Privacy Notice

Last updated: 2 August 2026

Who we are

Tarran Tech ("we", "us") provides managed IT and cyber security services to businesses in the United Kingdom. For the purposes of UK data protection law we are the data controller for personal data collected through this website.

Registered company name and number: [ to be completed ].
Registered address: [ to be completed ].
ICO registration number: [ to be completed ].

What we collect

When you submit the enquiry form on our contact page, we collect the information you choose to give us:

Your name
Your company name
Your work email address
Your phone number, if you provide one
The approximate size of your organisation, if you provide it
The nature of your enquiry and the message you write
The date and time of your submission

We do not use advertising cookies or third-party analytics trackers on this website. The enquiry form is served from our own automation platform at automate.tarrantech.co.uk, which records standard technical information such as your IP address as part of processing and protecting the submission.

Why we use it, and our lawful basis

We use the information you submit to respond to your enquiry, to prepare any proposal or assessment you have asked for, and to keep a record of business enquiries we have received.

Our lawful basis is legitimate interests - specifically, responding to a request you have made and managing our business relationships. Where you ask us to take steps before entering into a contract, such as preparing a quotation, our basis is the performance of a contract.

We will not add you to a marketing list on the basis of an enquiry, and we do not send unsolicited marketing.

Who we share it with

We do not sell your personal data and we do not share it for anyone else's marketing. Your information is handled by the service providers that operate our own systems, acting as processors on our instructions - principally Microsoft, for email and business productivity services.

We may disclose information where we are required to by law, or where it is necessary to establish, exercise or defend legal claims.

Where it is stored

Enquiry data is stored on infrastructure we control and within Microsoft 365 services. Where personal data is transferred outside the UK, that transfer is covered by adequacy regulations or by appropriate safeguards such as the UK International Data Transfer Addendum.

How long we keep it

Enquiries that do not lead to an engagement are retained for [ to be completed ] months and then deleted. Where an enquiry leads to a contract, the records are retained for the duration of the relationship and for [ to be completed ] years afterwards to meet our legal, accounting and insurance obligations.

How we protect it

The measures we recommend to clients are the ones we apply to ourselves: multi-factor authentication on all accounts, encryption in transit and at rest, access limited to the people who need it, monitored and patched systems, and tested backups.

Your rights

Under UK GDPR you have the right to:

Be told what personal data we hold about you, and get a copy of it
Have inaccurate data corrected
Have your data erased in certain circumstances
Restrict or object to how we process it, including objecting to processing based on legitimate interests
Receive your data in a portable format where the right applies

To exercise any of these rights, send a request through our contact form and tell us what you would like us to do. We will respond within one month. You will not be charged, and we may ask you to confirm your identity before we act on a request.

Complaints

If you are unhappy with how we have handled your personal data, please tell us first through the contact form so we have the chance to put it right. You also have the right to complain to the Information Commissioner's Office at ico.org.uk or by calling their helpline on 0303 123 1113.

Changes to this notice

If we change how we handle personal data we will update this page and revise the date shown at the top.