Privacy Policy

www.tiquo.co respects your privacy. This policy explains how we collect, use, and protect your personal data when you visit our website, use our services, or interact with us.

Who We Are

TIQUO LTD is a UK-incorporated company registered at:

• Address: 26 Old Gloucester Street, London, WC1N 3AN, United Kingdom
• Company Number: 16500553

Depending on the context, we act as a data controller, joint controller, or data processor.

Data Protection Lead

Our Data Protection Lead can be contacted at: privacy@tiquo.co

EU Article 27 Representative

Our representative under GDPR Article 27 is based in Paris, France. Contact via: privacy@tiquo.co

How We Use Your Data

We collect and process personal data for the following purposes:

Who We Share Your Data With

• Business partners who help us operate our service
• Sub-processors (see https://tiquo.co/legals/subprocessor-policy)
• Regulators and law enforcement, where required by law
• Prospective buyers in the event of a business sale or merger

AI and Automated Processing

We offer optional AI-enabled features that our customers (service businesses such as hotels, restaurants, spas, gyms, clinics, cinemas, event venues, training providers and similar) can choose to enable. These features process data using Anthropic as our AI model provider.

Our AI Features

• Analytics Insights - AI generates explanations from anonymised analytics data
• Customer Overview Summaries - AI creates customer profile summaries
• Customer Name Enrichment - parses email prefixes to infer first and last names during import
• AI Documents and Forms - generates document templates based on your use case
• Email Campaign Designer - AI-assisted email drafting
• Segment Builder - converts natural language into segment rules

No Automated Decision-Making with Legal Effect

None of these AI features make automated decisions that have legal or similarly significant effects on you. Under GDPR Article 22, you have the right not to be subject to solely automated decision-making with legal or significant effects. Our AI features do not do this.

Data Transfer to Anthropic

Where your venue enables AI features, your data may be processed by Anthropic in the United States under Standard Contractual Clauses (SCCs). Anthropic does not use your data for model training.

Your Control

You can ask your venue (the business you interact with) to disable AI features for your personal data at any time.

International Transfers

We use cloud infrastructure in multiple regions:

• AWS eu-west-1 (Ireland)
• AWS us-east-1 (Virginia)

Customer data is replicated across both regions. Transfers to us-east-1 are covered by the EU-US Data Privacy Framework, Standard Contractual Clauses, and UK International Data Transfer Agreement as applicable.

Some of our sub-processors are based in the United States (Stripe, Clerk, Anthropic, and others). For international transfers, we rely on:

• EU Standard Contractual Clauses (Decision 2021/914)
• UK International Data Transfer Agreement (IDTA) and Addendum
• Swiss FDPIC-recognised mechanisms
• APEC Cross-Border Privacy Rules (CBPR) where applicable
• Adequacy decisions

Transfer Impact Assessments are maintained and available on request from privacy@tiquo.co

How Long We Keep Your Data

We retain personal data in accordance with our Data Retention Schedule. Key periods include:

• Account data - retained during contract plus 90 days after termination
• Billing records - retained for 7 years (tax compliance)
• Marketing data - retained until you withdraw consent
• Support records - retained for 2 years
• Security logs - retained for 12 months

Your Rights

EU/EEA (GDPR)

• Access
• Rectification
• Erasure
• Restriction
• Portability
• Objection
• Complaint to your local DPA

UK (UK GDPR)

• Access
• Rectification
• Erasure
• Restriction
• Portability
• Objection
• Complaint to the ICO

Switzerland (revFADP)

• Access
• Rectification
• Deletion
• Complaint to the FDPIC

US/California (CCPA/CPRA)

• Know what data is collected
• Delete your data
• Correct your data
• Opt-out of sale/sharing
• Non-discrimination

Canada (PIPEDA)

• Access
• Correction
• Complaint to the OPC

Canada - Quebec (Law 25)

• Enhanced privacy rights - see PIPEDA for details

Singapore (PDPA)

• Access
• Correction
• Withdraw consent

Hong Kong (PDPO)

• Access
• Correction

Brazil (LGPD)

• Access
• Correction
• Deletion
• Portability
• Information
• Opposition

Japan (APPI)

• Disclosure
• Correction
• Deletion

Australia (APPs)

• Access
• Correction
• Complaint to the OAIC

India (DPDPA)

• Access
• Correction
• Erasure
• Grievance redressal

To exercise any of these rights, please contact us at privacy@tiquo.co

Cookies

For detailed information about our use of cookies, please refer to our Cookie Policy on our website.

Protecting Children's Data

Tiquo does not knowingly collect personal data from children under 16. If we become aware that we have collected data from a child under 16, we will delete it immediately. If you believe we have collected data from a child, please contact us at privacy@tiquo.co

Changes to This Policy

We may update this privacy policy from time to time. We will notify you of material changes via our website or by email where appropriate. Your continued use of our services constitutes acceptance of the updated policy.

Contact Us

If you have any questions about this privacy policy or how we handle your data, please contact:

privacy@tiquo.co