Privacy Policy

1. Who we are

Tiri.Tese Ltd ("we", "us", "our") is a software product studio registered in England and Wales (Company No. 16602529), with our registered office at 85 Great Portland Street, First Floor, London W1W 7LT. We are the data controller for personal data collected through this website and our products.

You can contact us at any time regarding privacy matters at: info@tese.uk

2. What data we collect

Data you provide directly

• Name, email address, and organisation name when you submit our contact form or subscribe to updates
• The content of any messages or notes you submit to us
• Account and profile information when you register for one of our products

Data collected automatically

• IP address, browser type, and device type for security and analytics purposes
• Pages visited, time on site, and referring URLs via anonymised analytics
• Cookies and similar tracking technologies (see our Cookie Policy)

3. How we use your data

We use personal data for the following purposes:

• To respond to enquiries — when you contact us, we use your name and email to reply
• To provide our products and services — account management, product delivery, and customer support
• To send updates you have opted into — articles, product news, and relevant communications
• To improve our website and products — aggregated analytics help us understand how our site is used
• To meet legal obligations — including tax, company law, and regulatory requirements

4. Legal basis for processing (UK GDPR)

• Legitimate interests — responding to enquiries, improving our services, and security monitoring
• Contract performance — processing data necessary to deliver our products to clients
• Consent — for marketing communications and non-essential cookies
• Legal obligation — where we are required to process data to comply with law

5. Who we share your data with

We do not sell personal data. We may share data with:

• Service providers — hosting providers, email platforms, and analytics tools who process data on our behalf under data processing agreements
• Professional advisors — lawyers and accountants where required
• Regulatory authorities — where required by law, including HMRC and the ICO

All third-party processors are bound by appropriate data protection agreements and operate in compliance with UK GDPR.

6. International transfers

Where personal data is transferred outside the UK or EEA, we ensure appropriate safeguards are in place, including Standard Contractual Clauses or adequacy decisions recognised by the UK Information Commissioner's Office.

7. Data retention

We retain personal data only for as long as necessary for the purpose for which it was collected, or as required by law. Contact enquiries are typically retained for two years. Client account data is retained for the duration of the client relationship and for up to seven years thereafter for legal and accounting purposes.

8. Your rights under UK GDPR

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Request erasure of your data where there is no legitimate reason to retain it
• Object to processing based on legitimate interests
• Restrict processing in certain circumstances
• Data portability — receive your data in a machine-readable format
• Withdraw consent at any time where processing is based on consent

To exercise any of these rights, contact us at info@tese.uk. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office at ico.org.uk.

9. Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or disclosure. These include encryption in transit and at rest, access controls, and regular security reviews. We are actively pursuing Cyber Essentials certification.

10. Changes to this policy

We may update this policy from time to time. When we make material changes, we will update the date at the top of this page. Continued use of our website or products after changes are posted constitutes acceptance of the updated policy.