Privacy policy.

1. About this policy

Tydi Solutions Ltd ("Tydi", "we", "us", "our") is a company registered in England and Wales (company number 15237587), with its registered office at 167–169 Great Portland Street, 5th Floor, London, W1W 5PF. We are responsible for the personal data we collect and use.

This policy explains what information we collect, why we collect it, how we look after it, and your rights. If you have any questions, contact us at hello@tydi.co.uk.

2. Information we collect

• Contact details: your name, email address, phone number and business details, when you enquire, sign up or become a client.
• Client information: the financial records we need to deliver our services, such as bank transactions, invoices, receipts, payroll information and tax records. These may include personal data about other people, such as your customers, suppliers or employees.
• Identity and verification information: documents and checks we need to meet anti-money laundering requirements.
• Billing information: details needed to invoice you and receive payment.
• Marketing information: your email address and preferences if you sign up to our newsletter or download a guide.
• Referral information: the name and email address of someone referred to us, provided with their consent.
• Website data: information about how you use our website, such as your IP address, browser type and pages visited, collected through cookies and similar tools.

3. How we use your information, and why

We use your information only where we have a lawful basis to do so:

• To deliver our services: because it is necessary to perform our contract with you.
• To carry out identity checks, keep records and meet tax and regulatory obligations: because we are legally required to.
• To respond to enquiries, manage our relationship with you, improve our services and keep our systems secure: because it is in our legitimate business interests, balanced against your rights.
• To send newsletters and guides: with your consent, which you can withdraw at any time using the unsubscribe link or by contacting us.

We do not sell your data, and we do not make decisions about you using solely automated processing.

4. Who we share it with

We only share information where needed:

• with the software and service providers we use to deliver our services and run our business, such as accounting software, receipt processing, secure cloud storage, email and website hosting, who may only use it on our instructions
• with HMRC, Companies House and other authorities when acting on your behalf
• where required by law or regulation, including our anti-money laundering obligations
• with professional advisers such as our insurers, lawyers or accountants, where necessary
• as part of a sale or restructure of our business, with appropriate safeguards

Clients receive a list of the specific providers used for their engagement in their engagement letter.

5. International transfers

Some of our providers may store or process data outside the UK. Where this happens, we make sure appropriate safeguards are in place, such as UK adequacy regulations or approved contractual terms.

6. How we protect it

We use secure cloud-based systems with encryption and multi-factor authentication, and limit access to client information to authorised people. We review our security measures regularly. No system is completely secure, but we take reasonable steps to protect your information.

7. How long we keep it

• Accounting and tax records: generally six years after the end of the relevant accounting period.
• Anti-money laundering records: five years after our client relationship ends, as required by the Money Laundering Regulations 2017.
• Enquiries from people who do not become clients: up to 12 months.
• Newsletter and guide sign-ups: until you unsubscribe.
• Referral details: until the referral is resolved, and up to 12 months if the referred person does not become a client.

When the retention period ends, we securely delete or anonymise the data.

8. Cookies

Our website uses cookies and similar tools to make the site work and to understand how it is used. Where required, we ask for your consent before setting non-essential cookies.

9. Your rights

Under UK data protection law, you have the right to:

• access the personal data we hold about you
• ask us to correct inaccurate data
• ask us to delete your data, in some circumstances
• object to or restrict how we use your data, in some circumstances
• ask us to transfer your data to another organisation, where applicable
• withdraw consent at any time, where we rely on it

Some rights are limited where we must keep records by law. To use any of your rights, email hello@tydi.co.uk. We will respond within one month.

10. Complaints

If you have concerns about how we handle your data, please contact us first so we can try to put it right. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.

11. Changes to this policy

We may update this policy from time to time, and the date at the top will show the latest version. If a change significantly affects how we use client data, we will let clients know directly.