Privacy policy & cookies
We value your privacy and want to be clear about the data we collect, how we use it and your rights to control that information, which is why we’ve made some updates to our Privacy Statement.
We have made these updates to reflect the high standards established by the General Data Protection Regulation (GDPR), a set of laws passed in the European Union.
We respect your personal data. We have never and will never sell it to third parties. We have also strived to simplify language and remove jargon, to make our privacy statement easier to read and understand.
What is the purpose of a Privacy Statement?
This privacy statement explains how Tailor Made looks after your personal data in connection with our services and products and in accordance with applicable legislation intended to protect your personal data, including the General Data Protection Regulation. We also explain what your rights are.
By providing your personal data you acknowledge that we will only use it in accordance with this Privacy Statement.
Where we refer to “Tailor Made” or “we”, we mean Tailor Made Technologies Ltd providing IT products or services to our customers and/or other businesses.
This statement applies where Tailor Made act as the Data Controller, which is where we are responsible for deciding how we hold and use your personal data. It is important that you read this statement together with any other privacy notice we may provide on specific occasions, so you are aware of how and why we are using your personal data.
Your Privacy and Cookies
We use cookies on our websites to make your experience as informative, personal, and as user friendly as possible and cookies help us to achieve that. The cookies we use do not store personally identifiable information nor can they harm your computer.
By using our websites, you agree to the use of cookies. We appreciate some users may like more individual control over their visit to our website and can adjust their Internet browser settings accordingly.
Our website uses cookies and similar technologies to improve website functionality, analyse website performance, personalise user experiences, and support our marketing activities.
Strictly Necessary Cookies
Some cookies are essential for the operation and security of our website. These cookies do not require your consent and are placed automatically when you use the website..
Analytics, Functional and Marketing Cookies
We will only place non-essential cookies, including analytics, functionality, performance, and marketing cookies, on your device where you have provided your explicit consent through our cookie preference management tool.
These cookies help us to:
- Understand how visitors use our website.
- Improve website performance and functionality.
- Measure the effectiveness of marketing campaigns.
- Provide a more personalised online experience.
Managing Your Cookie Preferences
When you first visit our website, you will be presented with a cookie banner that allows you to:
- Accept all cookies.
- Reject non-essential cookies.
- Customise your cookie preferences by category.
Your preferences will be applied before any non-essential cookies are activated.
You may review or change your cookie preferences at any time by selecting the “Cookie Preferences” or “Manage Cookies” link available on our website.
Withdrawing Consent
Where non-essential cookies are processed on the basis of consent, you may withdraw your consent at any time through the cookie preference centre. Withdrawal of consent will not affect the lawfulness of any processing carried out before consent was withdrawn.
Third-Party Cookies
Some cookies may be provided by trusted third-party service providers, such as analytics, advertising, or customer support platforms. Details of these providers, the cookies they use, and their purposes can be found in our Cookie Policy.
No Implied Consent
We do not rely on continued use of our website as an indication of consent for non-essential cookies. Non-essential cookies are set only after a user has actively provided consent through our cookie preference mechanism.
If you are unhappy with how we have handled your personal data or a rights request, you can complain to us directly.
This reflects the statutory right introduced by the Data (Use and Access) Act 2025, in force from 19 June 2026.
Making a complaint to us is free of charge and does not affect your right to complain to the regulator or to seek a remedy through the courts. You can complain by email to privacy@tmtech.co.uk or by writing to the Data Protection Officer at the address in the Contact us section below. Please include, where you can, your name and contact details, what your complaint is about, the personal data or interaction involved, and the outcome you are seeking. We can still consider your complaint if you cannot provide all of this. If you need help to complain, or a particular format or adjustment to assist you, please tell us.
