Privacy Policy | Tractic

This Privacy Policy explains how Tractic Limited ("we", "us", "our") collects and uses personal data when you use tractic.co.uk (the "Website") or contact us.

1. Who we are (Data Controller)

Controller: Tractic Limited

Registered address: DE139DS, UK

Email: info@tractic.co.uk

2. What personal data we collect

We collect personal data that you submit via the Website form, which may include:

Identity data: your name
Contact data: email address and other contact details you provide (e.g., phone number)
Enquiry data: the contents of your message and any information you choose to include

We also collect limited technical and usage data through Google Analytics, such as:

IP address (typically used in a truncated/processed form depending on configuration)
device and browser information
pages viewed, approximate location, and on-site interactions (aggregated analytics)

3. How we collect your data

Directly from you when you submit the Website contact form
Automatically through cookies/identifiers where you have provided consent (e.g., Google Analytics)

4. Why we use your data and our lawful bases

We use your personal data only where we have a lawful basis under UK GDPR:

Purpose	Data used	Lawful basis
1) Respond to enquiries	Name, contact details, enquiry content	Legitimate interests (responding to enquiries and running our business) and/or steps prior to contract
2) Deliver consultancy services	Contact details, project-related communications	Contract (performance of a contract) and/or steps prior to contract
3) Manage proposals, contracts and invoicing	Contact details, business communications, billing information (where applicable)	Contract and legal obligation (e.g., accounting/tax)
4) Website security and fraud prevention	Technical data, logs (where applicable)	Legitimate interests (protecting our Website, preventing abuse)
5) Marketing/newsletter (if used)	Name, email, preferences	Typically consent (opt-in) and legitimate interests for limited B2B relationship updates where appropriate

Legitimate interests: Where we rely on legitimate interests, we do so to operate and protect our business, respond to enquiries, and improve our Website and services. You can object to processing based on legitimate interests (see Section 9).

5. Marketing and newsletters

If we run marketing or a newsletter:

We will normally send marketing emails only where you have opted in/consented, or where lawful under applicable rules for business communications.
You can opt out at any time by using the unsubscribe link (if provided) or emailing info@tractic.co.uk.

6. Cookies and Google Analytics

We use cookies and similar technologies on our Website.

Cookie consent: You have a cookie consent mechanism in place. Non-essential cookies (including analytics) should only be set where you have provided consent via that tool.
Google Analytics: Used to understand Website usage and improve performance and content. Analytics data is generally used in aggregated form.
You can also manage cookies in your browser settings. (Note: disabling cookies may affect some Website functionality.)

7. Sharing your data

We may share personal data with trusted third parties only where necessary, including:

Website hosting and IT providers
Email and productivity services
Google Analytics (Google LLC) as an analytics provider
Professional advisers (e.g., accountants) where needed for invoicing/tax compliance
Subcontractors supporting delivery of consultancy services (where applicable), under appropriate confidentiality and data protection terms

We do not sell your personal data.

8. International transfers

Some of our service providers (including Google) may process data outside the UK.

Where personal data is transferred outside the UK, we will ensure appropriate safeguards are used, such as:

UK adequacy regulations (where applicable), and/or
contractual protections (e.g., standard contractual clauses / UK addendum), and
additional technical/organisational measures where appropriate

9. Your rights

You have rights under UK GDPR, including:

Access to your personal data
Rectification of inaccurate data
Erasure (in certain cases)
Restriction of processing (in certain cases)
Data portability (in certain cases)
Object to processing (especially where we rely on legitimate interests)
Withdraw consent at any time where processing is based on consent (this won't affect processing that occurred before withdrawal)

To exercise your rights, email info@tractic.co.uk. We may need to verify your identity before responding.

10. How long we keep your data (Retention)

We keep personal data only for as long as needed for the purposes described above:

Website enquiries (no contract): typically up to 12-24 months after last contact
Client/project communications and deliverables: typically for the duration of the engagement + up to 6 years (to support contractual, legal, and professional obligations)
Invoicing and accounting records: typically up to 6 years (or longer if required by law)

We may keep data longer where needed to establish, exercise or defend legal claims.

11. Security

We use reasonable technical and organisational measures to protect personal data from loss, misuse, unauthorised access, alteration, or disclosure. However, no website or email transmission is completely secure.

12. Links to other websites

Our Website may contain links to third-party sites. We are not responsible for their privacy practices. Please review their policies.

13. Complaints

If you have concerns, please contact us first at info@tractic.co.uk.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) (the UK data protection regulator).

14. Changes to this policy

We may update this Privacy Policy from time to time. We will post the latest version on this page with an updated "Last updated" date.