Privacy Policy

Last updated: 23 March 2026

Tremoli Ltd ("we", "us", "our") is committed to protecting your privacy. This policy explains how we collect, use, and protect your personal data when you use our website (Tremoli.com) and services. We are a company registered in England and Wales and comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Data controller

Tremoli Ltd is the data controller responsible for your personal data. For any privacy-related questions, contact us at our contact form.

2. Data we collect

We may collect the following personal data:

  • Contact form submissions: Name, email address, company name, service interest, and message content
  • Usage data: Pages visited, time spent on site, referral source, device type, browser type, and approximate location (country/city level)
  • Cookies: Essential cookies required for the website to function (see Section 6)
  • Client data: Information provided during consulting engagements, including business data, project requirements, and communications

3. How we use your data

We use your personal data for the following purposes:

  • To respond to inquiries submitted through our contact form
  • To provide and deliver our consulting and product services
  • To analyse website usage and improve our site and services
  • To send relevant communications about our services (only with your consent)
  • To comply with legal obligations

4. Legal basis for processing

We process your personal data under the following legal bases:

  • Consent: When you submit the contact form or accept cookies
  • Legitimate interests: Website analytics, improving our services, and responding to inquiries
  • Contractual necessity: When processing is required to deliver services you have engaged us for
  • Legal obligation: Where we are required by law to retain or disclose data

5. Third-party services

We use the following third-party services that may process your data:

  • FormSubmit.co: Contact form processing. Your form submission data is routed through their service to our email
  • Amazon Web Services (AWS): Website hosting infrastructure (CloudFront, S3). Data is processed in the EU (eu-west-2, London)
  • Google Fonts: Web fonts loaded from Google servers

6. Cookies

Our website uses the following cookies:

  • Essential cookies: Required for the website to function. These do not collect personal data

You can control cookies through your browser settings. We do not currently use analytics or tracking cookies.

7. Data retention

Contact form submissions are retained for up to 2 years unless you request deletion. Client project data is retained for the duration of our engagement and for up to 6 years afterwards to comply with UK tax and accounting regulations.

8. Data security

We take appropriate technical and organisational measures to protect your data, including HTTPS encryption on all pages, secure hosting on AWS infrastructure with data stored in the UK (eu-west-2), and access controls limiting data access to authorised personnel.

9. International transfers

Some of our third-party service providers (Google, FormSubmit) may transfer data outside the UK. Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions, as required by UK GDPR.

10. Your rights

Under UK GDPR, you have the right to:

  • Access: Request a copy of the personal data we hold about you
  • Rectification: Request correction of inaccurate data
  • Erasure: Request deletion of your personal data
  • Restriction: Request that we limit how we process your data
  • Portability: Request your data in a structured, machine-readable format
  • Object: Object to processing based on legitimate interests
  • Withdraw consent: Where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, contact us at our contact form. We will respond within one month.

11. Complaints

If you believe we have not handled your data correctly, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

12. Children's privacy

Our website and services are not directed at individuals under the age of 18. We do not knowingly collect personal data from children.

13. Changes to this policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.