Cara & Bao — Operating systems that drive business

Privacy Policy

How we think about personal data.

This policy explains, in plain language, the kinds of information Cara & Bao may collect through this website, why we collect it, and how you can contact us. It does not invent technical implementations or corporate structures that are not yet established.

Last updated: 2026-07-19

Who we are

Cara & Bao is currently a founder-operated product and brand initiative. The final legal operating entity that will operate Cara & Bao commercially has not yet been incorporated.

Until incorporation, this website and related communications are operated by the founders under the Cara & Bao name.

We do not publish a company registration number, VAT number or registered office here, because those details do not yet exist for a Cara & Bao operating company.

For privacy and other questions, contact info@carabao.digital.

What data we may collect

Depending on how you interact with us, we may process limited categories of information.

  • Contact details you choose to share — such as name, email address and organisation.
  • Message content you send through contact or email channels.
  • Basic technical data created when you load the website — such as IP address, browser type and approximate location derived from network data — as part of ordinary hosting and security logs.
  • Account or product usage data if and when you become a customer of a Cara & Bao product — limited to what that product needs to operate, and governed by then-current product terms.

Why we collect it

We process information only for purposes that support operating this website and communicating responsibly.

  • Responding to enquiries and supporting conversations.
  • Operating, securing and improving the website.
  • Meeting legal obligations that may apply as the business incorporates and grows.
  • Communicating about products or updates when you have asked us to — or where the law allows.

How we process it

We aim for least complexity: collect what the operation needs, retain with purpose, and avoid ornamental data.

Access to personal data is limited to people who need it for the stated purpose.

We do not sell personal data.

How long we may retain it

Retention depends on the purpose. Enquiry records may be kept only as long as needed to complete the conversation and any related follow-up.

Customer operational data retention will be defined in product agreements when paid products are offered — not invented here.

When information is no longer needed, we aim to delete or anonymise it.

Your requests

You may contact us to ask what personal data we hold about you, to correct it, or to request deletion where applicable.

Write to info@carabao.digital. We will respond thoughtfully and within a reasonable time.

Some requests may be limited by legal obligations or the need to keep records of a conversation or security event.

International visitors

This website may be visited from more than one country. Hosting and delivery infrastructure may process technical data in the regions where those providers operate.

Cross-border arrangements for customer product environments will be documented when commercial services are offered.

Changes to this policy

We may update this policy as incorporation, products and legal obligations evolve. Material changes will be reflected on this page with an updated date.

Contact

All privacy questions: info@carabao.digital.

We do not currently maintain separate privacy@ or security@ mailboxes. Please use the address above and mark the subject clearly if your message concerns privacy or security.