Privacy
Privacy notice
This notice explains what personal information T2Core collects through this website, why, how long it is kept and what you can ask us to do about it.
1. Who is responsible for your information
T2CORE LTD is the data controller. The company is registered in England and Wales under company number 17447217. The registered office address is published on the Company information page.
To ask anything about this notice or to exercise a right described in section 8, contact T2Core through the enquiry form on the Contact page.
2. What this notice covers
It covers personal information collected through t2core.com: what you send using the enquiry form, and the limited technical information processed to deliver and protect the website. It does not cover information you provide later under a contract, which is handled under the terms of that engagement.
3. What is collected
Information you send through the enquiry form
- Name
- Required, so a reply can be addressed to you.
- Work email address
- Required, so a reply can reach you.
- Organisation
- Optional, to understand the context of the enquiry.
- Phone number
- Optional, and required only if you choose phone as your preferred contact method.
- Project summary
- Required. Whatever you choose to write. Please do not include passwords, access credentials, detailed network diagrams or sensitive site information.
- Preferred contact method
- Required, so T2Core replies the way you asked.
There is no file upload. The form does not ask for, and T2Core does not want, special category data as defined in UK GDPR Article 9.
Information processed automatically
To serve and protect the website, the hosting provider processes your IP address, the page requested, the date and time, the browser user-agent string, the response status and the approximate volume of data sent. This is security and availability logging. It is not analytics, and it is not used to profile or market to you. Details of the technologies involved are in the Cookies notice.
4. Why it is used, and the lawful basis
| Purpose | Lawful basis |
|---|---|
| Reading your enquiry, replying to it and taking the steps you asked for before any contract | UK GDPR Article 6(1)(b), steps taken at your request before entering a contract — or Article 6(1)(f), legitimate interests in responding to a business enquiry, where you write on behalf of an organisation |
| Keeping the website available, and protecting it from attack and abuse | Article 6(1)(f), legitimate interests in operating a secure and available website |
| Keeping a record of enquiries and correspondence for as long as it may be needed to deal with a query or dispute | Article 6(1)(f), legitimate interests in keeping accurate business records |
| Meeting legal, accounting or regulatory obligations if an enquiry becomes an engagement | Article 6(1)(c), legal obligation |
Your information is not used for marketing, is not added to a mailing list and is not sold, rented or shared for anyone else's marketing. If T2Core ever wants to send you marketing, it will ask you separately first.
No decision about you is made by automated means, and there is no profiling.
5. Who processes it
T2Core does not sell or share your information with third parties for their own purposes. The following providers process it on T2Core's instructions, under contract:
| Provider | Role |
|---|---|
| Cloudflare, Inc. | Website hosting, content delivery, DNS and security protection; delivery of the enquiry email from the website to the T2Core mailbox |
| Microsoft Corporation (Microsoft 365) | The email service that hosts the T2Core mailbox your enquiry is delivered to |
Information may also be disclosed where the law requires it, or to professional advisers where necessary to establish, exercise or defend a legal claim.
6. Transfers outside the UK
Both providers named above are established in the United States and operate global infrastructure, so your information may be processed outside the United Kingdom. Where that happens, the transfer is covered by the safeguards in UK GDPR Article 46 — the UK International Data Transfer Agreement or the UK Addendum to the European Commission's standard contractual clauses, together with the providers' technical and organisational measures. You can ask T2Core for information about the safeguards that apply.
7. How long it is kept
- Enquiries that do not lead to an engagement
- 12 months after the last meaningful contact, then deleted.
- Temporary delivery copies held by the form and email providers
- No more than 30 days after delivery has been confirmed.
- Enquiries that become a customer or project relationship
- Moved to the business retention schedule for customer and project records, which is set by the contractual, accounting and legal periods that apply to that engagement.
- Hosting security and availability logs
- Retained by the hosting provider for its standard short operational period.
8. Your rights
Under UK GDPR you have the right to:
- ask for a copy of the personal information T2Core holds about you;
- have inaccurate information corrected;
- ask for information to be deleted, in the circumstances the law allows;
- ask for processing to be restricted while a question about it is resolved;
- object to processing carried out on the basis of legitimate interests, including any processing for direct marketing;
- receive information you provided in a portable format, where processing relies on consent or a contract and is carried out by automated means; and
- withdraw consent at any time, where processing relies on consent.
To exercise any of these, contact T2Core through the enquiry form on the Contact page. There is no charge, and a response will be provided within the statutory period of one month, which can be extended by a further two months for complex requests. T2Core may ask for information to confirm who you are before acting on a request.
9. Keeping it secure
The website is served only over HTTPS. Enquiries are validated on the server, rate limited and sent straight to the T2Core mailbox; they are not written to a website database. Access to the mailbox is restricted and protected by multi-factor authentication. No system is perfectly secure, which is why the form asks you not to send credentials, network diagrams or sensitive site information through it.
10. Complaints
If you are not satisfied with how T2Core has handled your personal information, please raise it with T2Core first so it can be put right. You also have the right to complain to the UK supervisory authority:
Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF. Helpline 0303 123 1113. ico.org.uk/make-a-complaint
11. Changes to this notice
This notice is reviewed whenever the website, its providers or the information collected changes. The effective date is shown at the top of this page. Material changes will be reflected here before they take effect.