Your privacy matters

1. Who we are

The data controller is Tardi Group Ltd, a company registered in England and Wales (company number 16182144).

We are registered with the Information Commissioner's Office (ICO) under registration reference ZC085824.

For any data protection matter, contact us at data@tardi-group.com or by post to the address above.

2. Information we collect

Details you provide

• Your name, email address, and phone number.
• Information about your enquiry or the services you are interested in.

Technical data

• Basic technical data from website usage (see our Cookie policy).
• Analytics and usage data collected via Google Analytics, Meta Pixel, and Microsoft Clarity, including IP address, device and browser information, pages visited, and session recordings. This data is only collected where you have given cookie consent.

3. How we use your information and our lawful basis

4. Who we share your data with

We do not sell personal data. We may disclose information to:

• Website and infrastructure providers: companies that host our website and handle form submissions on our behalf.
• Analytics and marketing technology providers: Google LLC (Google Analytics), Meta Platforms Ireland Ltd (Meta Pixel), and Microsoft Corporation (Microsoft Clarity), acting as data processors or independent controllers under their own terms.
• FCA-regulated advisers and professional partners: where your enquiry requires involvement of a regulated adviser or specialist.
• Legal and regulatory authorities: where required by law or to protect our legal rights.

All processors are required to handle your data only on our instructions and in accordance with UK GDPR.

5. International transfers

Some of our service providers are based outside the UK, including in the United States (Google LLC, Meta Platforms, Inc., and Microsoft Corporation). Transfers to these providers are made on the basis of the UK International Data Transfer Agreement (IDTA) or equivalent standard contractual clauses approved by the ICO, or where an adequacy decision applies. You can request a copy of the relevant transfer safeguards by contacting privacy@tardi-group.com.

6. How long we keep your data

• Enquiry and contact data where no client relationship results: up to 2 years from last contact.
• Client records (where a services engagement follows): up to 6 years from the end of the engagement, in line with standard UK legal and regulatory requirements.
• Analytics data: subject to the retention settings of the relevant provider (typically 14 months for Google Analytics). See our Cookie policy for further detail.

After the applicable period, data is securely deleted or anonymised.

7. Your rights

Under UK GDPR you have the following rights:

• Access: to obtain a copy of the personal data we hold about you.
• Rectification: to have inaccurate data corrected.
• Erasure: to request deletion where data is no longer necessary, consent is withdrawn, or processing is unlawful.
• Portability: to receive data you have provided to us in a machine-readable format, where processing is based on consent or contract.
• Restriction: to limit how we use your data in certain circumstances.
• Objection: to object to processing based on legitimate interests. We will stop unless we can demonstrate compelling legitimate grounds that override your interests.
• Withdraw consent: where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, contact us at privacy@tardi-group.com. We will respond within one calendar month. We do not charge a fee for reasonable requests.

8. Right to complain to the ICO

If you believe we have handled your personal data unlawfully, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection matters.

We would, however, appreciate the chance to address your concerns before you approach the ICO, so please contact us first at privacy@tardi-group.com.

9. Providing your data

Providing your personal data through our contact form is voluntary and not a statutory or contractual requirement. However, if you do not provide your contact details and the information relevant to your enquiry, we will be unable to respond to or progress your request.

10. Automated decision-making

We do not carry out any automated decision-making or profiling that produces legal or similarly significant effects on individuals.

Contact us

• Data subject rights and privacy: privacy@tardi-group.com
• Security incidents: security@tardi-group.com
• Legal matters: legal@tardi-group.com
• General enquiries: info@tardi-group.com