Privacy Policy

This privacy policy explains how Tebex Limited ("we", "us", or "our") collects, uses, and protects your personal data.

Data we collect

Identity Data (name, username, etc.)
Contact Data (email, address, etc.)
Transaction Data (order details, payments)
Technical Data (IP, login, browser, device)
Profile Data (preferences, feedback)
Usage Data (how you use our services)
Marketing and Communications Data (your marketing choices, communication preferences)

Purposes and lawful bases for processing

We use your personal data for the purposes and on the legal bases set out below:

Purpose	Types of Data	Lawful Basis
To register you as a new customer	Identity, Contact	Performance of a contract with you
To process and deliver your order including: Manage payments, fees and charges, Collect and recover money owed to us	Identity, Contact, Financial, Transaction, Marketing and Communications	Performance of a contract with you, Necessary for our legitimate interests (to recover debts due to us)
To manage our relationship with you which will include: Notifying you about changes to our terms or privacy policy, Asking you to leave a review or take a survey	Identity, Contact, Profile, Marketing and Communications	Performance of a contract with you, Necessary to comply with a legal obligation, Necessary for our legitimate interests (to keep our records updated and to study how customers use our products/services)
To administer and protect our business and this website (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data)	Identity, Contact, Technical	Necessary for our legitimate interests (for running our business, provision of administration and IT services, network security, to prevent fraud and in the context of a business reorganisation or group restructuring exercise), Necessary to comply with a legal obligation
To gather and provide information required by or relating to audits, enquiries or investigations by regulatory bodies or law enforcement authorities	Identity, Technical, Profile	Necessary for our legitimate interests in preventing fraud, Necessary for the performance of a task carried out in the public interest, Necessary to comply with a legal obligation
To deliver relevant website content and advertisements to you and measure or understand the effectiveness of the advertising we serve to you	Identity, Contact, Profile, Usage, Marketing and Communications, Technical	Necessary for our legitimate interests (to study how customers use our products/services, to develop them, to grow our business and to inform our marketing strategy)
To use data analytics to improve our website, products/services, marketing, customer relationships and experiences	Technical, Usage	Necessary for our legitimate interests (to define types of customers for our products and services, to keep our website updated and relevant, to develop our business and to inform our marketing strategy)
To make suggestions and recommendations to you about goods or services that may be of interest to you	Identity, Contact, Technical, Usage, Profile	Necessary for our legitimate interests (to develop our products/services and grow our business)

Marketing and cookies

We may use your data to send you marketing. You can ask us or third parties to stop at any time by using the opt-out methods within the message or by contacting us. We use cookies as described in our Cookie Policy.

Disclosure & International Transfers

We may share your data with service providers, partners, or as required by law. If we transfer your data outside the EEA, we ensure transfer safeguards such as Standard Contractual Clauses.

Security & Retention

We secure your data using appropriate measures and limit who can access it. We retain personal data as long as needed for legal/accounting reasons, or as required by law.

Your rights under GDPR

Request access to your personal data
Request correction of inaccurate data
Request erasure ('right to be forgotten')
Object to or restrict processing
Request data transfer to another provider
Withdraw consent at any time

Glossary

Legitimate Interest: The interest of our business in conducting and managing our service to enable us to give you the best service/product.
Performance of Contract: Processing your data where it is necessary for performing a contract with you.
Internal Third Parties: Other companies in our group acting as joint controllers or processors and who are based in the UK and provide IT and system administration services.
External Third Parties: Service providers acting as processors, professional advisers, HM Revenue & Customs, regulators, and others as required by law.