How we handle your complaint: ▪ We will acknowledge your complaint within 30 days of receiving it ▪ We may ask you for information to confirm your identity, requesting only what is proportionate ▪ The Data Protection Officer, or someone acting under their direction, will investigate ▪ We will respond without undue delay, aiming to provide a full response within one month of acknowledgement, and if the matter is complex, we will tell you why we need longer and give you a revised timescale ▪ We will explain the outcome and how to take the matter further if you remain dissatisfied
Subject access request procedure
You have the right to ask for a copy of the personal data we hold about you, together with related information. This is known as a Subject Access Request. You can make a request in writing or verbally, but we would prefer that you make it in writing to privacy@tmtech.co.uk, or by post to the Data Protection Officer at the address in the Contact us section below, as this helps us deal with it promptly. You do not need to use a particular form. Tel: 0800 988 2002 Website: www.tmtech.co.uk Email: privacy@tmtech.co.uk
To help us respond, please tell us: ▪ Your full name and contact details ▪ Any account, customer or reference number you have with us ▪ The personal data or records you are looking for, and any relevant dates ▪ The format in which you would like to receive the information We will ask you for information to confirm your identity, so that we do not disclose your personal data to the wrong person. The one-month period for responding does not begin until we have verified your identity and, where your request is unclear or wide ranging, received any reasonable clarification we have asked you for. We will respond within one month, as per the GDPR regulations. However, we may extend this by up to two further months where a request is complex or where we receive a number of requests from you. We will evaluate your request within the first month if we need to do so. We carry out a reasonable and proportionate search for the information you have requested, as per the guidelines. We will provide a copy of your personal data, together with information about how and why we process it, who we share it with, how long we keep it, the source of the data where relevant, and your rights. We will provide the information securely, and electronically where you have made your request electronically, unless you ask otherwise. A subject access request is usually free of charge. We may charge a reasonable fee, or refuse to act, where a request is manifestly unfounded or excessive, and we will explain our reasons. Where the information includes personal data about other people, or is subject to an exemption under data protection law, we may redact or withhold that part and will tell you where we have done so.
If you are unhappy with how we have handled your subject access request, you can complain to us using the complaints process above, and ultimately to the Information Commissioner. If you remain dissatisfied, you have the right to complain to the data protection regulator. We ask that you raise your complaint with us first and the regulator may expect you to have done so. The Information Commissioner’s Office, which is being reconstituted as the Information Commission, can be contacted as follows: Information Commissioner’s Office Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF Helpline: 0303 123 1113 Website: ico.org.uk You also have the right to apply to the courts for a remedy.
The data protection principles
We follow the principles set out in the UK GDPR. These require that personal information is:
▪ processed lawfully, fairly and in a transparent manner
▪ collected for specified, explicit and legitimate purposes and not used in any manner incompatible with those purposes
▪ adequate, relevant and limited to what is necessary
▪ accurate and, where necessary, kept up to date
▪ kept in a form which identifies you for no longer than is necessary
▪ processed in a way that ensures appropriate security, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage
We are also accountable for our compliance with these principles and must be able to demonstrate it.
Information we collect
To operate effectively and meet our legal obligations, we collect and use personal information about current, past and prospective customers, suppliers, website users and other individuals with whom we deal. Depending on your relationship with us, this may include your name and contact details, account and contract records, your correspondence and communications with us, your marketing preferences, and technical and usage data such as your IP address, device and browsing information. Such information may be held on computer, on paper or on other media, and is always obtained and handled lawfully.
Protecting your information
We employ technical and organisational security measures appropriate to the nature of the data, including any special category data. Only authorised employees are given access to personal data, under binding confidentiality and data protection obligations, and any breach of those obligations is treated as a disciplinary matter. While we work hard to secure our website and online services, no transmission of information over the internet can be guaranteed to be completely secure, and any such transmission is at your own risk.
How long we keep your information
We retain your personal information in accordance with our retention schedule and to comply with our legal, regulatory and financial obligations. The right to have your data erased is not an absolute right, and we may need to retain information where it forms part of a statutory or legal obligation or an existing contract. Please tell us as soon as possible if any of the personal information you have provided to us changes.
