Privacy Policy

1. Who we are

TulipTech Ltd is registered in England and Wales, company number 07486882, with its registered office at Unit 7 Friars Mill, Bath Lane, Leicester LE3 5BJ, United Kingdom. We are registered with the UK Information Commissioner's Office (ICO) under registration number ZB641657. TulipTech Ltd is the data controller for personal data collected through this website. For any privacy question or request, contact us at info@tulip-tech.com or write to the registered office above.

2. The laws this policy is written for

We serve clients in the United Kingdom, the European Union, the United States and beyond, and this policy is written to meet the UK GDPR and the Data Protection Act 2018, the EU General Data Protection Regulation for visitors in the European Economic Area, and applicable US state privacy laws, including the California Consumer Privacy Act as amended by the CPRA, for visitors in states that grant privacy rights. Where these laws grant you different rights, the sections below tell you which apply to you.

3. The data we collect

Contact and enquiry data: when you complete our contact form, book a consultation or email us, we collect your name, email address, and any phone number, company name and project details you choose to share. Technical data: our hosting provider records standard server logs, including IP address, browser type, pages requested and timestamps, used solely to keep the site secure and available. Analytics data: only if you consent through our cookie banner do we collect analytics data about how the site is used, and it is configured without advertising features. Recruitment data: if you apply for a role through our careers portal at erp.tulip-tech.app, your application is processed in our recruitment system under a separate notice provided at the point of application. We do not knowingly collect data from anyone under 16, we do not use automated decision making that produces legal effects, and we do not collect special category data through this website.

4. Why we use it and our legal grounds

We process enquiry data to respond to you and take steps towards a contract you have asked about (UK and EU GDPR Article 6(1)(b), and where that does not apply, our legitimate interest in responding to people who contact us). Server logs are processed under our legitimate interest in protecting the website and detecting abuse (Article 6(1)(f)). Analytics runs only with your consent (Article 6(1)(a)), which you can withdraw at any time through the cookie settings, with no effect on your use of the site. We send marketing email only to people who have opted in, and every message contains a working unsubscribe link.

5. Who we share it with

We never sell personal data, and we do not share it for cross-context behavioural advertising as those terms are defined in the CCPA/CPRA. We share personal data only with service providers who help us operate, such as website hosting, email, our CRM and, with your consent, analytics, in each case under contracts that restrict what they may do with it, and with professional advisers or authorities where the law requires it. A list of our current processors is available on request.

6. International transfers

TulipTech operates delivery teams in Bangladesh, India and the United Arab Emirates as well as the UK. Where personal data is accessed from outside the UK or the EEA, we protect it with appropriate safeguards: the UK International Data Transfer Agreement or UK Addendum, and for EEA data the European Commission's Standard Contractual Clauses, in each case together with our ISO 27001 certified security controls, staff confidentiality agreements and access limited to what the task requires.

7. How long we keep it

Enquiry data is kept for up to two years after our last contact, unless you become a client, in which case records are kept for the duration of the relationship plus six years to meet contractual and tax obligations. Server logs are kept up to 12 months. Analytics data is retained in aggregate form for up to 26 months. When data is no longer needed it is deleted or irreversibly anonymised.

8. Security

We are ISO 27001 and Cyber Essentials certified. Data in transit is encrypted with TLS, access to personal data is role-based and logged, and our security controls are independently audited. No transmission over the internet is completely secure, but we treat your data with the same discipline we are paid to apply to our clients' systems.

9. Your rights in the UK and EU

You can ask for access to your data, correction, erasure, restriction of processing, portability, and you can object to processing based on legitimate interests. You can withdraw consent at any time without affecting the lawfulness of processing before withdrawal. Email info@tulip-tech.com and we will respond within one month, free of charge. If you are unhappy with our answer you can complain to the ICO at ico.org.uk or 0303 123 1113, or, in the EEA, to your local supervisory authority.

10. Your rights in the United States

If you live in California or another state with a comprehensive privacy law, you have the right to know what personal information we hold about you, to access it, to correct it, to delete it, and to opt out of its sale or sharing. We do not sell personal information and we do not share it for cross-context behavioural advertising, so there is nothing to opt out of, but you may still exercise your other rights by emailing info@tulip-tech.com. We will verify your request, respond within the time your state law requires, and we will never discriminate against you for exercising a privacy right. Where your browser sends a Global Privacy Control signal, we treat it as an opt-out preference.

11. Cookies

Our use of cookies and similar technologies, and how to control them, is described in our Cookie Policy. In short: essential storage keeps the site working, and analytics runs only if you say yes.

12. Changes to this policy

When we change this policy we update the date at the top, and for material changes we will highlight the change on this page. Questions about anything here: info@tulip-tech.com.