Privacy Policy — TBMag
Legal

Privacy Policy

Connective Communication and Business Solutions Ltd. respects your privacy and is committed to protecting your personal data. This notice explains how we collect, use and protect your information when you use tbmag.co.uk and our related services.

Last updated: November 2023

01 Important Information & Who We Are

This privacy notice explains how Connective Communication and Business Solutions Ltd. collects and processes your personal data through your use of this website — including data you provide when signing up to our newsletter or purchasing our services.

Please read this notice carefully alongside any other privacy or fair processing notices we may provide. This website is not intended for children and we do not knowingly collect data relating to children.

Controller

Connective Communication and Business Solutions Ltd. is the data controller responsible for your personal data (referred to as "we", "us" or "our" in this notice).

Legal Entity

Connective Communication and Business Solutions Ltd.

Registered Address

Unit Da2 Sutherland House, 43 Sutherland Road, London, E17 6BU

ICO

You have the right to make a complaint at any time to the Information Commissioner's Office (ICO) — the UK supervisory authority for data protection. Visit ico.org.uk. We would appreciate the chance to deal with your concerns first — please contact us before approaching the ICO.

02 The Data We Collect

Personal data means any information about an individual from which that person can be identified. We may collect, use, store and transfer the following kinds of personal data:

Identity Data

First name, last name, username, title, date of birth and gender.

Contact Data

Billing address, delivery address, email address and telephone numbers.

Financial Data

Bank account and payment card details.

Transaction Data

Details about payments to and from you and services you have purchased.

Technical Data

IP address, login data, browser type, time zone, operating system and platform.

Profile Data

Username and password, purchases made, interests, preferences and survey responses.

Usage Data

Information about how you use our website and services.

Marketing & Communications Data

Your preferences in receiving marketing from us and your communication preferences.

We also collect Aggregated Data (statistical or demographic data) which does not directly identify you. In some circumstances we may collect Special Categories of Personal Data where relevant to our services.

03 How We Collect Your Data

Direct Interactions

You may give us your data by filling in forms or corresponding with us by post, phone or email. This includes data you provide when you:

  • Apply for or purchase our services
  • Create an account or subscribe to our newsletter
  • Request marketing to be sent to you
  • Enter a promotion or survey, or give us feedback

Automated Technologies

As you interact with our website, we may automatically collect Technical Data using cookies, server logs and similar technologies. Please see our cookie policy for full details.

Third Parties & Public Sources

  • Contact, Financial and Transaction Data from payment service providers
  • Identity and Contact Data from public sources such as Companies House
  • Technical Data from advertising networks such as Facebook

04 How We Use Your Data

We will only use your personal data when the law allows. We rely on the following legal bases: performance of a contract, legitimate interests, and legal or regulatory obligation.

Purpose Data Used Legal Basis
Register you as a new customer Identity, Contact Performance of contract
Process and deliver our services Identity, Contact, Financial, Transaction Performance of contract; Legitimate interests
Manage our relationship with you Identity, Contact, Profile, Marketing Performance of contract; Legal obligation; Legitimate interests
Enable you to complete a survey Identity, Contact, Profile, Usage Performance of contract; Legitimate interests
Administer and protect our website Identity, Contact, Technical Legitimate interests; Legal obligation
Deliver relevant content and advertising Identity, Contact, Profile, Usage, Technical Legitimate interests
Data analytics to improve our services Technical, Usage Legitimate interests
Make suggestions and recommendations Identity, Contact, Technical, Usage, Profile Legitimate interests
Comply with legal obligations Identity, Contact, Technical, Usage, Profile Legal obligation; Legitimate interests

Marketing

You will receive marketing from us if you have requested information or purchased services and have not opted out. We will always get your express consent before sharing your data with third parties for marketing purposes. You can opt out at any time by following the unsubscribe link in any marketing email or by contacting us directly.

05 Disclosures of Your Data

We may share your personal data with the following parties for the purposes described above:

  • Service providers and processors based in the United Kingdom providing IT and system administration services
  • Plausible.io (web analytics), Digital Ocean (web hosting), TypeForm (surveys)
  • MailChimp and Facebook (mailing and marketing services, based in the USA)
  • Shopify (e-commerce platform, based in Canada)
  • Amazon Web Services (backups), Gmail (email)
  • Professional advisers including lawyers, auditors and insurers based in the UK
  • HM Revenue & Customs and other regulatory authorities
  • Third parties in the event of a business sale, transfer or merger

We require all third parties to respect the security of your personal data and treat it in accordance with the law. We do not allow third-party service providers to use your data for their own purposes.

06 International Transfers

Some of our third-party service providers are based outside the European Economic Area (EEA) — including MailChimp and Facebook (USA) and Shopify (Canada). Whenever we transfer your personal data outside the EEA, we ensure appropriate safeguards are in place:

  • Transfers to countries deemed adequate by the European Commission
  • Use of Standard Contractual Clauses approved by the European Commission
  • Transfers to US providers participating in approved data protection frameworks

Please contact us if you want further information on the specific mechanisms we use when transferring your personal data outside the EEA.

07 Data Security

We have put in place appropriate technical and organisational security measures to prevent your personal data from being accidentally lost, used, accessed in an unauthorised way, altered or disclosed.

Access to your personal data is limited to those employees, agents and contractors who have a legitimate business need to know. They process your personal data only on our instructions and are subject to a duty of confidentiality.

We have procedures in place to deal with any suspected personal data breach and will notify you and any applicable regulator where we are legally required to do so.

08 Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes we collected it for — including satisfying legal, accounting or reporting requirements.

We retain basic information about customers and users (including Contact, Identity, Financial and Transaction Data) for at least seven years after they cease being customers, for regulatory and insurance purposes.

In some circumstances we may anonymise your personal data for research or statistical purposes, in which case we may use it indefinitely without further notice.

09 Your Legal Rights

Under data protection law, you have the following rights in relation to your personal data:

Right to Access

Request a copy of the personal data we hold about you and check that we are lawfully processing it.

Right to Correction

Request that any incomplete or inaccurate data we hold about you be corrected.

Right to Erasure

Ask us to delete or remove your personal data where there is no good reason for us to continue processing it.

Right to Object

Object to the processing of your personal data where we are relying on legitimate interests or using it for direct marketing.

Right to Restrict Processing

Ask us to suspend the processing of your personal data in certain scenarios.

Right to Portability

Request the transfer of your personal data to you or a third party in a structured, machine-readable format.

Right to Withdraw Consent

Withdraw consent at any time where we are relying on consent to process your personal data.

No Fee Usually Required

You will not normally have to pay to exercise your rights. We may charge a reasonable fee only for requests that are clearly unfounded or excessive.

To exercise any of these rights, please contact us at contact@tbmag.co.uk. We aim to respond to all legitimate requests within one month.

10 Glossary

Lawful Bases

  • Legitimate Interest — the interest of our business in conducting and managing our operations to give you the best service and most secure experience, where your rights and interests do not override ours.
  • Performance of Contract — processing your data where it is necessary for the performance of a contract to which you are a party, or to take steps at your request before entering such a contract.
  • Legal or Regulatory Obligation — processing your data where it is necessary for compliance with a legal or regulatory obligation that we are subject to.

Third Parties

External third parties include service providers acting as processors based in the United Kingdom providing IT and system administration services. These include: Plausible.io, Digital Ocean, TypeForm, MailChimp, Facebook, Shopify, Amazon Web Services, Gmail, and our professional advisers (lawyers, auditors, accountants and insurers).

Questions About Your Privacy?

Contact us directly — we aim to respond to all data-related requests within one month.

Contact Us →