Your rights
Depending on the lawful basis for processing, you have the following rights. In most cases these rights are not absolute:
▪ to be informed about how we use your personal data
▪ to request a copy of the personal data we hold about you, known as a subject access request
▪ to have inaccurate personal data corrected
▪ to have your personal data erased in certain circumstances
▪ to restrict our processing in certain circumstances
▪ to data portability in certain circumstances
▪ to object to processing, including profiling, for direct marketing
▪ to rights in relation to automated decision making
▪ to withdraw your consent where we rely on it
There may be compelling or overriding legal reasons why we cannot meet a request in full, in which case we will explain why. To exercise any of these rights or to file a complaint, please contact us using the details in the “Contact us” section (https://www.tmtech.co.uk/contact/).
How to turn off cookies in your browser
Each type of browser has its own way of turning off or disabling Cookies. Click on your browser type below for instructions:
How will we collect your personal data?
We may collect Personal Data from you in a number of ways, depending on the product, service or event.
Information you give us: You may choose to provide us with your Personal Data by one of the following methods:
- Submitting a form through the website;
- Corresponding with us by phone, email, letter or other means;
- In discussion with one of our representatives;
- By participating in feedback or surveys or by providing your contact details offline
Information we collect about you: We may also automatically collect technical information such as IP address if you use our website.
Information we received from other sources: We may also receive information from public sources, such as Companies House; Please note; calls may be recorded in order to monitor the quality of our service and for training purposes.
Processing information
We only collect, use, and process personal data where we have a valid lawful basis under applicable data protection legislation. The lawful basis relied upon will depend on the purpose for which the personal data is being processed.
Provision of Telecommunications Services
We process personal data to provide telecommunications products and services, including mobile services, broadband connectivity, hosted telephony, unified communications, customer support, service provisioning, fault resolution, account management, and contract administration. Lawful Basis: Performance of a Contract
Customer Account Management
We process personal data to manage customer accounts, maintain account records, administer contracts, manage renewals, process orders, and provide ongoing customer support. Lawful Basis: Performance of a Contract
Billing and Payment Processing
We process personal data to issue invoices, collect payments, manage credit control activities, recover outstanding debts, and maintain financial records. Lawful Basis: Performance of a Contract and Legitimate Interests. Our legitimate interests include ensuring business continuity and recovering debts owed to the business.
Responding to Enquiries
We process personal data submitted through website forms, email correspondence, telephone enquiries, and other communication channels to respond to requests for information, quotations, and services. Lawful Basis: Legitimate Interests. Our legitimate interest is responding to business enquiries and developing prospective customer relationships.
Service Improvement and Network Management
We process personal data to monitor service performance, diagnose faults, maintain network security, improve service quality, and ensure the reliability of our telecommunications services. Lawful Basis: Legitimate Interests Our legitimate interest is delivering secure, reliable, and efficient services to customers.
Fraud Prevention and Security
We process personal data to detect, prevent, investigate, and mitigate fraud, cyber threats, unauthorised access, and other security incidents. Lawful Basis: Legitimate Interests. Our legitimate interest is protecting customers, employees, systems, networks, and business operations.
Legal and Regulatory Compliance
We process personal data where necessary to comply with legal, regulatory, statutory, and governmental requirements, including telecommunications regulations, tax legislation, accounting obligations, and requests from law enforcement agencies. Lawful Basis: Legal Obligation.
Marketing Communications
We may process personal data to send information about our products, services, promotions, and events.
Lawful Basis:
- Consent, where required by law.
- Legitimate Interests, where permitted under applicable marketing regulations, particularly for business-to-business communications.
Individuals may opt out of marketing communications at any time.
Complaints, Claims, and Dispute Resolution
We process personal data to investigate complaints, resolve disputes, manage claims, and protect our legal rights and interests.
