Help & legal
Privacy Policy
How we handle personal information, why we use it and how to contact us about your privacy.
Last updated: 28 September 2026
1. Who handles your information
Tylabs Media handles personal information when you contact us, visit our website or use our services. For this information, we act as a data controller, meaning we decide why and how it is used.
Privacy contact: hello@tylabsmedia.co.uk
Postal address: Tylabs Media, 1 Hunters Drive, Sheffield, S25 2TG, United Kingdom.
When we host a customer’s website or process information solely on their instructions, that customer may be the controller and we may act as their processor. We handle that processing under the relevant customer agreement and instructions. Contact the relevant business about its use of your information; we can help route a request where appropriate.
2. Information we collect and its sources
Enquiries and project discussions
You may provide your name, business name, email address, telephone number, website address, service preferences and message when contacting us. We also receive correspondence, project instructions, feedback and materials you choose to share.
Customer and service records
When you become a customer, we use the contact, billing, order and project information needed to supply your service. Website materials can include names, photographs and contact details. Domain registration may require registrant contact information.
Website and security information
Our hosting infrastructure processes technical information needed to deliver website requests and investigate faults or misuse. This can include IP addresses, timestamps, requested pages, browser information and error records.
We receive information directly from you, from someone authorised to act for you, and from service providers involved in your project. Securix assessments can also obtain publicly accessible website, DNS and certificate information.
Please do not include passwords, payment-card details or unnecessary sensitive information in an enquiry. Providing enquiry information is voluntary, but without suitable contact details or project information we may be unable to respond or supply the requested service.
3. Why we use information
Responding to enquiries and supplying services
We use relevant information to discuss your requirements, prepare quotations, deliver agreed work, provide support and manage your account. Where you are personally entering a contract, our lawful basis is taking steps at your request before a contract or performing that contract.
Where you represent a business customer, we normally rely on legitimate interests in communicating with that business and managing the working relationship. We consider your interests and rights when assessing this basis.
Payments and required records
We use billing and transaction information to administer payments and keep the records required by applicable tax and accounting law. The lawful bases are contractual necessity for payment administration and legal obligation for required records.
Security and resolving issues
Relevant technical records and correspondence help us investigate faults, prevent misuse and handle complaints or disputes. We normally rely on legitimate interests in operating a reliable service, protecting information and establishing or defending legal claims.
Optional communications and tracking
Submitting an enquiry does not subscribe you to marketing. Where we rely on consent for optional marketing or tracking, you can withdraw it without affecting the lawfulness of earlier processing. Service and renewal messages relate to the service you have requested.
4. Securix and AI-assisted analysis
Securix assessments use the website or domain submitted, technical findings and generated reports. Public website content can contain personal information, so assessments and reports may do so too.
Where an AI provider assists with analysis, the information sent to that provider must be explained before you use the feature. A security rating is an assessment of available indicators, not a guarantee that a website, message or sender is safe.
Additional features
Before a new feature collects additional personal information, we provide information about what it collects, why it is used, who receives it and how long it is retained. This includes any dedicated email-checking feature.
Do not submit confidential emails or other people’s sensitive information through a general enquiry form to request an email check.
6. Processing outside the UK
Whether information is processed outside the UK depends on the providers, service locations and support access used. Where a restricted international transfer is involved, an applicable legal transfer arrangement is required.
The applicable arrangement depends on the recipient and destination. It may involve UK adequacy regulations or appropriate contractual safeguards and the required assessment. Contact us for information about the processing locations and safeguards relevant to your service. We do not represent that all supplier processing takes place solely in the UK.
7. How long information is kept
Enquiries that do not become customers
We delete unsuccessful enquiry records 12 months after our last contact with you. This applies to the enquiry and related correspondence held by us. If a particular record is required by law or needed for an ongoing complaint or legal claim, we retain only the information necessary for that purpose until the requirement ends.
Other records
We retain customer and project records while needed to deliver the agreed service and deal with related support, complaints or legal claims. Financial records are retained for the period required by applicable accounting and tax obligations. We determine retention by the purpose of the information, the applicable legal requirement and whether an unresolved matter still requires the record. We do not retain information indefinitely simply because storage is available.
When a service ends, some information may still be needed for legal record keeping or an unresolved matter. Deleting a live record may not immediately remove copies held in backups. Backup copies remain subject to the applicable backup retention cycle. Contact us if you need details about the records or backups relevant to your request.
8. Protecting information
We are responsible for protecting the information we handle using measures appropriate to its sensitivity and the risks associated with the service. Access and use must be limited to what is needed for the relevant work.
No online service can guarantee absolute security. If you think information sent to us has been compromised, contact hello@tylabsmedia.co.uk.
9. Your data protection rights
Depending on the circumstances and the lawful basis used, you may have the right to:
- Ask for access to your personal information and a copy of it.
- Ask us to correct inaccurate or incomplete information.
- Ask for information to be erased or its use restricted.
- Object to processing based on legitimate interests.
- Receive certain information in a portable format.
- Withdraw consent where we rely on it.
- Exercise applicable rights concerning significant automated decisions.
You can object to the use of your information for direct marketing at any time. Other rights are subject to legal conditions and exceptions.
Email hello@tylabsmedia.co.uk to make a request. We may need proportionate information to verify your identity or understand the request. We normally respond within one month, subject to any lawful extension or adjustment, which we will explain. Requests are normally free of charge.
10. Privacy questions and complaints
Please contact us if you have a concern about how your information is handled. Explain what happened and how you would like us to help.
You also have the right to complain to the UK Information Commissioner’s Office. Visit ico.org.uk/make-a-complaint. You do not have to obtain our permission to raise a concern with the regulator.