Privacy Policy

1. Introduction

Tivanta (“we”, “us”, “our”) is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our website or subscribe to our services.

This policy is in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. By using our website or services, you agree to the collection and use of information in accordance with this policy.

2. Who We Are

Tivanta is a website design and management service based in the United Kingdom, specialising in building custom websites for content creators. We are the data controller responsible for your personal data.

If you have any questions about this Privacy Policy or how we handle your data, please contact us through the contact page on our website.

3. What Personal Data We Collect

We may collect and process the following personal data:

3.1 Information you provide directly to us:

Your name
Email address
Social media handles or platform usernames
Billing information (processed securely via our payment provider)
Any content, images, or materials you provide for inclusion on your website
Communications you send to us

3.2 Information collected automatically:

IP address
Browser type and version
Pages visited on our website and time spent on each page
Referring website or source
Device type and operating system
Cookies and similar tracking technologies (see Section 8)

4. How We Use Your Personal Data

We use your personal data for the following purposes:

To provide and manage your subscription and associated services.
To build, update, and maintain your website.
To process payments and manage your billing.
To communicate with you regarding your subscription, service updates, or modification requests.
To respond to enquiries submitted via our contact form.
To improve our website and services based on how users interact with them.
To comply with our legal and regulatory obligations.
To send you relevant service-related communications (we will not send marketing emails without your consent).

5. Legal Basis for Processing

Under the UK GDPR, we rely on the following legal bases to process your personal data:

Contract: Processing is necessary to perform the subscription contract between us.
Legitimate Interests: Processing is necessary for our legitimate business interests, such as improving our services and communicating with clients.
Legal Obligation: Processing is necessary to comply with applicable laws and regulations.
Consent: Where we rely on consent (such as for marketing communications), you have the right to withdraw your consent at any time.

6. Who We Share Your Data With

We do not sell, rent, or trade your personal data to any third parties. We may share your data with trusted third-party service providers who assist us in delivering our services, including:

Payment processors (to handle subscription billing securely).
Hosting providers (to store and serve your website).
Domain registrars (to register and manage your domain name).
Security and monitoring tools (to protect your website from threats).
Email service providers (to manage professional email addresses).

All third-party providers are required to handle your data in accordance with applicable data protection laws and are only permitted to process your data for the specific purposes we instruct.

We may also disclose your personal data if required to do so by law or in response to a valid request from a public authority.

7. How Long We Keep Your Data

We retain your personal data for as long as your subscription remains active and for a reasonable period thereafter, as required to comply with our legal obligations, resolve disputes, and enforce our agreements.

Upon cancellation of your subscription, we will retain your data for a period of up to 12 months, after which it will be securely deleted or anonymised, unless we are legally required to retain it for longer.

8. Cookies

Our website uses cookies to improve your browsing experience and to analyse how visitors use our site. Cookies are small text files placed on your device when you visit our website.

We use the following types of cookies:

Essential Cookies: Necessary for the website to function correctly.
Analytics Cookies: Help us understand how visitors interact with our website (e.g. Google Analytics).
Preference Cookies: Remember your settings and preferences for future visits.

You can control and manage cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of our website.

9. Your Rights Under UK GDPR

Under the UK GDPR, you have the following rights regarding your personal data:

Right to Access: You have the right to request a copy of the personal data we hold about you.
Right to Rectification: You have the right to request that we correct any inaccurate or incomplete data.
Right to Erasure: You have the right to request that we delete your personal data in certain circumstances.
Right to Restriction: You have the right to request that we restrict the processing of your data in certain circumstances.
Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, machine-readable format.
Right to Object: You have the right to object to the processing of your data where we rely on legitimate interests as our legal basis.
Right to Withdraw Consent: Where processing is based on consent, you have the right to withdraw it at any time.

To exercise any of these rights, please contact us through the contact page on our website. We will respond to your request within 30 days.

10. Data Security

We take the security of your personal data seriously and implement appropriate technical and organisational measures to protect it against unauthorised access, loss, destruction, or alteration. These measures include regular security checks, malware monitoring, and daily backups.

Whilst we take all reasonable precautions, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee the absolute security of your data.

11. Third-Party Links

Our website may contain links to third-party websites, social media platforms, or services. We are not responsible for the privacy practices of those third parties and encourage you to review their privacy policies before providing any personal data.

12. Children’s Privacy

Our services are not directed at individuals under the age of 18. We do not knowingly collect personal data from anyone under 18 years of age. If you believe we have inadvertently collected data from a minor, please contact us immediately and we will take steps to delete it.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any significant changes by updating the date at the top of this policy. We encourage you to review this policy periodically.

14. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way we handle your personal data, please contact us at contact@tivanta.agency