Privacy Policy
Last updated: {{DATE}}
Who we are: Tenfeet Ltd (“Tenfeet”, “we”, “us”, “our”)
Address: 125 City Road, London EC1V 2NX, United Kingdom
Contact: privacy@tenfeet.co (or your preferred inbox)
This Privacy Policy explains how we collect, use, share, and protect personal information when you visit our websites, subscribe to our emails, or purchase and use our content library and newswire (the “Services”).
Key point: We provide templates and a curated newswire. We do not create bespoke advice and do not need access to your clients’ personal data to deliver our Services. Please do not send us client PII (personally identifiable information).
1) The roles we play
- For data we collect about website visitors, subscribers, and customer firm contacts, Tenfeet acts as a controller (UK/EU terms) / business (US terms).
- We do not intend to process your end-clients’ personal data. If you send us client PII by mistake, we will delete it upon discovery and may ask you to re-send redacted materials.
2) What we collect
We aim to collect the minimum needed to run our Services.
A) Information you provide
- Account & billing: name, business email, firm name, role, billing address, VAT/tax ID (if applicable).
- Subscriptions: email address, preferences, consent status (time, source, IP).
- Support & feedback: messages you send us, survey responses.
- Content usage metadata: which templates you download, open/click data for our emails.
B) Information we collect automatically
- Website/usage data: IP address, device/browser details, pages viewed, referrer, time on page.
- Email analytics: opens, clicks, bounces, unsubscribes (to maintain your preferences).
- Cookies & similar tech: for essential site functions, analytics, and (optionally) advertising measurement—see Cookies below.
C) Sensitive data
We do not seek sensitive personal data. Do not send it to us.
3) What we do not collect (and don’t need)
- We do not need your clients’ names, contact details, account numbers, tax IDs, or any other client PII to provide our Services.
- We do not ask for trading data or performance records.
- If you use examples in materials, please anonymise them before sharing with us (if you share at all).
4) How we use personal information (purposes & legal bases)
Purposes
- Provide, maintain, and improve the Services (templates, newswire, library access).
- Manage subscriptions, payments, and account administration.
- Send service emails (e.g., access links, renewal notices) and, with your consent or as allowed, newsletter/marketing.
- Measure engagement and improve content (opens, clicks, downloads).
- Detect, prevent, and address fraud, abuse, or security issues.
- Comply with legal obligations (tax, recordkeeping).
Legal bases (UK/EU/UK GDPR)
- Contract (to deliver what you bought or requested).
- Legitimate interests (to run and improve a B2B service, prevent abuse, measure usage—balanced against your rights).
- Consent (for marketing emails where required, and for non-essential cookies).
- Legal obligation (tax and accounting).
5) How we share information
We share limited data with trusted service providers who help us operate the Services, under contracts that restrict their use of your data:
- Payments: e.g., Stripe (card processing, invoicing).
- Email/CRM & hosting: e.g., Systeme.io, email delivery tools, cloud hosting/CDN, analytics.
- Automation/ops: e.g., Make.com (if you connect flows).
- Professional services: accountants, legal counsel (only as necessary).
We may disclose information if required by law, to protect rights/safety, or in the context of a business transfer (merger, acquisition). We do not sell your personal information.
6) International transfers
We are UK-based but may use providers in other countries (including the US). When data is transferred internationally, we use appropriate safeguards (e.g., UK/EU Standard Contractual Clauses or equivalent) and provider due diligence.
7) Retention
We retain personal information only as long as necessary for the purposes above, including:
- Account and billing records: generally 6–7 years for tax/finance compliance.
- Marketing preferences and consent logs: until you unsubscribe or request deletion, and as needed to prove compliance.
- Support messages: as needed to resolve issues and maintain service quality.
We delete or anonymise data when no longer required.
