Legal
How Tea Powered Projects Limited collects, uses, and protects your personal data.
Tea Powered Projects Limited is the data controller for the personal data described in this policy.
Company number: 10542712
Registered office: 9 Stewart Way, Annesley, Nottingham, NG15 0EH
Email: hello@teapowered.pro
Phone: +44 (0) 115 647 1900
ICO registration number: ZB004209
This policy covers personal data we handle as a controller: visitors to teapowered.pro, people who enquire about our services, and our clients' contact details and billing information.
It does not cover the personal data we handle on behalf of our clients when we run their website or platform. There we are a processor and the client is the controller. That relationship is governed by our Data Processing Agreement.
Name, email, phone, company, message - To answer your enquiry and, if it goes ahead, to prepare a quote. Steps taken at your request before entering a contract.
Client contact details - To run the project and support your account. Performance of our contract with you.
Billing address, invoice records, payment references - To invoice you and keep accounting records. Legal obligation (tax and company law).
Website usage data - pages viewed, referrer, approximate location, device and browser - To understand how the site is used and improve it. Consent, given through the cookie banner.
IP address, browser and request details - To keep the site secure - preventing form abuse, limiting automated requests, and detecting bots. Our legitimate interests in protecting the site and the people who use it.
Marketing emails - To tell you about our services. Consent, or the soft opt-in where you are an existing customer and we offer similar services. Unsubscribe in any email.
We do not collect special category data. We do not carry out automated decision-making or profiling that produces legal or similarly significant effects.
We use one cookie, for analytics, and we set it only if you accept it. We use no advertising or social media tracking, and nobody else places tags on our site. You can change or withdraw your choice at any time. Full detail is in our Cookie Policy.
We use the following providers. Each acts on our instructions under a contract that meets UK GDPR requirements.
DigitalOcean - Hosting and DNS. United Kingdom (London).
Backblaze - Encrypted backups. European Union.
Mailgun - Sending email. European Union.
Microsoft 365 - Our email and documents. United Kingdom / EU.
Stripe - Card payments. United States / EU.
Twilio - SMS notifications. United States.
Namecheap - Domain registration. United States.
Our error monitoring runs on our own systems in the United Kingdom. It is not sent to a third party.
We do not sell your personal data, and we do not share it for anyone else's marketing.
We do not use Google Analytics or any advertising or social media tracking. Our website analytics are first party and run on our own platform.
We may disclose data where the law requires it, or to establish or defend legal claims.
Our systems, and the data held in them, are hosted in the United Kingdom, and our error monitoring runs on our own UK servers.
Backups and email delivery are handled in the European Union. The UK government has decided that the EEA offers adequate protection for personal data, so those transfers are covered by that decision and need no further safeguard.
A few providers are in the United States - card payments, SMS and domain registration. Where we transfer personal data there we rely on the UK International Data Transfer Agreement, or EU Standard Contractual Clauses with the UK Addendum. We assess each transfer to satisfy ourselves that protection for the data is not materially lower than under UK data protection law.
Enquiries that do not become clients - 12 months from last contact.
Client records - For the life of the contract, then 12 months.
Platform and website data after a subscription ends - Up to 90 days, then deleted - see our CMS Service Terms.
Invoices and accounting records - 6 years after the end of the financial year, as tax law requires.
Website usage data - 3 years.
Marketing consent records - Until you withdraw consent, plus 12 months to evidence the withdrawal.
You have the right to ask us to give you a copy of your data, correct it, delete it, restrict how we use it, or transfer it to someone else. You can object to processing we base on legitimate interests, and withdraw consent at any time where we rely on it.
Ask us at hello@teapowered.pro. We respond within one month. There is no charge.
If you are unhappy with how we have handled your personal data, tell us and we will deal with it properly.
Make a complaint: use the contact form and begin your message with "Data protection complaint", email hello@teapowered.pro with that as the subject line, or write to us at our registered office.
We will acknowledge your complaint within 30 days of receiving it.
We will then investigate without undue delay, and keep you updated on progress and on when you can expect an answer.
If you are not satisfied with our response, you can complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint, by phone on 0303 123 1113, or by post to Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF. You can go to the ICO at any point, but raising it with us first is usually quicker.
We review this policy at least once a year and whenever we change how we handle personal data. The date below tells you when it last changed. Where a change materially affects you, we will tell you directly rather than relying on you noticing.
Last updated: [DATE ON PUBLICATION]