Privacy policy.
How Lar collects, uses and protects your personal data.
Who we are
Lar is operated by Lar Opco Ltd, a company registered in Scotland (SC886054). When this policy says Lar, we, us or our, it means Lar Opco Ltd. You can contact us at hello@uselar.com.
What data we collect
When you use Lar
The data you enter: property details, tenancy information, mortgage data, compliance records and financial information. This is stored on Supabase infrastructure in the EU.
Automatically collected data
We use Plausible Analytics, which does not use cookies and does not track individual users. It collects aggregate page-view data only.
Separately, and only if you accept it, we use the Meta pixel to measure whether our advertising works. It sets a cookie and shares limited browsing events on this site (pages viewed, sign-up clicks) with Meta Platforms, Inc. It never loads unless you choose Accept in the cookie banner, and you can change your mind at any time. The same events also pass through Meta’s Conversions API Gateway, a relay described under Third-party services. See Cookies below.
When you create an account after following one of our adverts
When you arrive from one of our adverts on Facebook or Instagram and then create an account, our server sends Meta one message so we can see which adverts lead to new accounts. It contains the click reference Meta added to the advert link you followed, with the time we first saw it, a reference number for your new account so that the same account is not counted twice, and the date and time the account was created. It does not contain your name. It does not contain your email address either; if we ever switch that on, the address would be sent only in hashed (pseudonymised) form, as in the message described next. Nothing is sent if you reached Lar any other way. Meta uses the click reference to match the new account to the advert and reports the result to us in aggregate; Meta’s privacy policy describes what else it does with data about you. This message comes from our server, so it does not depend on the cookie choice you make on this site. You can object, or ask us anything about it, at any time by emailing hello@uselar.com.
When you start a paid plan
When you choose a paid plan and your subscription starts (including the free trial at the start of it), our server sends Meta one message so we can measure whether our advertising led to the subscription. It contains a hashed (pseudonymised) version of the email address on your account, a hashed identifier for your account, your subscription reference, the date and time, and the currency (GBP). Meta uses the hashed data to match the subscription to a Facebook or Instagram account that saw one of our adverts, reports the result to us in aggregate, and says it deletes the hashed email once that matching is done; Meta’s privacy policy describes what else it does with data about you. We do not send your name, your properties, your tenants or any financial data. This message comes from our server, so it does not depend on the cookie choice you make on this site. You can object at any time by emailing hello@uselar.com. If you have a Facebook or Instagram account, Meta’s settings for activity off Meta technologies let you see and disconnect data of this kind.
How we use your data
- To provide and operate the Lar service
- To respond to your enquiries
- To improve the service
- To measure whether our advertising works, as described under What data we collect
We do not sell or rent your personal data, and we do not share it with third parties for their own marketing. The one advertising use is the Meta measurement described above.
Legal basis for processing
- Consent, for the Meta pixel and its relay, which only run if you accept them in the cookie banner
- Contract, when you use Lar under our terms of service
- Legitimate interest, for service improvement and security
Data storage and security
Your data is stored in the European Union. We use Supabase for application data, which maintains EU data residency. If you accept the Meta pixel, its events are also sent through a relay in the United States; see Third-party services below. The messages our server sends Meta, described under What data we collect, are also processed by Meta in the United States. Data is encrypted in transit (TLS) and at rest. The security page has the detail.
Data retention
We keep your data for as long as your account is active or as needed to provide the service. If you ask for deletion, we remove your data within 30 days, except where the law requires us to keep it.
Your rights
Under UK GDPR you have the right to:
- Access your personal data
- Correct inaccurate data
- Delete your data
- Export your data in a portable format
- Withdraw consent at any time
- Object to processing based on legitimate interest
- Complain to the Information Commissioner’s Office if you believe your rights have been breached
To exercise any of these, email hello@uselar.com.
Third-party services
- Supabase: database and authentication, EU hosted
- Plausible Analytics: cookieless analytics
- Meta: advertising measurement. The pixel on this site runs only with your consent. Separately, our server sends Meta one message when you create an account after following one of our adverts (the advert’s click reference and an account reference) and one when you start a paid plan (a hashed version of your email address and a hashed identifier for your account), both described under What data we collect
- Meta Conversions API Gateway: a relay for the Meta pixel, only with your consent. For each event the pixel records (a page view, or a click on a sign-up link), your browser also sends a copy to this relay, which passes it on to Meta directly from its servers. It runs on Amazon Web Services in the United States (region us-east-1), with a fallback on Google Cloud, also in the United States. Each event includes the page address and the page you came from, the pixel’s browser ID, any click ID from a Meta ad that brought you here and, as with any web request, your IP address and browser type. We do not give the relay your name or email address. The hashed email we send when you start a paid plan goes to Meta directly from our server, not through this relay.
- Stripe: payment processing
- Cal.com: appointment scheduling
Each has its own privacy policy. We share only the minimum data each needs to function.
Cookies
Our analytics are cookieless. We may use essential cookies for authentication and session management while you are logged into the application; these are strictly necessary and cannot be opted out of while using the service.
The only optional cookie is the Meta pixel, which measures our advertising. It is off by default and only set if you accept it in the cookie banner. Declining changes nothing about how the site works.
Separately from cookies, when you arrive via a link carrying campaign tags (such as utm_source or an advertising click ID like fbclid or gclid), we keep the first set we see in your browser’s local storage, along with the page you landed on and when. This happens whether or not you accept the cookie. When you follow a link from this site to app.uselar.com, the tags travel with the link and the app keeps its own copy. If you then sign up with an email address, the app saves those tags with your account so we can see which campaign the sign-up came from. If those tags include a Meta click ID, our server sends that click ID to Meta when the account is created, as described under What data we collect. We do not send the stored tags to anyone else. (If you accepted the pixel, it reads any Meta click ID from the page address itself, as described under Third-party services.) You can remove them from your browser by clearing this site’s data and the app’s data; to have them removed from your account, email hello@uselar.com.
You can change your choice at any time: .
Children
Lar is not intended for anyone under 18. We do not knowingly collect data from children.
Changes to this policy
We may update this policy from time to time and will notify you of significant changes by email or a notice on the website. The date at the top shows when it was last revised.
Contact
Questions about this policy or your personal data: hello@uselar.com.
Lar Opco Ltd
Registered in Scotland, company number SC886054
Registered office: 5 South Charlotte Street, Edinburgh EH2 4AN