Effective 20 September 2026
Privacy policy
Scope of the desk
This notice is the desk card for TNTECH CONSULTANCY LTD, company number 234714189, and its public mailbox [email protected]. The company is controller for its own enquiry, contact and administration records.
Two service positions
When TNTech decides why it needs a message, it acts as controller. An agreed service may require the company to process a customer’s data on that customer’s instructions. That processor activity is bounded by the contract; TNTech remains controller for its own invoice, scheduling, security and legal files.
Input and delivery data
An email can contain the sender’s name, role, address for reply, business context and attached material. The hosting layer also produces delivery facts such as time, path, browser and network address. There is no public sign-in account and the site does not invite sensitive personal data.
Use and lawful basis
The desk uses a message to answer it, prepare a scope discussion, record an instruction and keep the service stable. The relevant lawful basis may be requested pre-contract steps, legitimate interest, legal obligation or consent. Where consent is the basis, withdrawal is available without changing earlier lawful use.
Who can receive a row
Email, domain, hosting and professional suppliers receive only the part needed to perform their role. A recipient is chosen for an identified task and is bound by confidentiality or a data-processing contract. TNTech does not trade contact lists.
Retention schedule
An active enquiry remains in the working queue until its next action is complete. A signed or financial record is kept for the legal period. Technical security entries have a short review window. Email [email protected] to request account deletion or erasure; the site does not create an account, so the request will normally concern a message. A claim, legal duty or fraud investigation can justify keeping a limited record.
Cross-border handling
Where a supplier handles a record outside the UK, TNTech selects a lawful transfer basis: adequacy, IDTA, the UK Addendum to the Standard Contractual Clauses or another permitted protection. The destination, category and safeguard are recorded in the supplier file.
Breach response
A suspected breach is given an incident owner and a written assessment. If notification is required, the ICO is told within 72 hours of awareness and affected people are informed when the UK GDPR requires it. A processor passes the facts to its controller without undue delay.
Rights and young people
A person can ask for access, correction, erasure, restriction, objection or portability where applicable. TNTech may verify identity and normally answers within one month. The site is not designed for children; a guardian can contact the desk about a child’s information.
Contact and regulator
Privacy questions go to [email protected]. A complaint may be addressed to the ICO, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, 0303 123 1113. The date on this page is 20 September 2026; the company records material changes here.