8) Security
We use administrative, technical, and organisational measures appropriate to the risk, including encryption in transit, access controls, least-privilege practices, and vendor security reviews. No method is 100% secure; please help by using strong, unique passwords and not emailing sensitive data.
9) Cookies & similar technologies
We use:
- Essential cookies (site functionality, security).
- Analytics cookies (to understand visits and improve content).
- Optional advertising/measurement cookies (if we run campaigns).
Where required, we present a cookie banner to obtain/record your preferences. You can adjust settings through our banner and your browser. Blocking some cookies may limit functionality.
10) Marketing communications
- Email newsletters/updates are sent with your consent (where required) or to existing customers under applicable rules.
- You can unsubscribe anytime via the link in emails or by contacting us.
- We may send service/transactional emails even if you opt out of marketing.
11) Your rights
UK/EU/EEA (UK GDPR/GDPR)
You may have the right to access, rectify, erase, restrict, object, and port your personal data, and to withdraw consent where processing is based on consent. You also have the right to lodge a complaint with the ICO (UK) or your local supervisory authority.
- UK ICO: https://ico.org.uk/concerns/
- To make a request: privacy@tenfeet.co
US (e.g., California/CPRA, Colorado/CPA, Virginia/VCDPA, etc.)
Depending on your state, you may have rights to know/access, correct, delete, opt out of sale/share and targeted advertising, and appeal a decision. We do not sell personal information. If we “share” data for cross-context behavioral advertising, you may opt out via our cookie banner and by contacting us.
- To exercise US state rights: privacy@tenfeet.co (subject “US Privacy Request”) and include your state of residence.
We will verify your identity before fulfilling rights requests, and we won’t discriminate against you for exercising rights.
12) Children’s privacy
Our Services are not for children under 16 (or as defined by local law). We do not knowingly collect personal information from children.
13) Your client data (important)
- Our Services are designed so you do not need to share client PII with us.
- If you inadvertently provide client PII, notify us at privacy@tenfeet.co; we will delete it and ask you to re-send without PII.
- If, in a rare, documented case, we process client PII at your written request, we will do so solely as your processor/service provider under a separate Data Processing Addendum (DPA), and only for the limited purpose you specify.
14) Third-party links & integrations
Our website and materials may link to third-party sites or embed third-party tools (e.g., Systeme.io forms, Stripe checkout). Their privacy practices are their responsibility; review their policies before sharing data.
15) Changes to this Policy
We may update this Policy to reflect operational, legal, or regulatory changes. We’ll post the updated date above and, if changes are material, provide a more prominent notice. Continued use of the Services after an update means you accept the revised Policy.
16) Contact us (and our UK/EU contact)
Tenfeet Ltd
125 City Road, London EC1V 2NX, United Kingdom
privacy@tenfeet.co
If you are in the UK/EU and have concerns that we cannot resolve, you can contact the UK ICO or your local authority (see Section 11).
17) US state disclosures (summary)
- Do we sell personal information? No.
- Do we share for cross-context advertising? Not as a business practice; if we ever do, we will update this Policy and provide an opt-out.
- Categories collected: identifiers (name, email, IP), commercial info (purchases), internet activity (site usage), limited inferences (preferences).
- Sources: directly from you; automatically from your device; from service providers (e.g., payment/analytics).
- Purposes: as described in Section 4.
- Disclosures to providers: as described in Section 5.
- Retention: as described in Section 7.
18) Regional addendum (UK specifics)
- Controller: Tenfeet Ltd.
- Representative/DPO: We have not appointed a statutory DPO; contact privacy@tenfeet.co for privacy matters.
- Legal bases: detailed in Section 4.
- International transfers: SCCs/IDTA or other safeguards where applicable.
Quick summary (human-readable)
- We collect business contact info and usage data to run a B2B template + newswire service.
- We don’t need your clients’ personal data—please don’t send it.
- You can unsubscribe anytime and exercise privacy rights.
- We do not sell your information.
- We protect your data and keep it only as long as necessary.