Privacy Policy

This policy explains in general terms how TCHAT handles personal data: what we collect, why, how we protect it, and what rights you have over it. It follows the applicable personal data protection laws.

Our role

We provide a platform that commercial organisations use to communicate with their customers and manage that communication. This gives us two distinct roles.

Data belonging to a subscribing business's own customers belongs to that business. It is responsible for that data and for deciding the purposes it is used for; we process it on its instructions and on its behalf, never for our own purposes. Data about the business itself, and about the staff who use the platform, is data we are responsible for.

In practice: if you are a customer of a business that uses the platform and received a message from it, that business decided to send it and is responsible for your data. Contact them first — we assist them in fulfilling your request.

The data we handle

We handle the contact and identifying details needed to deliver messages, the content of the communications that pass through the platform, account and subscription data, and technical usage data needed to operate the service, keep it secure and diagnose faults. We also record anyone who has asked to stop receiving marketing messages, so that their wish is respected.

We ask for no more data than the service requires, and we do not collect data that serves no purpose.

Why we use it

We use this data to operate the service and perform our contract with the business, to manage subscriptions and billing, to keep the platform secure and prevent misuse, to meet our legal obligations, and to improve the service and resolve faults.

Marketing messages are sent only with the recipient's consent. The business sending them is responsible for obtaining that consent and for being able to evidence it.

We do not sell personal data, we do not use one business's data for the benefit of another, and we do not use the content of communications for any purpose other than the one it was collected for.

Who we share it with

We share data only to the extent necessary, and only with service providers acting on our behalf under protection obligations no weaker than our own, or where a competent authority lawfully requires it.

Some data may be processed or stored outside the Kingdom by those providers, subject to the safeguards required by the Personal Data Protection Law.

Separation between businesses

Each business's data is kept separate from every other business's, and is reachable only by those the business grants access to. Permissions within the platform are limited by role.

Retention

We retain a business's data for as long as its account exists. If it stops using the platform, all sending and access stop immediately.

Your rights

Under the Personal Data Protection Law you have the right to:

• Be informed about how your data is collected and used
• Access your data and obtain a copy of it
• Have it corrected if it is inaccurate or incomplete
• Have it erased when it is no longer needed
• Withdraw your consent to marketing messages at any time

To stop marketing messages, simply reply to any message you receive asking us to stop: the request is recorded and honoured immediately. To exercise your other rights, contact the business you deal with, as it is responsible for your data; if you cannot identify it or receive no reply, contact us and we will help. Deletion is covered on the data deletion page.

Measuring use of this website

This marketing website measures how it is used: which pages are visited, where the visit came from, and a recording of the browsing itself — cursor movement, scrolling, and the order in which you move between fields — so we can see where the page confuses its reader and fix it. This is done with cookies and measurement tools operated by a provider acting on our behalf.

What you type into the registration form is not recorded: the name, email address and phone number are masked out of the recording. What you submit reaches us for the sole purpose of reviewing your request.

To stop this measurement, block cookies for this site in your browser, browse it in a private window, or use an extension that blocks measurement tools. Doing so affects neither your browsing nor your registration.

Security

We take reasonable technical and organisational measures to protect data against unauthorised access, alteration, disclosure or destruction, and we review those measures in line with the nature of the data and the risks around it. No information system is absolutely secure, but we hold ourselves to the standard the law and the nature of this service require.

Children's privacy

The service is directed at commercial organisations, is not intended for anyone under 18, and we do not knowingly collect their data. If we learn that we have, we delete it.

Changes to this policy

We may update this policy, and the date of the latest update is shown at the top of this page. For material changes we notify subscribing businesses.

Contact

For any question or request concerning your data, write to [email protected]. If you are not satisfied with our response, you have the right to lodge a complaint with the data protection authority competent for you.