Lawful Basis:
- Legitimate Interests
- Legal Obligation, where applicable
Legitimate Interests
Where we rely on Legitimate Interests as our lawful basis for processing, we have considered and balanced our interests against the rights and freedoms of individuals. We ensure that such processing is necessary, proportionate, and does not override an individual’s privacy rights.
Consent
Where processing is based on consent, individuals have the right to withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of processing carried out before consent was withdrawn.
In certain circumstances, we process personal data on the basis of our legitimate interests. Before doing so, we assess and balance our business interests against the rights and freedoms of affected individuals to ensure such processing is necessary, proportionate, and does not adversely impact privacy rights.
Our legitimate interests include:
- Customer Relationship Management
Managing customer accounts, maintaining customer records, responding to enquiries, handling complaints, and providing ongoing account support.
- Business Development
Responding to requests for information, preparing quotations, identifying potential business opportunities, and maintaining relationships with prospective and existing business customers.
- Service Delivery and Improvement
Monitoring service performance, resolving faults, analysing service usage, improving customer experience, and developing new products and services.
- Network and Information Security
Protecting our telecommunications networks, systems, infrastructure, employees, customers, and business operations from cyber threats, fraud, unauthorised access, misuse, and other security incidents.
- Fraud Prevention and Debt Recovery
Detecting and preventing fraudulent activity, verifying customer identity, conducting credit assessments where appropriate, recovering debts, and protecting the business against financial loss.
- Regulatory and Operational Administration
Maintaining appropriate business records, undertaking internal audits, managing operational processes, conducting staff training, and ensuring effective corporate governance.
- Direct Marketing to Business Contacts
Sending information regarding telecommunications products, services, promotions, and events to existing and prospective business customers where permitted under applicable marketing and privacy laws. Individuals may opt out of such communications at any time.
Personal Breaches
Personal data breaches will be assessed promptly, recorded internally, reported to the ICO within 72 hours of being discovered where legally required, and notified to affected individuals without undue delay where the breach is likely to result in a high risk to their rights and freedoms.
Controller details
Tailor Made Technologies (TMT) is the data controller responsible for the collection and use of personal data described in this notice.
Registered Address:
Forum 5, Parkway, Whiteley, Hampshire, PO15 7PA
Telephone:
0800 988 2002
Email:
info@tmtech.co.uk
If you have any questions about how we collect, use, store, or protect your personal data, or if you wish to exercise your data protection rights, you can contact our Data Protection Officer using the details below.
Where required by law, requests relating to personal data, including access, correction, deletion, restriction, objection, or data portability requests, can be submitted using the contact details above.
Data Protection Officer:
Our Data Protection Officer is responsible for overseeing compliance with data protection requirements and handling privacy-related enquiries. They can be contacted at privacy@tmtech.co.uk
Recipients and data sharing
We may share personal and business information with carefully selected third parties where necessary to provide our telecommunications services, fulfil contractual obligations, comply with legal requirements, or support our business operations.
Categories of recipients include:
- Mobile network operators and telecommunications carriers.
- IT service providers, cloud hosting providers, and software vendors.
- Billing, payment processing, and finance providers.
- Customer support and service management partners.
- Professional advisers, including legal, financial, and compliance consultants.
- Regulatory authorities, law enforcement agencies, and government bodies where disclosure is required by law.
Where third parties process personal data on our behalf, they act as data processors under written agreements that require them to implement appropriate technical and organisational measures to protect personal data, maintain confidentiality, and comply with applicable data protection legislation. We undertake due diligence on our processors and monitor compliance as appropriate throughout the relationship.
All personal data is stored and accessed within the UK
Customer data is retained for the contract duration and for at least six years from termination of contract where required for HMRC purposes
No automated decision-making is used where credit assessments are used
Special category personal data is not collected or processed for this business-data activity.
Changes to this Privacy Statement
We reserve the right to update this Privacy Statement at any time. We may notify you in other ways from time to time about the processing of your Personal Data. You should check our website at tmtech.co.uk periodically to view the most up to date Privacy Statement.
