Privacy and data protection

Privacy Notice

This notice explains how TAM Intelligence Ltd handles personal information through its websites and TAM Vault services.

Effective date: 25 October 2026

1. Who is responsible?

TAM INTELLIGENCE LTD (company number 17252591), registered office 27 Willow Garth Road, Chesterfield, S41 8BL, United Kingdom, is responsible for personal information it collects to operate its websites, administer accounts, provide support, protect its services and meet legal obligations.

When an organisation uses TAM Vault to collect information about its workforce, customers, suppliers or other participants, that organisation will usually decide why and how the information is used. The organisation is normally the data controller for that information. TAM processes it on the organisation’s instructions to provide the service. If you were invited by an organisation, contact that organisation first about its use of your response or profile.

2. Information we handle

Depending on the service and features used, this may include:

• account and contact details, such as name, email address, organisation and access permissions;
• information supplied through profiles, invitations, Pulse responses, interviews, projects, ESBR forms, support requests or uploaded material;
• service and security information, such as sign-in events, browser/device information, diagnostic records and actions needed to secure accounts; and
• information needed to administer subscriptions, payments, cancellations and support.

Please do not submit special category or highly sensitive personal information unless the organisation responsible for the data has confirmed that the service and its instructions are suitable for it.

3. How we use information

We use information to create and secure accounts; provide requested features; send service and invitation messages; respond to enquiries; administer subscriptions; prevent misuse; maintain and troubleshoot the service; and comply with legal obligations. Where TAM acts as a processor for an organisation, it uses participant information to provide that organisation’s authorised service and follows its documented instructions.

Some features use AI-supported processing to assist with transcription, classification, summaries or organisational insight. Outputs are provided to support human review and do not replace the organisation’s judgement. The organisation decides how to use those outputs.

4. Legal grounds

Where TAM is the controller, the legal ground depends on the activity and may include performing a contract or taking steps requested before a contract, pursuing legitimate interests in operating and securing the service, meeting a legal obligation, or consent where required by law. Where TAM processes information for an organisation, that organisation is responsible for establishing the legal ground for its collection and use of participant information.

5. Service providers and location

We use specialist providers for database and account services, transactional email, workflow automation, document integration, security checks and AI-supported features. The current platform configuration identifies Supabase, Resend, Make, Microsoft Graph, Cloudflare and OpenAI for these service functions. Information is shared with them only as needed to provide, secure and support the relevant feature.

The TAM Practitioner Supabase project is configured in the EU Central region (Frankfurt, Germany). Other providers may process information in other locations depending on the feature used. Where an international transfer is subject to UK data protection law, we use a lawful transfer mechanism and appropriate safeguards.

6. How long we keep information

We keep information for as long as needed for the purpose for which it was collected, the organisation’s instructions, legal requirements, security and the resolution of disputes. For customer Vault data, the Platform Terms describe export and deletion when a subscription ends. Limited billing, legal, security and closure records may be retained where there is a lawful reason to do so. Residual backups are restricted and expire under the applicable backup-retention arrangements.

Where an organisation controls participant information, it is responsible for setting retention instructions and TAM follows those instructions.

7. Your rights

If TAM is responsible for your information, you can contact us to ask about access, correction, deletion, restriction, objection or portability, as applicable. If an organisation invited you or supplied your information, contact that organisation first. TAM will support it in handling requests as required by the service arrangement.

You can contact us at support@tamintelligence.com. You also have the right to complain to the UK Information Commissioner’s Office at ico.org.uk/make-a-complaint.

8. Security

We use technical and organisational measures intended to protect information and limit access to people and services that need it. No online service can guarantee that a security incident will never occur. If a breach requires notification, we will follow applicable legal requirements and our service arrangements.

9. Cookies and browser storage

The service may use essential cookies or browser storage for sign-in, session management and security. Optional cookies, where used, will be explained and managed in accordance with applicable requirements.

10. Changes and contact

We may update this notice when the service, its providers or legal requirements change. The current version will be available at tamintelligence.com/privacy/. For privacy questions or requests, contact support@tamintelligence.com.