Policy statement
1. Introduction
This Privacy Policy explains how we collect, use, store, share, and protect your personal data when you use our website and any related services offered through it.
We are committed to handling personal data in a transparent, secure, and lawful manner. This policy is intended to help you understand what information we collect, why we collect it, how long we may keep it, and what rights you may have in relation to that information.
By accessing this website, creating an account, using our services, purchasing products, or submitting information to us, you acknowledge that your personal data may be processed in accordance with this Privacy Policy.
2. Who We Are
This website forms part of the Tar-Aiym ecosystem. The website and related services may include general website functionality, account access through a single sign-on system, ecommerce features, and professional services such as bookkeeping or related financial support.
Depending on the services you use, your personal data may be processed in connection with different operational areas of the ecosystem, but always under a consistent approach to privacy, security, and data protection.
If you have questions about this Privacy Policy or about how your information is handled, you should contact us using the contact details published on the website.
3. Information We Collect
We may collect different categories of personal data depending on how you interact with the website and which services you use.
3.1 Account and Sign-In Information
If you create an account or sign in using our Single Sign-On (SSO) system, we may collect information required to create, manage, and secure your account. This may include your name, email address, username, encrypted or otherwise secured credential data, account identifiers, authentication records, and information about sign-in or sign-out status.
We may also process session-related information so that the website can recognise whether you are logged in, maintain access to protected areas, apply account preferences, and manage secure authentication across relevant services in the Tar-Aiym ecosystem.
3.2 Technical and Usage Information
When you browse the website or use its features, we may automatically collect technical and usage information. This may include your IP address, browser type and version, operating system, device type, approximate location data inferred from technical signals, referring pages, pages visited, time spent on pages, click or interaction data, and dates and times of access.
We use this information to help operate the website, understand how it is being used, improve reliability and performance, diagnose technical problems, and help detect suspicious or unauthorised activity.
3.3 Payment and Transaction Information
If you purchase products or services through our online store or through any paid service area of the website, we may collect billing information, contact details, order records, transaction references, invoices, and purchase history.
Payment card details and similar payment credentials are typically processed by third-party payment providers rather than being stored directly on our own servers. Where payment processing is handled by an external provider, your payment information will be subject to that provider’s own privacy and security practices as well as ours.
3.4 Financial and Bookkeeping Information
If you use bookkeeping, accounting, or related financial services made available through the website or the wider ecosystem, we may collect and process information that you provide for the purpose of delivering those services. This may include invoices, receipts, income and expense records, transaction histories, bank-related information, tax-related information, payroll-related information, supporting documentation, and other business or financial records.
Some of this information may be commercially sensitive, confidential, or subject to legal or regulatory retention obligations. We will only process this information where reasonably necessary to provide the requested service, comply with applicable law, maintain professional records, fulfil contractual obligations, or protect legitimate business interests.
Because financial and bookkeeping services often require record retention, some categories of information may be kept for a defined period even after a service relationship ends, where this is required by law, regulatory rules, professional practice standards, or legitimate record-keeping requirements.
3.5 Communications
If you contact us, submit an enquiry, request support, or otherwise communicate with us, we may collect the content of those communications and related contact details. This may include emails, contact form messages, support requests, attachments, notes, and records of correspondence.
4. How We Use Your Information
We may use personal data for a range of legitimate business and service-delivery purposes. In particular, we may use your information to operate and maintain the website, provide account functionality, support secure authentication, recognise login and logout states, process orders and transactions, deliver professional services, respond to enquiries, provide support, improve our systems, and protect the integrity of the platform.
We may also use personal data to administer user accounts, monitor service quality, investigate misuse, prevent fraud, manage contractual relationships, maintain internal records, and comply with legal, tax, regulatory, or professional obligations.
We do not sell your personal data to third parties.
5. Legal Bases for Processing
Where applicable data protection law requires a legal basis for processing personal data, we may rely on one or more of the following bases:
- processing necessary for the performance of a contract or in order to take steps before entering into a contract;
- processing necessary to comply with a legal or regulatory obligation;
- processing necessary for our legitimate interests, including operating, securing, improving, and administering our services;
- processing based on your consent, where consent is required or appropriate.
Where we rely on consent, you may have the right to withdraw that consent, subject to any other lawful basis we may have for continuing certain processing activities.
6. Cookies and Similar Technologies
We may use cookies and similar technologies to operate essential website functions, maintain secure sessions, remember preferences, recognise account state, support analytics, and improve the overall user experience.
Some cookies may be strictly necessary for the operation of the website, especially where account access, sign-in persistence, basket or checkout functionality, and security controls are involved. Other cookies may be used for preferences, measurement, or performance analysis where permitted by law.
Further information about our use of cookies and similar technologies should be set out in our Cookie Policy.
7. Sharing of Personal Data
We may share personal data where necessary with trusted service providers, advisers, and operational partners who help us deliver the website and related services. This may include hosting providers, infrastructure providers, payment processors, software vendors, analytics providers, support tools, accountants, legal advisers, or compliance-related professionals.
Where financial or bookkeeping services are involved, information may also be processed or disclosed where reasonably necessary for compliance, reporting, audit, regulatory, taxation, or professional practice purposes.
We may also disclose personal data where required to do so by law, where necessary to respond to lawful requests by public authorities, where necessary to establish, exercise, or defend legal claims, or where needed to protect our rights, users, systems, or services.
Where third parties process personal data on our behalf, we expect them to do so in accordance with applicable law and with appropriate security measures.
8. Data Retention
We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, including for service delivery, support, account administration, legal compliance, record keeping, dispute resolution, security, and enforcement of our rights.
In practice, this may mean that account information is retained while your account remains active and for a reasonable period afterwards, transaction and order data is retained for accounting and tax purposes, and communications are retained for support and evidential purposes.
Where bookkeeping or financial-service information is involved, retention periods may be longer because records may need to be maintained for statutory, tax, regulatory, contractual, or professional reasons. Where personal data is no longer required, we will seek to delete it, anonymise it, or securely dispose of it in an appropriate manner.
9. Security
We take appropriate technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure. These measures may include secure authentication controls, encrypted connections, role-based access restrictions, system monitoring, secure hosting environments, and internal processes intended to reduce unnecessary access to sensitive information.
However, no system, service, or method of transmission over the internet can ever be guaranteed to be completely secure. For that reason, while we take security seriously and aim to use appropriate safeguards, we cannot guarantee absolute security.
10. International Transfers
Depending on the services, providers, or infrastructure used, personal data may be stored or processed outside your home jurisdiction. Where international transfers take place and applicable law requires safeguards, we will seek to ensure that appropriate measures are in place.
11. Your Rights
Depending on the law that applies to you, you may have rights in relation to your personal data. These may include the right to request access to your data, request correction of inaccurate or incomplete data, request deletion of data, request restriction of processing, object to certain forms of processing, request portability of data where applicable, and withdraw consent where processing is based on consent.
These rights are not absolute and may be subject to exemptions, limitations, or legal obligations that require us to retain or continue processing certain information.
If you wish to exercise any applicable rights, you should contact us using the contact details provided on the website.
12. Children’s Privacy
This website and its services are not intended for children unless explicitly stated otherwise. We do not knowingly collect personal data from children in circumstances where doing so would be unlawful.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, systems, legal obligations, or business practices. Any updated version will be published on this page and will take effect from the date shown at the top of the policy unless otherwise stated.
14. Contact
If you have any questions about this Privacy Policy or about how your personal data is handled, please contact us using the contact details provided on the website.