Privacy policy

Effective date: 27 September 2026

This policy explains how LabCarry handles personal information collected through labcarry.com and related business enquiries.

Who is responsible

LabCarry is a brand of THINKTANK GROUP LIMITED (Company No. 81095612), 503A 5/F, Won Hing Building, 74–78 Stanley Street, Central, Hong Kong. For website privacy enquiries, contact sales@labcarry.com and use the subject “Privacy request”. Our website administrator coordinates these requests with the sales team.

Information we collect

When you contact us, we receive the information you provide, such as your name, company, business email, country, company type, project stage, manufacturing requirements and project description. Enquiries are stored in our restricted-access website records and sent to our sales mailbox for follow-up. Our hosting and security services may also process technical information, including IP addresses, browser details, request times and security logs.

Please send a non-confidential first brief. Do not submit patient information, identifiable research participant data, medical records or sensitive laboratory sample data through this website. Agree any necessary confidentiality terms before exchanging protected project files.

Why we use information

We use enquiry information to answer questions, assess requested hardware and manufacturing work, prepare quotations and manage business communications. We also use information to operate and secure the website, prevent misuse and meet applicable recordkeeping obligations. Where data protection law requires a lawful basis, these activities rely on steps requested before a contract, performance of a contract, our legitimate interests in responding to business enquiries and securing our services, or applicable legal obligations. Where consent is required, it must be obtained separately for that purpose.

The Contact form permission to reply to your project is not a subscription to a marketing newsletter or consent to analytics cookies. We do not sell personal information.

Service providers and access

Access is limited to personnel who need the information for their work and service providers supporting the website and communications. These include Hostinger for website hosting, our business email and SMTP delivery providers, and Google for Google Analytics. WordPress and its installed plugins support enquiry records, email delivery, backups and site administration. Technical or manufacturing colleagues receive project information where needed to assess your request.

Information may be processed in Hong Kong and other countries where our personnel or providers operate. Applicable data protection requirements and appropriate safeguards must be considered when transferring personal information internationally. We may also disclose information where required by law or to protect legal rights.

Retention and deletion

Our retention policy for enquiries that do not become an active customer relationship is up to 24 months after the last substantive contact, unless an ongoing discussion or a legal obligation requires longer retention. Records relating to orders, contracts, warranty support or disputes are retained for the relevant business and applicable legal period.

The sales team and website administrator are responsible for reviewing inactive enquiries and arranging deletion or anonymisation in website records and relevant mailboxes. This is an administrative process, not a claim that the website automatically deletes records. Backup copies follow the hosting or backup service’s retention cycle and may remain temporarily after removal from active systems. They are restricted to recovery purposes; if a backup is restored, previously accepted deletion requests must be reapplied.

Google analytics and cookies

Google Analytics 4 is connected through Google Site Kit, but website analytics collection is currently paused while on-site consent controls are being completed. Previously collected analytics may include cookie identifiers, pages visited, referring pages, device and browser information, approximate location and interaction events. Enquiry names, email addresses and project text should not be included in analytics events.

At the date of this policy, an on-site analytics consent preference panel has not yet been enabled. Publishing this policy does not itself obtain your consent. You can restrict cookies in your browser and use Google’s Analytics opt-out browser add-on where supported. These browser controls do not replace any consent that applicable law requires the website to obtain. Essential administration or security cookies may also be used.

For details of Google’s processing, see Google’s Privacy Policy and how Google uses information from sites that use its services.

Your requests and choices

Depending on applicable law, you may request access, correction, deletion, restriction or portability of your personal information, object to certain processing, or withdraw consent where processing is based on consent. Email sales@labcarry.com with enough information to identify the relevant enquiry. We may need to verify your identity before acting.

Our website administrator will coordinate the response, review relevant website and mailbox records, and explain any information that must be retained. We aim to respond within one month and will explain any permitted extension. You may also raise concerns with the data protection authority responsible for your location.

Security and other websites

We use access controls and operational safeguards to protect information, but no website or email system can guarantee absolute security. Links to external websites are governed by those websites’ own privacy policies.

Updates

We may update this policy when our services or data practices change. The effective date above identifies the current version. Contact sales@labcarry.com with questions.