Privacy Policy

1. Overview

This policy explains how Tiph Ltd collects and uses personal data through tiph.agency and in its business communications, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Data Controller

The data controller for the activities described in this policy is:
Tiph Ltd
128 City Road
London EC1V 2NX
United Kingdom
Company Number: 17199579
Email: hello@tiph.agency

3. Data We Collect

Server Log Files

Cloudflare, our hosting provider, records technical data with each request to the website: browser type and version, operating system, referrer URL, hostname of the accessing device, time of the request and IP address. We use this data to operate and secure the website. The legal basis is our legitimate interest in a secure, functioning website (Article 6(1)(f) UK GDPR).

Enquiry Forms

The website has three enquiry forms. Each submission is delivered to our mailbox at hello@tiph.agency, where we handle your request and any follow-up correspondence. Your IP address is used briefly to protect the forms against repeated submissions.

Contact form

We collect your name, email address and message, and optionally your organisation and a subject, to answer your enquiry. The legal basis is our legitimate interest in responding to the people who contact us (Article 6(1)(f) UK GDPR).

Custom software project request

We collect your name, work email address and a description of the work you need, and optionally your organisation, to discuss and scope your project. The legal basis is taking steps at your request before entering into a contract (Article 6(1)(b) UK GDPR).

Kazinga demo request

We collect your name, work email address and a note about your rate requests, such as the languages, formats and volumes you handle, and optionally your company, to arrange and prepare your demonstration. The legal basis is taking steps at your request before entering into a contract (Article 6(1)(b) UK GDPR).

Website Analytics

When you choose Accept all in the cookie settings, we record the pages you visit on tiph.agency: the page address, the website that referred you on arrival, your country, your device type and a random visitor ID held in the tiph_vid cookie. We use this data to understand which content is useful and to improve the website. The legal basis is your consent (Article 6(1)(a) UK GDPR and regulation 6 of the Privacy and Electronic Communications Regulations 2003). You can withdraw consent at any time under Cookie settings in the website footer; collection stops at once and the visitor ID is removed from your browser.

Consent Records

Each choice you make in the cookie settings is recorded with its date and a random consent ID, so that we can demonstrate your consent. The legal basis is our legal obligation to demonstrate consent (Article 6(1)(c) and Article 7(1) UK GDPR).

Business-to-business outreach

We may contact people at limited companies and other corporate organisations about Tiph services relevant to their work, including Kazinga. For this purpose, we use professional names, job titles, company names, work email addresses and relevant publicly available information about the business. We obtain this information from company websites, business directories such as the BIFA member directory, and public company announcements. We do not use sensitive personal information for this outreach.

We use these details to send a relevant business introduction, respond to enquiries and manage requests not to be contacted again. When the details identify a person, our lawful basis is Tiph's legitimate interest in introducing its services to potentially relevant businesses (Article 6(1)(f) UK GDPR), balanced against that person's interests and rights. We provide this privacy information when we first contact them.

You can object to the use of your personal data for direct marketing at any time by replying to our email or writing to hello@tiph.agency. We will stop marketing to you and keep only the minimum information needed to respect your request.

4. Your Rights

Under the UK GDPR and the Data Protection Act 2018, you have the following rights regarding your personal data:

• Right of access (Article 15)
• Right to rectification (Article 16)
• Right to erasure (Article 17)
• Right to restriction of processing (Article 18)
• Right to data portability (Article 20)
• Right to object (Article 21)
• Right to withdraw consent (Article 7(3))
• Right to lodge a complaint with the Information Commissioner's Office (ICO)

To exercise any of these rights, email hello@tiph.agency.

5. Data Retention

• Enquiries from all three forms: 12 months from the last correspondence, or for the duration of any business relationship that follows.
• Business outreach: we review unanswered prospect records and delete them within 12 months of the last contact. We keep a minimal suppression record for as long as needed to honour an objection or opt-out.
• Website analytics: 12 months.
• Consent records: 24 months.
• Server logs: a short operational period set by Cloudflare.

Analytics and consent records are deleted automatically when their retention period ends.

6. Data Security

All data is transmitted over encrypted connections and held by providers that apply strict access controls. Within Tiph, access to personal data is limited to the people who handle your request. Our technical and organisational measures are reviewed as technology and risks develop.

7. Service Providers

Tiph uses two service providers, each acting as a processor on our behalf under a data processing agreement:

• Cloudflare, Inc.: hosts the website and its server logs, processes and delivers enquiry form submissions, and stores analytics and consent records in the European Union.
• Zoho Corporation: provides our email service, where enquiries and business outreach are sent, received and stored.

Where personal data is processed outside the United Kingdom, the transfer is protected by the safeguards UK data protection law requires: UK adequacy regulations or the International Data Transfer Addendum to the EU Standard Contractual Clauses. Personal data is used solely for the purposes set out in this policy.

8. Changes to This Policy

We update this policy when our services or legal requirements change. The date at the top of this page marks the current version.