This Privacy Policy explains how Tindy Ltd ("Tindy", "we", "our" or "us") collects, uses and protects personal data when you contact us, use our website at https://tindy.co.uk or work with us as a client or supplier.

Tindy Ltd provides practical, owner-led industrial estate management and short-term storage within roughly 20 miles of Cambridge.

If you have any questions about this policy or about how we handle your personal data, you can contact us:

• Email: martin@marman.uk
• Phone: 07887 500943
• Postal area: Cambridge and surrounding area (within 20 miles)

We act as the "data controller" for the personal data we handle in connection with our services and this website.

This policy is intended to meet the requirements of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. It applies to personal data about individuals, not to information relating solely to companies or other organisations.

The personal data we collect will depend on how you interact with us, but typically includes:

• Contact details: such as your name, job title, business name, email address and phone number when you call us, send a WhatsApp message, email us or complete an enquiry form.
• Business information: information about your organisation, the sites or units you manage or occupy, and the services you are interested in.
• Communication records: copies of emails, messages and notes of telephone conversations or meetings, so that we can manage our relationship with you and follow up on enquiries.
• Technical data: basic technical information when you use our website, such as IP address, browser type and version, time zone setting, approximate location, and information about how you use our site. This may be collected through server logs and simple analytics tools.
• Billing and account data: where you become a client, we may collect invoicing details, payment references and related correspondence.
• Optional information: any other details you choose to give us, for example when describing your requirements in an enquiry.

We do not intentionally collect special category data (such as health or ethnicity data) or information about children. Please avoid sending this type of information to us. If it is necessary for a specific reason, we will explain why and how it will be handled.

Under data protection law we must have a lawful basis for using your personal data. Depending on the situation, we rely on:

• Consent: where you have clearly agreed that we may use your data for a specific purpose, for example if you ask to receive certain updates. You can withdraw your consent at any time by contacting us.
• Legitimate interests: where the use of your data is necessary for our genuine business interests (such as running and protecting our business, responding to enquiries and managing our estates) and these interests are not overridden by your rights and freedoms.
• Contract: where the use of your data is necessary to enter into or perform a contract with you or your organisation.
• Legal obligation: where we need to use your data to comply with a legal or regulatory requirement, for example tax and accounting rules or responding to lawful requests from authorities.

Some of our service providers or the systems they use may be located outside the UK or the European Economic Area (EEA), or may store data in more than one country.

Where personal data is transferred outside the UK or EEA, we aim to ensure that an adequate level of protection is in place. This may include relying on:

• Countries that have been formally recognised as providing an adequate level of data protection; and/or
• Standard contractual clauses or equivalent safeguards approved under data protection law.

If you would like more information about international transfers that relate to your personal data, please contact us using the details in the Introduction section.

We keep personal data only for as long as it is reasonably needed for the purposes described in this policy, and to meet any legal, accounting or reporting requirements.

In general:

• Enquiry information: we may keep basic details of enquiries and related correspondence for a period that allows us to follow up, understand patterns of interest and resolve any issues, typically up to 2 years unless a longer period is appropriate.
• Client and supplier records: we usually keep contract, service and billing records for up to 7 years after the end of the relationship to comply with tax and accounting rules and to manage any potential claims.
• Technical and analytics data: may be kept for shorter periods where possible.

We may retain information for longer where it is necessary in connection with actual or potential disputes, investigations or claims.

We take a practical approach to keeping personal data secure. Measures we use include:

• Using reputable hosting, email and cloud service providers with appropriate security controls.
• Restricting access to personal data to those who need it for their role and using strong authentication where appropriate.
• Keeping systems, devices and software reasonably up to date and using security features such as passwords and, where supported, multi-factor authentication.
• Backing up key information and having processes for restoring access in the event of an issue.
• Handling physical documents and devices with care, including secure disposal where relevant.

No system can be guaranteed as completely secure, but we aim to keep protections in step with the risks involved and the nature of the information we hold.

Our website may use small text files known as "cookies" and similar technologies to make the site work, to remember basic choices and to help us understand how the site is used.

In practice this may include:

• Essential cookies: needed for basic functions such as security and the correct display of pages.
• Analytics cookies or tools: simple website analytics that help us understand which pages are visited and for how long, so we can improve the site. We are interested in overall patterns rather than identifying individual visitors.

Depending on how cookies and analytics are set up, you may be able to control their use through your browser settings or any cookie banner or controls we provide.

For more information about how we use cookies and similar technologies, please refer to any cookie information made available on the website from time to time and read this Privacy Policy together with our Terms of Use.