy based in Cyprus. For the purposes of the EU General Data Protection Regulation (GDPR) and Cyprus data protection law, the data controller is:
- Name: Homelab Global
- Contact for privacy matters: [email protected]
2. Data we collect
When you send an audit request
You give us: your full name, email address, phone or WhatsApp number, preferred contact method, the location and type of your property, who the audit is mainly for (for example a baby, a child or an elderly family member), the audit option you are interested in, any concerns and preferred dates you choose to write, whether the request is a gift, how you heard about us, and any partner or referral code. We also record that you gave consent, and the date and the page on which you gave it.
Please do not put sensitive information, such as health details, in the free-text boxes. If you do need to tell us something about a person's needs so that we can assess the home properly, share only what is necessary.
When you contact us by email or WhatsApp
We receive your contact details and the content of your messages.
When you visit the website
Our hosting provider processes technical data such as your IP address and browser type to deliver the site and keep it secure. If you accept analytics cookies, Google Analytics collects usage data as described in section 5.
During an audit
We record observations about your home. With your permission, we take photos and, for remote checks, we view your home by video. See section 4.
3. Why we use your data, and our legal basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Replying to your request and sending you a proposal | Taking steps at your request before a contract (Art. 6(1)(b)), and your consent (Art. 6(1)(a)) |
| Carrying out the audit and preparing your report | Performance of a contract (Art. 6(1)(b)) |
| Keeping records, invoicing and meeting tax and accounting duties | Legal obligation (Art. 6(1)(c)) |
| Keeping the website secure and preventing spam | Our legitimate interests (Art. 6(1)(f)) |
| Measuring website use with Google Analytics | Your consent (Art. 6(1)(a)), given through the cookie banner |
We do not sell your data. We do not use your request to send you marketing unless you separately agree to it.
4. Home photos taken during audits
Photos and video are taken only with your permission, and you can say no to any room or item. We use them only to prepare your report and action plan, and to answer questions about it.
- We aim to avoid photographing people, particularly children. If a person appears in a photo by accident, we will delete or crop it.
- We will not use your photos in marketing or case studies, or share them with anyone outside Homelab Global and our processors, without your separate written consent.
- Photos are stored securely in Google Drive and only the people who work on your audit can access them.
- You can ask us to delete your photos at any time.
5. Cookies and analytics
We use cookies for analytics only if you click "Accept" in the cookie banner. If you click "Reject", Google Analytics is not loaded and no analytics cookies are set. You can change your choice at any time through "Cookie settings" in the footer of every page.
| Name | Provider | Purpose | Duration |
|---|---|---|---|
_ga, _ga_* | Google Analytics (Google Ireland Limited) | Distinguishes visitors and measures how the website is used. Loaded only after you accept. | Up to 2 years |
hg_cookie_consent (stored in your browser's local storage, not a cookie) | Homelab Global | Remembers your cookie choice. Strictly necessary. | Until you clear your browser data |
Analytics data is kept for 14 months in Google Analytics, as configured in our account. IP addresses are anonymised.
6. Who processes your data for us
We use trusted service providers (processors) who handle data only on our instructions under a data processing agreement:
- HubSpot (HubSpot Ireland Limited and its group companies): our customer relationship management system. We may store your contact details and the history of our communication with you there.
- Cloudflare: hosts and protects this website, so it processes technical data such as IP addresses.
- Zoho Mail: handles the email we exchange with you, including the notification we receive when you send a request.
- Google Drive (Google Ireland Limited): stores photos, reports and other files from your audit.
- Google Analytics: only if you accept analytics cookies (section 5).
- Web3Forms: delivers the details you enter in the request form to us by email.
We may disclose data where the law requires it, or to professional advisers bound by confidentiality.
7. International transfers
Some of our providers, including HubSpot, Cloudflare, Zoho and Google, may process data outside the European Economic Area, including in the United States. Where this happens, we rely on safeguards such as the EU-US Data Privacy Framework certification of the provider or the European Commission's Standard Contractual Clauses. [Lawyer to confirm the transfer mechanism for each provider.]
8. How long we keep your data
| Data | Kept for |
|---|---|
| Requests that do not lead to an audit | 12 months after your last contact with us, then deleted |
| Audit reports, invoices and related records | 6 years after the audit, to meet accounting and legal duties and to handle questions or claims |
| Photos and video from audits | 12 months after we deliver your report, or earlier if you ask us to delete them |
| Analytics data | 14 months |
9. Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you;
- have inaccurate data corrected;
- have your data erased, in certain circumstances;
- restrict how we use your data, in certain circumstances;
- receive your data in a portable format;
- object to processing based on our legitimate interests;
- withdraw your consent at any time, without affecting the lawfulness of what we did before; and
- complain to the supervisory authority. In Cyprus this is the Office of the Commissioner for Personal Data Protection (dataprotection.gov.cy). You may also complain to the authority in the EU country where you live or work.
To use any of these rights, email [email protected]. We reply within one month. We may ask you to confirm your identity first.
10. Security and children
We use access controls and reputable providers to protect your data, but no system is completely secure. Our services are for adults. We do not knowingly collect data from children through this website.
11. Changes to this notice
If we change this notice, we will update the date at the top. If a change is significant, we will tell you in a clear way, for example on this website.