Tiraverse Ltd (“we”, “us” or “our”) explains here what personal data we collect when you visit tiraverse.co.uk or use its contact form, why we collect it, who else handles it, how long we keep it and what your rights are. We are the data controller for this data.
1. Data controller
The data controller is:
- Tiraverse Ltd
- Company Number: 17036977
- Registered in England & Wales
- Email: contact@tiraverse.co.uk
2. What personal data we collect
When you use the contact form, we collect your name, your email address, your company name if you give it, your mobile phone number with its country code, and your message.
With the form we also receive technical details: your IP address, your browser’s identification string, how long the page was open before you sent the form, and simple signals from your browser that help us tell people from automated programs.
When you browse the site, our web server records each request: your IP address, the date and time, the page requested, the page you came from and your browser’s identification string.
We count visits with Umami, which does not use cookies and does not store your IP address. It records the page and its title, the page you came from, your browser and its language, operating system, type of device, screen size and country.
We also use Google Analytics. It sets cookies only if you click Accept on our cookie banner. If you do not, Google Analytics may still receive basic measurement signals without cookies, which do not recognise you from one visit to the next.
Settings kept in your browser: your cookie choice and, if you use the motion switch, whether moving images are on or off. These stay on your device and are not sent to us.
3. Why we use it, and our legal basis
Under the UK General Data Protection Regulation (UK GDPR) we rely on these legal bases:
| Purpose | Data | Legal basis |
|---|---|---|
| Replying to your enquiry | Contact form details | Legitimate interests, or steps you ask us to take before a contract |
| Checking a message is genuine, not spam | Contact form details, IP address, technical details | Legitimate interests |
| Blocking addresses that keep sending rejected messages | IP address | Legitimate interests |
| Keeping the website secure and working | Server logs | Legitimate interests |
| Counting visits without cookies | Page, browser and device details | Legitimate interests |
| Measuring visits with Google Analytics cookies | Cookie identifiers, pages visited | Consent, which you can withdraw at any time |
Our legitimate interests are replying to people who contact us, keeping spam and abuse away from our inbox and website, and understanding which pages are useful. We do not sell your personal data.
4. Automatic checks on the contact form
Before a message reaches us, our server checks it automatically:
- It checks that the phone number is a valid mobile number for the country code you chose.
- It looks up your IP address with proxycheck.io to find its country and whether it belongs to a VPN, a proxy or a known source of abuse, and compares that country with your phone number’s country code.
- It sends your email address, phone number and message to Anthropic’s Claude service, which tells us whether the message looks like a genuine enquiry or spam. Your name and company are not sent. Under Anthropic’s commercial terms, this data is not used to train its models.
If a check fails, the message is not delivered as an enquiry. We keep a record of the rejected attempt and send ourselves a copy. After two rejected attempts from the same IP address, the form stops accepting messages from that address.
These checks exist only to filter spam. Apart from them, we make no automated decisions about you. If you think a genuine message was rejected, email us directly at contact@tiraverse.co.uk.
5. Who else handles your data
The website is served from our own server in the United Kingdom. These services handle personal data for us:
| Service | What it does for us | What it receives |
|---|---|---|
| Hetzner Online | Runs the gateway server all website traffic passes through, in Helsinki, Finland | Technical request details, including IP address |
| Anthropic | Checks contact form messages for spam | Email address, phone number, message |
| proxycheck.io | Looks up the country and type of an IP address | IP address |
| FormSubmit | Delivers enquiries, and copies of rejected attempts, to our email | Contact form details, IP address and its country |
| Porkbun | Forwards email sent to our domain to our inbox | The emails above |
| Google Analytics | Cookie identifiers (with consent), page and browser details | |
| Umami | Counts visits without cookies | Page and title, browser and language, device, screen size and country |
6. How long we keep it
| Data | Kept for |
|---|---|
| Enquiries you send us | 24 months from receipt |
| Record of rejected form attempts | 12 months |
| Blocked IP addresses | 12 months |
| Web server logs | 14 days |
| Google Analytics data | At most 14 months |
| Umami visit statistics | Kept as totals that do not identify you |
7. Data sent outside the UK
Some of the services above are based outside the United Kingdom: Anthropic, Google and Porkbun in the United States, and Hetzner’s gateway server in Finland. Where personal data leaves the UK, it is protected by UK adequacy regulations (which cover the European Economic Area and US companies certified under the UK–US data bridge) or by the contractual safeguards in the provider’s terms.
8. Data security
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure or destruction. The website is served only over HTTPS, so form details travel encrypted. Automated security tools read our server logs to block abusive traffic. Access to enquiries, the record of rejected attempts and the logs is limited to the people at Tiraverse who need it.
9. Your rights
Under the UK GDPR, you have the following rights in relation to your personal data:
- Right of access: You can request a copy of the personal data we hold about you.
- Right to rectification: You can request that we correct any inaccurate or incomplete personal data.
- Right to erasure: You can request that we delete your personal data where there is no compelling reason for us to continue processing it.
- Right to data portability: You can request a copy of your personal data in a structured, commonly used, machine-readable format.
- Right to restriction: You can request that we restrict the processing of your personal data in certain circumstances.
- Right to object: You can object to the processing of your personal data where we are relying on a legitimate interest.
- Right to withdraw consent: Where we are relying on consent to process your data, you can withdraw that consent at any time. You can change your cookie choice at any time with the “Cookie settings” link at the foot of every page.
To exercise any of these rights, please email us at contact@tiraverse.co.uk. We will respond to your request within one month.
10. Complaints
If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO):
- Information Commissioner’s Office
- Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
- Website: ico.org.uk
11. ICO registration
We are registered with the Information Commissioner’s Office (ICO). Our registration number is ZC094725.
12. Children’s privacy
Our website and services are not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us and we will delete it promptly.
13. Changes to this policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated “Last updated” date. We encourage you to review this policy periodically.
14. Contact us
If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us:
- Email: contact@tiraverse.co.uk
- Tiraverse Ltd, Company Number: 17036977, Registered in England & Wales