Tamarillo Privacy Notice

Tamarillo Consulting (“Tamarillo”) respects your privacy and is committed to protecting your personal data. This Privacy Notice explains how we use your personal data in making available our services including via https://tamarillo.co.uk (“Site”), tells you about your privacy rights, and explains how the law protects you. We will post any significant changes to this Privacy Notice on this page. 

Who we are and how to contact us

Tamarillo Consulting is an unincorporated business. You can contact us by emailing: info@tamarilloconsulting.co.uk. 

What personal data we collect 

The personal data we collect from you includes your name, email address, phone number and physical address which we use to provide services to you. We do not collect your bank account or payment card details. We do not currently use cookies on our website. 

How we use your personal data and why

We use your personal data for the purpose of providing services to you. If we reasonably consider that we need to use your personal data for another reason, compatible with the original purpose for which we collected it, then we may do so. If we need to use your personal data for an unrelated purpose, we will update this Privacy Notice and explain the legal basis which allows us to do so. 

Most commonly, we will rely on one of the following reasons to process your personal data: 

• To perform a contract we are about to enter into or have entered into with you (“Contractual Necessity”).
• Where it is necessary for our legitimate interests and your interests and fundamental rights do not override those interests (“Legitimate Interests”).
• To comply with a legal or regulatory obligation (“Compliance with Law”).
• Where we have your specific consent to carry out the processing for the purpose in question (“Consent”). 

Where we need to process your personal data to comply with law, or to perform a contract with you and you fail to provide that data, we may not be able to perform the contract.

Personal data from third party sources

We do not currently collect personal data from third party sources.

Who we share your personal data with

As needed, we may share your personal data with our service providers (IT and system administration services), professional advisers, HMRC and other regulators for the purpose of providing services to you.

We may also disclose personal data if we are required to do so by law or legal process (such as a court order); in response to requests by government agencies, such as law enforcement authorities; to establish, exercise or defend our legal rights; when we believe disclosure is necessary or appropriate to prevent physical or other harm or financial loss; in connection with an investigation of suspected or actual illegal activity; or otherwise at your direction or with your consent.

We may share your personal data in the event we sell or transfer all or a portion of Tamarillo or its assets (including in the event of a merger, acquisition, joint venture, reorganisation, divestiture, dissolution or liquidation).

Data transfers

Tamarillo does not transfer your personal data outside the UK. 

Your rights relating to your personal data

Under certain circumstances, by law you have the right to:

• Request access to your personal data. 
• Request that we correct incomplete or inaccurate personal data that we hold about you. 
• Request erasure of your personal data where there is no good reason for us continuing to process it. 
• Object to processing of your personal data where we are relying on a Legitimate Interest as the legal basis for our processing. 
• Request the restriction or suspension of processing of your personal data.
• Request the transfer of your personal data to you, or a third party you have chosen, in a structured, commonly used, machine-readable format. This right only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you. 
• Withdraw consent. This right only exists where we are relying on consent to process your personal data. If you withdraw your consent, we may not be able to provide you with the services you have requested.

How to exercise your rights

If you want to exercise any of the rights described above, please contact us at: info@tamarilloconsulting.co.uk. 

Usually you will not have to pay a fee to access your personal data, or to exercise any of the other rights. Except in relation to consent withdrawal, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive, or we may refuse to comply with your request in those circumstances.

We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data, or to exercise any of your other rights. This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. Sometimes we may ask for further information to clarify your request or to speed up our response.

We try to respond to all legitimate requests within one month. Occasionally it may take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.

Complaints

If you would like to make a complaint regarding this Privacy Notice or our practices in relation to your personal data, please contact us at: info@tamarilloconsulting.co.uk.  If you feel that your complaint has not been adequately resolved, please note that the UK GDPR gives you the right to contact the Information Commissioner’s Office at www.ico.org.uk.

How we keep your personal data secure

We have appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorized way, altered or disclosed. We ensure our service providers also have appropriate security measures in place. 

We limit access to your personal data to staff who have a business need to have such access. All such people are subject to a contractual duty of confidentiality.

We have procedures to deal with any actual or suspected personal data breach.

How long we store your personal data

We will only retain your personal data for as long as we reasonably need to use it for the purposes set out above unless a longer retention period is required by law (for example for regulatory purposes). Typically, we retain personal data for a maximum of 7 years, or less.

Our policy on children

This Site is not intended for children below the age of 16 and we do not knowingly collect personal data relating to such children.  

Third party links

This Site may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share your personal data. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our Site, we encourage you to read the privacy policy of every site you visit.

Tamarillo July 2024