Privacy Policy
How we collect, use, and protect your personal information
Introduction
TenthMatrix ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website https://www.tenthmatrix.com and use our services. Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the site or use our services.
1. Information We Collect
Personal Information
We may collect personal information that you voluntarily provide to us when you:
- Register for an account or request a demo
- Subscribe to our newsletter or marketing communications
- Fill out contact forms or request customer support
- Participate in surveys, promotions, or contests
- Use our products and services
Personal information may include: name, email address, phone number, company name, job title, postal address, billing information, and any other information you choose to provide.
Automatically Collected Information
When you visit our website, we automatically collect certain information about your device and browsing actions, including:
- IP address and location data
- Browser type and version
- Operating system
- Referring/exit pages and URLs
- Date and time of visits
- Pages viewed and links clicked
- Device identifiers and characteristics
Cookies and Tracking Technologies
We use cookies, web beacons, pixel tags, and similar tracking technologies to collect information about your browsing behavior. You can control cookie preferences through your browser settings. For more details, see our Cookie Policy.
Business Data
If you use our CRM, ERP, or other business management services, we collect and process business-related data you input into our systems, including customer records, financial data, project information, and operational metrics.
2. How We Use Your Information
We use the information we collect for the following purposes:
- Provide Services: To deliver, maintain, and improve our products and services
- Account Management: To create and manage your account, authenticate users, and provide customer support
- Communications: To send you service updates, technical notices, security alerts, and administrative messages
- Marketing: To send promotional materials, newsletters, and information about products and services (with your consent)
- Personalization: To customize your experience and provide personalized content and recommendations
- Analytics: To analyze usage patterns, monitor trends, and improve our website and services
- Security: To detect, prevent, and address fraud, security issues, and technical problems
- Legal Compliance: To comply with legal obligations, enforce our terms, and protect our rights
- Research and Development: To develop new products, features, and services
- Business Operations: To conduct business planning, reporting, and operational management
3. How We Share Your Information
We may share your information in the following circumstances:
Service Providers
We share information with third-party vendors, consultants, and service providers who perform services on our behalf, such as:
- Cloud hosting providers (AWS, Azure, Google Cloud)
- Payment processors and financial institutions
- Email and communication service providers
- Analytics and monitoring tools (Google Analytics, Dynatrace)
- Customer support platforms
- Marketing automation tools
These service providers are contractually obligated to protect your information and use it only for the purposes we specify.
Business Transfers
If we are involved in a merger, acquisition, asset sale, or bankruptcy, your information may be transferred as part of that transaction. We will notify you of any such change.
Legal Requirements
We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., court orders, subpoenas, government investigations).
Protection of Rights
We may disclose information to protect and defend our rights, property, or safety, or that of our users or the public, as required or permitted by law.
With Your Consent
We may share your information with third parties when we have your explicit consent to do so.
4. Data Security
We implement industry-standard security measures to protect your personal information:
- Encryption: Data in transit is encrypted using TLS/SSL protocols; data at rest is encrypted using AES-256
- Access Controls: Role-based access controls and multi-factor authentication for system access
- Security Monitoring: 24/7 monitoring for security threats and anomalous activities
- Regular Audits: Periodic security assessments and penetration testing
- Compliance Certifications: ISO 27001 and SOC 2 Type II certified
- Incident Response: Documented procedures for data breach notification and response
- Employee Training: Regular security awareness training for all staff
- Secure Development: Security-by-design principles in software development
However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.
5. Data Retention
We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.
- Account Data: Retained for the duration of your account plus 90 days after closure
- Business Data: Retained per your service agreement, typically 7 years for financial records
- Marketing Data: Retained until you unsubscribe or withdraw consent
- Analytics Data: Anonymized data may be retained indefinitely for statistical purposes
- Legal Obligations: Some data may be retained longer to comply with legal, tax, or regulatory requirements
6. Your Privacy Rights
Depending on your location, you may have the following rights regarding your personal information:
- Access — Request a copy of the personal information we hold about you
- Correction — Request correction of inaccurate or incomplete information
- Deletion — Request deletion of your personal information (subject to legal obligations)
- Portability — Request transfer of your data to another service provider in a machine-readable format
- Restriction — Request restriction of processing your personal information
- Objection — Object to processing of your personal information for certain purposes
- Withdraw Consent — Withdraw previously given consent at any time
- Opt-Out — Opt-out of marketing communications and data sales
To exercise these rights, please contact us at privacy@tenthmatrix.com. We will respond to your request within 30 days.
7. GDPR Compliance (European Users)
If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):
- Legal Basis: We process your data based on consent, contract performance, legitimate interests, or legal obligations
- Data Protection Officer: You can contact our DPO at dpo@tenthmatrix.com
- International Transfers: We use Standard Contractual Clauses approved by the European Commission for data transfers
- Right to Lodge Complaint: You can file a complaint with your local data protection authority
- Automated Decision Making: We do not use solely automated decision-making with legal effects
8. CCPA Compliance (California Residents)
If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA):
- Right to Know: Request disclosure of personal information collected, used, and shared
- Right to Delete: Request deletion of your personal information
- Right to Opt-Out: Opt-out of the sale of your personal information (we do not sell personal information)
- Right to Non-Discrimination: We will not discriminate against you for exercising your rights
- Authorized Agent: You may designate an authorized agent to make requests on your behalf
To exercise your CCPA rights, call us at +44 7515 356 146 or email privacy@tenthmatrix.com
9. International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws different from your jurisdiction.
- Standard Contractual Clauses (SCCs) approved by the European Commission
- Privacy Shield Framework (where applicable)
- Binding Corporate Rules (BCRs)
- Explicit consent for transfers where required
- Adequacy decisions by relevant authorities
10. Children's Privacy
Our services are not intended for individuals under the age of 16. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately. We will delete such information from our systems.
11. Third-Party Websites and Services
Our website may contain links to third-party websites, applications, and services. We are not responsible for the privacy practices of these third parties. We encourage you to read their privacy policies before providing any information to them.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by:
- Posting the updated policy on our website with a new "Last Updated" date
- Sending an email notification to registered users
- Displaying a prominent notice on our website
- Requiring acceptance for continued use of services (for material changes)
We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.
13. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
- Data Protection Officer
- dpo@tenthmatrix.com
- Phone
- +44 7515 356 146
- TenthMatrix, Data Protection Team, 77-79 Marlowes, Hemel Hempstead, Hertfordshire HP1 1LF, United Kingdom