Gera Services Ltd ("Gera", "we", "us", "our") is the data controller for personal data processed across all 35 Gera products operating globally, including GeraClinic, GeraHome, GeraMarket, GeraJobs, GeraCash, GeraEats, GeraRide, GeraRent, GeraSure, GeraLearn, GeraFarm, GeraCast, GeraCompliance, GeraGuard, GeraNexus, GeraMind, GeraVoice, GeraLens, GeraWitness, GeraSkills, GeraPersona, GeraClone, Gera Action Warranty, Gera Services Passport, GeraReach, GeraOS, Gera Prime, and Gera Games.
For data protection enquiries or to exercise your rights: [email protected]
This policy is written in compliance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations 2003 (PECR).
| Category | Data | Purpose | Lawful Basis |
|---|---|---|---|
| Account | Name, email address, password (hashed) | Account creation and authentication | Contract |
| Profile | Country, language preference, role | Localisation and service delivery | Contract |
| Transaction | Payment method (tokenised), amount, currency, date | Processing payments and generating receipts | Contract |
| Usage | Pages visited, features used, session duration | Product improvement and analytics (PostHog) | Legitimate interests / Consent |
| Technical | IP address, browser type, device type, cookies | Security, fraud prevention, performance | Legitimate interests |
| Support | Messages sent to support, issue descriptions | Customer support | Contract / Legitimate interests |
We use cookies and similar technologies. Strictly necessary cookies are always active. Analytics cookies (PostHog) require your consent. Marketing cookies require your explicit consent. You may update your cookie preferences at any time via the cookie banner or our Cookie Policy.
We use PostHog for product analytics. PostHog collects anonymised behavioural data including page views, feature usage, and conversion events. No personally identifiable information is exported from PostHog. Data is stored in the EU. You may opt out via cookie settings.
We share data only as necessary to provide our services:
We do not sell or rent your personal data to third parties for marketing purposes.
Some of our service providers process data outside the UK/EEA. We ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) or adequacy decisions, for all international transfers.
We retain personal data for as long as necessary to provide our services and comply with legal obligations. Account data is retained for 7 years after account closure for legal and tax purposes. Usage analytics are retained for 24 months. You may request deletion of your data at any time (see Your Rights below).
Under UK GDPR, you have the right to:
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
We implement appropriate technical and organisational measures to protect your personal data, including encryption in transit (TLS 1.2+), encryption at rest, access controls, and regular security audits. However, no method of transmission over the internet is 100% secure.
Our Services are not directed to children under 16. We do not knowingly collect personal data from children under 16. If you believe a child under 16 has provided us with personal data, please contact us at [email protected].
We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice on our website. The "Last updated" date at the top of this page indicates when this policy was most recently revised.
Data controller: Gera Services Ltd, England, United Kingdom.
Data protection enquiries: [email protected]
Support: [email protected]