Privacy notice
What personal data we collect through this website, why we collect it, who handles it for us, how long we keep it and what you can ask us to do with it.
Last updated .
Who we are
Tesserium Partners Ltd is the controller of the personal data described in this notice. We are registered in England and Wales, company number 16868098, and our registered office is Sun House, 2-4 Little Peter Street, Manchester, M15 4PS. We are registered with the Information Commissioner's Office, registration number C1958700.
For anything about your personal data, email privacy@tesserium.co.uk or write to us at our registered office.
What we collect and why
When you send a message through the contact form
We receive your name, your email address, your organisation if you give it, and your message. We use them to reply to you and, if you ask, to talk about working together. You do not have to give us these details, but we cannot reply without your name, email address and message.
Our lawful basis is our legitimate interest in answering enquiries about our services. If you contact us as a sole trader or as an individual, we also rely on taking steps at your request before entering into a contract.
The website itself does not keep your message. It sends it once, as an email to our mailbox, through Resend. Resend keeps a copy in its delivery records for 30 days and then deletes it.
To stop spam, each message is checked when it arrives. The checks use the time, your IP address, the details your browser sends with the form and the words of your message. A message that looks like a sales pitch is labelled as one in our mailbox, and a person still reads it. The checks run in our own website code and serve no other purpose. Nothing from them is kept with your message apart from that label.
Please do not send health information about patients, or any other sensitive personal data, through the form or by email. We do not need it to reply. If we receive it, we will delete it from our mailbox and reply without it.
When you email us
If you email us, or reply to one of our emails, we receive your email address, your message and anything you attach. Our lawful basis is the same as for the contact form.
When we arrange a call
If we arrange a call with you, we may send you a link to Calendly, a scheduling service. When you book, Calendly collects your name, your email address and your answers to its booking questions, and sends the booking to us. This website does not embed Calendly or load any of its scripts, so nothing from Calendly runs here.
Our lawful basis is our legitimate interest in arranging calls with people who ask for one, and taking steps at your request before a contract if you book as a sole trader or as an individual.
When you visit the website
Cloudflare hosts this website and protects it from attack. To do that it processes your IP address and the technical details of each request, such as your browser and the page you asked for. When you send the contact form, our systems record a short technical note: the time, the result, if the form was sent from our page with JavaScript, if your browser said which website the form came from, how long it took to fill in and any sales pitch label. It never includes what you wrote or your IP address, and Cloudflare keeps it for up to 7 days. If your browser blocks something on a page because of our security settings, it sends us a short report. We record the page, the setting and the address that was blocked, never your IP address, and Cloudflare keeps that for up to 7 days.
Our lawful basis for hosting and security is our legitimate interest in running a secure website.
We use Cloudflare Web Analytics to count visits and see which pages people read, how they found the website and how fast pages load, so we can improve it. It records the page, the site that linked to it, your browser and device type, and your country, which is worked out from your IP address. It does not set cookies, store anything on your device, follow you to other sites or build a profile of you. It does not load if you turn analytics off, or if your browser sends a Global Privacy Control or Do Not Track signal. The website works the same either way.
Our lawful basis for analytics is our legitimate interest in knowing how the website is used, so we can improve it. You can object at any time, at no cost: choose Turn off analytics at the bottom of any page, or send a Global Privacy Control signal. Turning it off does not affect visits counted before you did.
How long we keep your data
- Enquiries and bookings that do not lead to work: 12 months from our last contact with you, then deleted from our mailbox and from Calendly.
- Enquiries that lead to work: kept with the records of that engagement until 6 years after it ends, the usual time limit for a claim under a contract.
- Copies in Resend's delivery records: 30 days.
- Technical notes of form submissions and security reports: up to 7 days.
- Website analytics: every visit record for 7 days. After that, Cloudflare keeps a sample of the records, which we can view for 6 months. Cloudflare decides how long it keeps the sample.
- Your analytics choice: if you turn analytics off, a cookie in your browser remembers it for a year. We keep no copy.
- Anti-spam checks: nothing kept beyond the technical note above and any sales pitch label, which stays with your enquiry.
Who handles your data for us
- Cloudflare: website hosting, security and analytics.
- Resend: delivering contact form messages to our mailbox.
- IONOS: our email mailbox.
- Calendly: scheduling calls we arrange.
Each acts as our processor for that service, under a data processing agreement. Calendly also acts as a controller under its own privacy notice. So does Cloudflare, for running, securing and improving its own services.
We do not sell your data, share it for advertising, or add you to a mailing list. We may disclose data where the law requires it, or to establish or defend a legal claim.
Transfers outside the UK
Cloudflare runs a global network, and Cloudflare, Resend and Calendly are based in the United States, so your data may be processed outside the UK. Cloudflare and Calendly are certified under the UK Extension to the EU-U.S. Data Privacy Framework, which UK regulations recognise as giving adequate protection. Resend's transfers are covered by the European Commission's standard contractual clauses with the UK International Data Transfer Addendum, included in its data processing terms. Ask us at privacy@tesserium.co.uk if you would like a copy of these safeguards.
How we keep it secure
Pages and form submissions travel over encrypted connections, and the website stores no messages. Our mailbox is protected by sign-in and read only by the people who run Tesserium. Apart from filtering out obvious spam and labelling likely sales pitches, which a person still reads, no decision about you is made automatically.
Children
This website is for businesses and is not aimed at children.
Your rights
You can ask us to:
- give you a copy of the personal data we hold about you
- correct data that is wrong or incomplete
- delete your data
- limit how we use it
- give you the data you provided in a format you can reuse elsewhere, where that right applies
- stop analytics, by choosing Turn off analytics at the bottom of any page
Email privacy@tesserium.co.uk. There is no charge unless a request is clearly unfounded or excessive. We reply without undue delay and within one month of receiving your request, or of confirming your identity if we need to. A complex request can take up to 2 months longer, and we will tell you if it does.
Your right to object
You can object at any time to our using your data on the basis of our legitimate interests. We will stop unless we have compelling legitimate grounds that override your interests, or we need the data to establish, exercise or defend a legal claim. To object, email privacy@tesserium.co.uk.
Complaints
If you are unhappy with how we have handled your data, please tell us first, by email at privacy@tesserium.co.uk or by post to our registered office. We acknowledge every complaint within 30 days and tell you what we have done about it without undue delay.
You can also complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint or on 0303 123 1113.
Cookies
We use no cookies for analytics or advertising. We set one cookie of our own only if you turn analytics off, to remember that. Our cookies page lists it, with the security cookie our hosting provider may set.
Changes to this notice
We update this notice when what the website does changes. The date at the top shows when it last changed.