Privacy policy

Last updated 15 September 2026

TP Tech is a trading name of Talent Professionals Limited ("TP Tech", "we", "us"), a company registered in England and Wales, company number 16068043, registered office 7 St John's Road, Harrow, Middlesex HA1 2EY. We are the controller of the personal data described in this policy.

This policy explains what we collect, why, how long we keep it, and the rights you have. It covers the UK General Data Protection Regulation together with the Data Protection Act 2018.

Contact for any privacy question or request: hello@wearetptech.com, or by post to us at the registered office above.

What we collect

When you use the hiring form. Your name, your company, your work email address, the role you are hiring for, and whatever you choose to write in the message. These fields are the ones on the form itself and nothing more.

When you use the candidate form. Your name, your email address, your current role, your current company, your LinkedIn profile if you give it, and whatever you choose to write in the message. We do not ask for special category data and you should not send any.

When you email us. The content of your message and anything in it, together with your email address and any signature block.

When you visit the site. Our hosting provider records standard server information including IP address, the pages requested, timestamps, and the browser and device reported by your software. This is created by the act of requesting a page and cannot be avoided while still serving the site.

Spam prevention. We use Cloudflare Turnstile on both forms. It performs a check in your browser to distinguish a person from an automated submission. Turnstile is designed to do this without profiling you across sites and without advertising cookies.

Website statistics. We use Plausible Analytics to count how many people read which pages. It is chosen because of what it does not do. It sets no cookies, it stores no IP addresses, and it builds no profile of you. To tell one visit from another within a day it creates a one way hash of your IP address and browser, using a secret that is discarded and replaced every 24 hours, so the same visitor cannot be recognised the following day and cannot be recognised on any other website. The data we see is counts: pages, referring sites, country, and device type. Plausible processes it in the European Union.

We do not use advertising cookies, we do not track you across other websites, and we do not buy or enrich contact data.

Why we use it, and our lawful basis

The forms and email. To answer you and to discuss whether we can help. Under UK GDPR this is Article 6(1)(b), steps taken at your request before a contract, together with Article 6(1)(f), our legitimate interests in responding to business enquiries.

Server logs. To keep the site available, and to investigate faults and abuse. Article 6(1)(f), legitimate interests in security and reliability.

Spam prevention. To stop automated abuse of the forms. Article 6(1)(f), legitimate interests in protecting our systems.

Website statistics. To understand which pages are read and improve them. Article 6(1)(f), legitimate interests in understanding how our own site is used. No cookie is set and no profile is built, so no consent is required for it.

Where we rely on legitimate interests, we have considered whether our interest is overridden by your rights, and we have concluded it is not, because the data is contact data you have chosen to send us for a purpose you initiated, or aggregate counts that do not identify you. You can object at any time and we will stop unless we have compelling grounds to continue.

We do not use your enquiry to send marketing. If that ever changes we will ask for your consent first, separately, and you will be able to withdraw it as easily as you gave it.

Who else handles it

We use a small number of service providers, each processing on our instructions under a written agreement.

Vercel. Hosts and serves the website. United States, with UK and EU regions.

Resend. Delivers the form enquiry by email to us. Ireland.

Microsoft. Our email runs on Outlook, so an enquiry you send arrives in a mailbox Microsoft operates, and stays there as long as any email does.

Sanity. Stores the site's content. Enquiry data never reaches it. European Union.

Cloudflare. Domain name service and Turnstile spam prevention on the forms. Global network.

Plausible. Website statistics, as described above. European Union.

We do not sell personal data and we do not share it for anyone else's marketing. If you are a candidate, we do not send your details to any employer without telling you first and agreeing it with you.

Sending data outside the United Kingdom

Some of our providers are in the United States and the European Union, so personal data moves across borders. For transfers out of the United Kingdom we rely on the UK International Data Transfer Addendum to the European Commission's standard contractual clauses, or on the UK Extension to the EU-US Data Privacy Framework where a provider is certified under it.

You can ask us for details of the safeguards that apply to a particular transfer.

How long we keep it

Hiring enquiries that do not become a client relationship. 24 months from your last contact with us, then deleted.

Hiring enquiries that become a client relationship. For the life of the relationship and 6 years after it ends, which is the ordinary limitation period for contract claims in England and Wales.

Candidate details. For as long as it is useful for us to stay in contact with you about this market, reviewed every 24 months, and deleted at once if you ask us to. You do not need to give a reason.

Server logs. As retained by our hosting provider in the ordinary course, and not used by us beyond security and fault investigation.

Website statistics. Aggregate counts only, with nothing in them that identifies you.

Your rights

Under UK GDPR you have the right to be informed, to access a copy of your data, to have inaccurate data corrected, to have data erased, to restrict processing, to data portability, and to object to processing based on legitimate interests. You also have the right not to be subject to a decision based solely on automated processing that produces legal or similarly significant effects. We do not make any such decisions.

To exercise any of these, email hello@wearetptech.com. We will respond within one month. We do not charge a fee unless a request is manifestly unfounded or excessive.

Complaints

If you are not satisfied with how we have handled your data, you can complain to the Information Commissioner's Office at ico.org.uk. We would rather you came to us first so that we have a chance to put it right.

Cookies

We use only cookies that are strictly necessary for the site to function and for spam prevention on the forms. Our website statistics are collected without cookies, and we use no advertising or profiling cookies at all. That is why you are not asked to accept anything when you arrive: there is nothing to consent to.

Security

The site is served over HTTPS. Enquiry data is validated and spam checked on our server rather than in your browser, and the credentials that send our email are held server side and are never exposed to it. Access to enquiry data is limited to the people who need it to respond to you.

No system is perfectly secure, and we do not claim otherwise. If a personal data breach occurs that is likely to result in a risk to your rights, we will notify the Information Commissioner's Office within 72 hours where required, and tell you directly where the risk is high.

Changes

If we change this policy we will update the date at the top. Where a change materially affects how we use data you have already given us, we will tell you directly.