Privacy Policy

Taleno Co collects data in two ways: automatically, through server logs and cookie-based analytics tools, and directly, when a visitor submits the contact form.

Automatically collected data includes: IP address, browser type, operating system, referring URL, pages visited, and time of visit. This data is held in standard server logs and is used solely for website functioning and aggregate traffic analysis.

Contact form data includes: name, email address, and any content submitted in the message field. This data is used only to respond to the enquiry submitted and is not shared with third parties for marketing purposes.

Taleno Co does not collect: payment details, government identification numbers, date of birth, or any data categorised as sensitive under UK GDPR. The website does not process any data of a personal health or wellness nature submitted through the contact form.

Data collected through the contact form is used for the purpose of responding to the enquiry and for no other purpose. Contact form submissions are not retained beyond the period necessary to address the enquiry, subject to a maximum retention period of twenty-four months.

Server log data is retained for a maximum of twelve months and is used only for website functioning, security monitoring, and aggregate traffic analysis. Individual records are not used for profiling or personalised targeting.

Cookie data is used for the purposes described in the Cookie Policy, which should be read alongside this document. You may manage your cookie preferences at any time using the Cookie Settings link in the footer of each page.

Taleno Co does not sell, rent, or otherwise transfer personal data to third parties. Data is shared with the website's hosting provider and email infrastructure provider solely to the extent necessary to operate the website and process contact form submissions. Both providers operate under data processing agreements consistent with UK GDPR.

Under UK GDPR, Taleno Co processes personal data on the following legal bases:

• ▪Legitimate interests — server log data and aggregate analytics are processed under legitimate interests in maintaining a functioning and secure website.
• ▪Consent — non-essential cookies are placed only following affirmative consent via the cookie consent banner. Consent may be withdrawn at any time through the Cookie Settings link.
• ▪Contract performance — contact form data is processed to respond to an enquiry submitted by the visitor, which constitutes a pre-contractual exchange.

Under UK GDPR, you have the following rights in relation to personal data held by Taleno Co:

• ▪The right to access personal data held about you.
• ▪The right to rectification of inaccurate personal data.
• ▪The right to erasure of personal data no longer necessary for its original purpose.
• ▪The right to restrict the processing of your personal data in certain circumstances.
• ▪The right to object to processing carried out on the basis of legitimate interests.
• ▪The right to withdraw consent for cookie-based data processing at any time.

To exercise any of these rights, please contact the Taleno Co team at [email protected]. Requests are acknowledged within five working days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

Taleno Co takes reasonable technical and organisational measures to protect personal data against accidental loss, unauthorised access, alteration, or disclosure. The website is served over HTTPS. Contact form submissions are transmitted using encrypted connections.

No method of data transmission over the internet is entirely secure. While Taleno Co takes reasonable precautions, absolute security cannot be assured. In the event of a data breach that is likely to result in a risk to individuals, Taleno Co will notify the ICO within seventy-two hours of becoming aware of the breach, as required under UK GDPR.

Taleno Co may update this Privacy Policy periodically to reflect changes in data processing practices or applicable law. The date of the most recent update is shown at the top of this page. Continued use of the website following any update constitutes acceptance of the revised Policy.

For questions about this Privacy Policy, please contact the catalogue team directly: [email protected] or by post to 85 Colebrooke Row, London N1 8AB, United Kingdom.