Legal
Privacy Policy
How we handle your personal data — in plain English. What we collect, why, how long we keep it, and your rights under UK GDPR.
What we collect
When you contact us or use our services, we may collect:
- Contact information: name, email, phone number, and company name.
- Project information: details about your business, goals, and requirements.
- Communications: records of emails, calls, or messages with our team.
- Technical data: basic technical information such as your IP address, logged by our hosting and content-delivery providers to serve and secure the site. We do not use advertising or behavioural tracking cookies.
- Payment data: billing details, handled by secure third-party processors — we do not store card details.
We do not collect sensitive personal data unless specifically required for a project and agreed in advance.
How we use it
We use personal information to:
- Respond to enquiries and communicate about your project.
- Deliver the services you've engaged us to provide.
- Send project updates, proposals, and invoices.
- Improve how we operate, and comply with legal obligations.
We will not use your data for unsolicited marketing without your explicit consent.
Third-party tools
To deliver our services we use trusted third-party platforms — cloud hosting, AI model APIs, payment processors, and project management software. Where these process personal data on our behalf, they are bound by appropriate data processing agreements. We do not sell your data.
Data retention
We retain personal data for as long as necessary to deliver our services and for a reasonable period thereafter — typically no longer than three years from the end of our engagement, unless a longer period is required by law.
Your rights under UK GDPR
As a UK resident, you have the right to:
- Access — request a copy of the data we hold about you.
- Rectification — correct inaccurate or incomplete data.
- Erasure — request deletion, subject to legal retention obligations.
- Restriction — limit how we use your data in certain circumstances.
- Portability — receive your data in a structured, machine-readable format.
- Object — object to processing based on legitimate interests.
To exercise any of these rights, contact us at privacy@tattvanet.com. We respond within 30 days. If you're not satisfied, you may lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
Contact for data requests
Data Controller: Shivam Patel trading as Tattvanet
Based in: London, United Kingdom
Email (data requests): privacy@tattvanet.com