Privacy policy.

1. Who we are

Tautiss (“we”, “us”, “our”) is a technology integration company based in the United Kingdom, providing smart home automation, home cinema and AV, networking, IT support, CCTV and security, electrical work and marine systems to residential, commercial and marine clients.

We are committed to protecting your personal data and respecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. What data we collect

When you use our website or contact us, we may collect the following personal data:

• Contact form submissions: your name, email address, phone number, service interest, and message content
• Technical data: your IP address, browser type, and operating system (collected automatically by our web server)
• Cookie data: a session cookie used to prevent spam on our contact form (see Section 6)

We do not collect any special category data (such as health, ethnicity, or biometric data). We do not use analytics tracking, advertising cookies, or any third-party tracking tools.

3. How we use your data

• To respond to your enquiry: when you submit our contact form, we use your name, email, and message to reply to you about your project or question
• To provide our services: if you become a client, we use your contact details to deliver and manage the services you have requested
• To prevent spam: we use a session cookie and honeypot field to protect our contact form from automated spam submissions
• Server security: our web server automatically logs IP addresses for security and troubleshooting purposes

4. Legal basis for processing

Under the UK GDPR, we process your personal data on the following lawful bases:

• Consent (Article 6(1)(a)): when you submit our contact form, you consent to us processing your data to respond to your enquiry. You can withdraw this consent at any time by emailing us.
• Legitimate interest (Article 6(1)(f)): we have a legitimate interest in maintaining the security of our website and preventing spam.
• Contract (Article 6(1)(b)): if you become a client, we process your data as necessary to fulfil our contract with you.

5. How we store and protect your data

Your contact form data is sent directly to our email inbox. We do not store form submissions in a database on our website. Your data is protected by:

• SSL/TLS encryption on all pages (HTTPS)
• Secure email hosting via Microsoft 365
• Access controls limiting who can view enquiries

Retention period: we retain contact form enquiries in our email system for up to 12 months after your last communication with us, unless you become a client, in which case we retain your data for the duration of our business relationship plus 6 years (as required for tax and legal purposes). You can request deletion at any time.

6. Cookies

Our website uses only one cookie:

• PHPSESSID — a session cookie set when you submit the contact form. It is used solely to prevent spam (rate limiting). It expires when you close your browser. It does not track you or collect any personal information.

We do not use analytics cookies, advertising cookies, or any third-party tracking cookies — no Google Analytics, no Facebook Pixel, no similar tools. Because our only cookie is strictly necessary for the contact form’s spam protection, it falls under the “strictly necessary” exemption in the Privacy and Electronic Communications Regulations (PECR), which is why you won’t see a cookie banner on this site.

7. Third-party sharing

We do not sell, trade, or rent your personal data to anyone. Your data may be shared with:

• Our hosting provider: who stores the website files on their servers (located in the UK/EU)
• Microsoft 365: where our email is hosted and where your contact form submission is delivered
• Google Fonts: our website loads fonts from Google’s servers, which may log your IP address (see Google’s Privacy Policy)

We do not transfer your data outside the UK or EU unless one of the above third parties processes data in other jurisdictions under appropriate safeguards.

8. Your rights

Under the UK GDPR, you have the following rights regarding your personal data:

• Right of access: you can request a copy of the personal data we hold about you
• Right to rectification: you can ask us to correct any inaccurate data
• Right to erasure: you can ask us to delete your data (the “right to be forgotten”)
• Right to restrict processing: you can ask us to limit how we use your data
• Right to data portability: you can request your data in a structured, machine-readable format
• Right to object: you can object to our processing of your data
• Right to withdraw consent: where we rely on consent, you can withdraw it at any time

To exercise any of these rights, please email us at info@tautiss.co.uk. We will respond within 30 days.

9. Children’s privacy

Our website and services are not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has submitted data to us, please contact us and we will delete it promptly.

10. Changes to this policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated “Last updated” date. We encourage you to review this page periodically.

11. Complaints

If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO): ico.org.uk · 0303 123 1113.