Home / Legal / Privacy Policy
Privacy Notice · UK GDPR

Your privacy, taken seriously.

This notice explains what personal data TechProf LTD collects, why we collect it, how we use it, and the rights you have over it. We've tried to write it like a human would read it.

Last updated: 5 May 2026 · Version 1.0

1. Who we are

TechProf LTD ("we", "us", "our") is a UK private limited company registered in England and Wales (Company No. 7710963), VAT registered under GB167007810, with its registered office at Suite 27, Chessington Business Centre, Cox Lane, Chessington, Surrey, KT9 1SD. We are the data controller for the personal data described in this notice and are registered with the UK Information Commissioner's Office.

2. What personal data we collect

We only collect what we need. Depending on how you interact with us, that might include:

  • Contact details — name, email address, telephone number, company, job title — when you contact us, request a proposal, or sign up to receive updates.
  • Communication content — the substance of your messages, calls, or chat conversations with us.
  • Technical data — IP address, browser type, device type, operating system, referring page, pages visited, and time spent — collected automatically through analytics.
  • Cookies and similar technologies — see our cookie information in section 8.
  • Recruitment data — if you apply for a role, your CV, cover letter, references, and interview notes.
  • Client and supplier data — under separate engagement agreements, we may process personal data on behalf of clients as a data processor. That use is governed by the contract with that client, not by this notice.

3. Why we collect it (lawful bases)

Under UK GDPR we need a lawful basis for everything we do with personal data. Ours are:

  • Performance of a contract — to deliver the services you've engaged us for, including invoicing, support, and project communications.
  • Legitimate interests — to respond to enquiries, improve our services, prevent fraud, and run the business. We balance our interests against your rights and freedoms.
  • Consent — for non-essential cookies, marketing emails, and recruitment retention beyond the active hiring window. You can withdraw consent at any time.
  • Legal obligation — to comply with tax, accounting, employment, anti-money-laundering, and other statutory requirements.

4. Who we share data with

We don't sell personal data. We share it only with:

  • Service providers we use to run the business — for example, cloud hosting (AWS, Microsoft Azure), email and productivity (Google Workspace, Microsoft 365), CRM and support tooling, accounting software, and payment processors. All are bound by data processing agreements.
  • Professional advisers — lawyers, accountants, auditors, and insurers — where reasonably necessary.
  • Authorities — where we are legally required to disclose information (for example, a court order or HMRC request).
  • Buyers or successors — if all or part of the business is acquired, transferred, or restructured.

5. International transfers

Some of our service providers operate outside the UK and EEA. Where personal data is transferred internationally, we rely on the UK International Data Transfer Agreement, the EU Standard Contractual Clauses, adequacy decisions, or other safeguards approved by the ICO. Details are available on request.

6. How long we keep data

We keep personal data only as long as we need it for the purpose we collected it, or as required by law:

  • Enquiry and prospecting data: 24 months from last contact, then deleted.
  • Active client records: for the duration of the engagement plus 7 years for accounting and contract limitation purposes.
  • Recruitment data: 12 months after the role closes (with consent), or until you ask us to delete it earlier.
  • Analytics data: anonymised after 14 months.
  • Cookie identifiers: see your cookie settings.

7. Your rights

Under UK GDPR you have the right to:

  • Access the personal data we hold about you.
  • Have inaccurate or incomplete data corrected.
  • Have your data erased ("right to be forgotten") in certain circumstances.
  • Restrict or object to our processing.
  • Receive your data in a portable format.
  • Withdraw consent where consent is the lawful basis.
  • Lodge a complaint with the Information Commissioner's Office (ico.org.uk) — though we'd appreciate the chance to address concerns first.

To exercise any of these rights, email privacy@techprofessional.co.uk. We aim to respond within one calendar month.

8. Cookies

We use a minimal set of cookies:

  • Strictly necessary — for security and core site function. These don't require consent.
  • Analytics — to understand how visitors use the site so we can improve it. We use privacy-respecting analytics with IP anonymisation. You can opt out at any time.
  • Functional — to remember preferences (e.g. whether you've seen a notice). Set only with consent.

We do not use advertising or third-party tracking cookies. Where consent is required, you'll see a banner on first visit.

9. Security

We protect personal data with appropriate technical and organisational measures, including encryption in transit and at rest, access controls, multi-factor authentication, audit logging, regular vulnerability scanning, and an information security management system aligned with ISO 27001:2022. See our Security policy for details.

10. Changes to this notice

We'll update this notice when our practices change. The current version date is shown at the top. For material changes, we'll bring them to your attention.

11. Contact

If you have any questions or want to exercise your rights, email privacy@techprofessional.co.uk or write to us at the registered address above.