Privacy Policy

2. Information We Collect

We only collect information that we need in order to communicate with you and deliver our services. The information we collect includes:

• Information you provide directly: when you complete our contact form or book a demo, we collect your name, email address, and the contents of your message or enquiry.
• Business and project information: details you share with us about your brand, goals, and campaigns during the course of an enquiry or engagement.
• Technical and usage data: information collected automatically when you browse our website, such as your IP address, browser type, device information, referring pages, and how you interact with our content.
• Cookies and analytics data: see the Cookies & Tracking section below for more detail.

3. How We Use Your Information

We use the personal information we collect to:

• Respond to your enquiries and provide the information or services you request.
• Communicate with you about proposals, projects, and ongoing engagements.
• Operate, maintain, and improve our website and the content we publish.
• Understand how visitors use our site so we can make it more relevant and useful.
• Comply with our legal and regulatory obligations.

4. Lawful Basis for Processing

Under UK GDPR we rely on the following lawful bases to process your personal data: your consent (for example, when you choose to contact us or accept non-essential cookies); our legitimate interests in operating and promoting our business and responding to enquiries; and the performance of a contract where we are delivering services you have engaged us for.

5. Cookies & Tracking

Our website uses cookies and similar technologies to function correctly and to help us understand how the site is used. Cookies are small text files stored on your device.

We use essential cookies that are necessary for the site to operate, and analytics cookies that help us measure traffic and improve performance. Analytics may be provided by trusted third parties who process this data on our behalf.

You can manage or disable cookies through your browser settings at any time. Please note that disabling certain cookies may affect how the website functions.

6. Data Sharing & Third Parties

We do not sell your personal data. We only share information where it is necessary to operate our business, and always under appropriate safeguards. We may share data with:

• Service providers who support our operations, such as hosting, analytics, email, and customer relationship tools.
• Professional advisers, including legal and accounting professionals, where required.
• Authorities or regulators where we are legally obliged to disclose information.
• A successor entity in connection with a merger, acquisition, or sale of assets.

7. Data Security

We take the security of your personal data seriously and use appropriate technical and organisational measures to protect it against unauthorised access, loss, misuse, or alteration. These include access controls, encryption in transit, and working only with reputable service providers.

While we strive to protect your information, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

8. Your Rights

Under UK GDPR and applicable data protection law, you have the following rights in relation to your personal data:

• Right of access: to request a copy of the personal data we hold about you.
• Right to rectification: to have inaccurate or incomplete data corrected.
• Right to erasure: to request that we delete your personal data in certain circumstances.
• Right to restrict processing: to limit how we use your data in certain circumstances.
• Right to data portability: to receive your data in a structured, commonly used format.
• Right to object: to object to processing based on our legitimate interests or for direct marketing.
• Right to withdraw consent: where we rely on consent, you may withdraw it at any time.

9. International Transfers

As we operate from both London and Dubai, your personal data may be transferred to, stored in, or accessed from the United Kingdom, the United Arab Emirates, or other jurisdictions where our service providers operate.

Where personal data is transferred outside the UK or the European Economic Area, we ensure appropriate safeguards are in place, such as standard contractual clauses or transfers to countries recognised as providing an adequate level of protection.

10. Data Retention

We retain personal data only for as long as is necessary to fulfil the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements.

Enquiry data is typically retained for the duration of our communications and a reasonable period thereafter. Where you become a client, we retain relevant records for the duration of our engagement and any period required by law.

11. Children's Privacy

Our website and services are intended for businesses and individuals aged 18 and over. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will take steps to delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically.

13. Contact Us

If you have any questions about this Privacy Policy, wish to exercise your rights, or would like to make a complaint, please contact us at info@tiltedneedle.com.

Tilted Needle, London · Dubai · Global. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) if you are unhappy with how we have handled your data.