Privacy Policy

Scope of this policy

This policy covers personal data of website visitors, people who send us enquiries, contacts at our clients, suppliers and partners, and job applicants.

Data we collect

We may collect the following personal data:

• Identity data — name, job title and employer.
• Contact data — email address and business address.
• Project data — the type of project, your requirements and any files or messages you share with us.
• Commercial data — details needed for contracts, invoicing and payments.
• Technical data — IP address, browser and device type, operating system and pages visited.

Sources of data

Most data comes directly from you through the contact form, email and messages. Technical data is collected automatically through essential cookies and server logs. We may also obtain business contact details from public sources such as Companies House or professional networks.

Purposes of processing

We use personal data to:

• respond to your enquiries and messages;
• prepare estimates, proposals and contracts;
• deliver software development and support services;
• manage invoicing, payments and record-keeping;
• operate, protect and improve the website;
• meet our legal and regulatory obligations.

Lawful bases

We process personal data on the following bases: consent, for example when you submit the contact form; contract, where processing is needed to enter into or perform a contract with you; legitimate interests, such as managing client relationships and securing our systems, where these are not overridden by your rights; and legal obligation, for example retaining accounting records.

Who we share data with

We do not sell or rent personal data. We share it only where necessary with:

• infrastructure and software providers that host our website, email, code repositories and project tools;
• professional advisers, including accountants, legal advisers and insurers;
• vetted subcontractors working on your project under confidentiality and data processing terms;
• regulators, courts or law enforcement where required by law.

International transfers

Where a provider processes personal data outside the UK, we make sure the transfer is protected by UK adequacy regulations or appropriate safeguards such as the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.

How we protect data

We apply technical and organisational measures appropriate to the risk, including encryption in transit and at rest where available, role-based access, multi-factor authentication, secure development practices and confidentiality commitments from everyone who handles personal data.

Retention

Enquiry data that does not result in a contract is deleted within 24 months of our last contact. Client and supplier records are retained for the duration of the relationship and for up to six years afterwards to meet legal, tax and accounting requirements. Job application data is kept for up to 12 months.

Your rights

You have the right to:

• request access to your personal data;
• have inaccurate data corrected;
• request erasure of your data where there is no reason for us to keep it;
• restrict or object to processing, including processing based on legitimate interests;
• receive your data in a structured, machine-readable format;
• withdraw consent at any time.

Complaints

If you have concerns about how we use your data, please contact us and we will do our best to resolve them. You also have the right to lodge a complaint with the Information Commissioner’s Office at ico.org.uk.

Updates and contact

We may update this policy from time to time and will publish the latest version on this page. For questions or requests, email hello@tersantas.com or write to TERSANTAS LTD, Suite 6001, 128 Aldersgate Street, Barbican, London, England, EC1A 4AE.