Tatitech
Privacy policy
Last updated: 30 October 2026
This policy explains what personal data we collect when you visit tatitech.co.uk or contact us, why we collect it, and the rights you have under the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and, where it applies, the EU GDPR.
1. Who we are
The controller is Tati Consulting Ltd (“Tatitech”), a company registered in England and Wales under number 11167710, based in London, E14 9NB, United Kingdom.
For anything about your data, use the contact form or email [email protected].
2. What we collect
When you use the contact form: your name and email address, and optionally your company, phone number and message.
When you sign up to the newsletter: your email address and the date you gave consent. You are only signed up if you tick the box.
When you visit the website:
- Technical data needed to run and protect the site (for example IP address, device and browser type).
- Visit statistics through Google Analytics, only if you accept them in the cookie banner. See our Cookie policy.
3. Why we use it, and our lawful basis
| Purpose | Lawful basis |
|---|---|
| Replying to your enquiry and preparing a proposal | Steps taken at your request before entering into a contract (Article 6(1)(b)) |
| Sending the newsletter | Your consent (Article 6(1)(a)) |
| Visit statistics | Your consent (Article 6(1)(a)) |
| Protecting the site from spam and abuse | Our legitimate interest in keeping the site secure (Article 6(1)(f)) |
We never sell your data, and we do not use it for automated decision-making.
4. Who we share it with
We use trusted providers who process data on our behalf and are contractually bound to protect it:
- Cloudflare — website hosting, security and spam protection (Turnstile), and delivering the contact form.
- Google — email (Google Workspace) and visit statistics (Google Analytics, Google Tag Manager).
- Mailchimp (Intuit) — sending the newsletter.
Some of these providers may process data outside the UK and the European Economic Area, for example in the United States. Where they do, the transfer relies on the UK Extension to the EU–US Data Privacy Framework, or on the International Data Transfer Agreement / Standard Contractual Clauses.
5. How long we keep it
- Enquiries: up to 5 years after our last contact, so we can refer back to earlier conversations if you get in touch again. You can ask us to delete them sooner at any time.
- Clients: for as long as we work together, and afterwards for as long as the law requires (for example, tax records for up to 6 years).
- Newsletter: until you unsubscribe. Every email contains an unsubscribe link.
- Google Analytics statistics: up to 14 months.
6. Your rights
You have the right to access your data, and to ask for it to be corrected, erased, restricted or transferred, and to object to its use. Where we rely on your consent, you can withdraw it at any time; this does not affect anything we did before.
To exercise your rights, use the contact form or email [email protected]. We will reply within one month.
If you are unhappy with how we handle your data, you can complain to the Information Commissioner’s Office (ico.org.uk). If you are in the EU, you can also contact your local data protection authority.
7. Security
The website is served only over an encrypted connection (HTTPS) and has no database or admin area reachable from the internet. Access to your data is limited to the people who need it to help you.
8. Children
The website is aimed at businesses. We do not knowingly collect data from anyone under 16.
9. Changes
We may update this policy. The date at the top of the page shows when it last changed.