Privacy Policy
Last updated: 1 April 2026
1. Who We Are #
This privacy policy explains how Quimera Technology Limited, trading as The Tech Factory, collects, uses, stores and protects your personal data.
Data Controller: Quimera Technology Limited
Company Number: 06648284 (England & Wales)
Registered Office: Chestnut Field House, Chestnut Field, Rugby, Warwickshire, CV21 2PD
Email: adam@thetechfactory.co.uk
Telephone: +44 (0)1788 550000
2. What Data We Collect #
We may collect and process the following personal data:
- Identity data: your name and job title
- Contact data: your email address, telephone number, postal address and company name
- Communications data: the content of emails, messages and other correspondence with us
- Technical data: IP address, browser type, operating system and other technical information collected automatically when you visit our website
- Usage data: information about how you use our website, including pages visited and time spent
- Service data: information provided in the course of delivering our services, including technical configurations, system access credentials (where required) and project documentation
3. How We Collect Your Data #
We collect personal data through the following means:
- Directly from you: when you fill in our contact form, send us an email, call us or engage us to provide services
- From your employer or organization: where your employer engages us to provide services and provides your contact details
- Automatically: through your interactions with our website, using standard web server logs and, where you have given consent, cookies
4. How We Use Your Data #
We process your personal data for the following purposes:
- To respond to your enquiries and provide the information you request
- To deliver the services you or your organization have engaged us to provide
- To manage our relationship with you, including sending service updates and invoices
- To comply with legal and regulatory obligations
- To protect our legitimate business interests, including improving our services and maintaining security
5. Lawful Basis for Processing #
Under the UK GDPR, we rely on the following lawful bases for processing your personal data:
- Contract: where processing is necessary for the performance of a contract with you or to take steps at your request prior to entering into a contract
- Legitimate interests: where processing is necessary for our legitimate business interests (such as responding to enquiries, improving our services and marketing), provided those interests do not override your fundamental rights and freedoms
- Legal obligation: where we are required to process your data to comply with a legal obligation
- Consent: where you have given clear consent for us to process your personal data for a specific purpose (such as marketing communications), which you may withdraw at any time
6. Data Sharing #
We do not sell your personal data to third parties. We may share your data with:
- Service providers: trusted third-party providers who assist us in delivering our services (such as cloud hosting providers, email platforms and accounting software), who are contractually obligated to protect your data
- Professional advisers: our accountants, lawyers and insurers where necessary
- Legal authorities: where we are required to do so by law, regulation or court order
Where we share data with third-party processors, we ensure appropriate data processing agreements are in place and that they provide an adequate level of protection for your data.
7. International Transfers #
We primarily store and process your data within the United Kingdom and the European Economic Area. Where data is transferred outside the UK or EEA, we ensure that appropriate safeguards are in place, such as standard contractual clauses approved by the Information Commissioner’s Office (ICO) or an adequacy decision.
8. Data Retention #
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting or reporting requirements. Our general retention periods are:
- Enquiry data: 2 years from last contact, unless an engagement follows
- Client data: 6 years from the end of the engagement (in line with HMRC requirements and limitation periods)
- Website usage data: 12 months
At the end of the retention period, your data will be securely deleted or anonymised.
9. Your Rights #
Under the UK GDPR, you have the following rights in relation to your personal data:
- Right of access: you can request a copy of the personal data we hold about you
- Right to rectification: you can ask us to correct inaccurate or incomplete data
- Right to erasure: you can ask us to delete your personal data in certain circumstances
- Right to restriction: you can ask us to restrict the processing of your data in certain circumstances
- Right to data portability: you can request that we transfer your data to another organization in a machine-readable format
- Right to object: you can object to processing based on legitimate interests or for direct marketing purposes
- Right to withdraw consent: where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal
To exercise any of these rights, please contact us at adam@thetechfactory.co.uk. We will respond within one month of receiving your request.
10. Cookies #
Our website uses essential cookies that are necessary for the website to function. We do not currently use analytics or advertising cookies. If this changes, we will update this policy and provide you with clear information and the ability to manage your preferences.
11. Security #
We take the security of your personal data seriously and implement appropriate technical and organizational measures to protect it against unauthorized access, alteration, disclosure or destruction. These measures include encryption of data in transit, access controls, regular security reviews and staff training.
12. Complaints #
If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO):
Information Commissioner’s Office
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Website: ico.org.uk
Telephone: 0303 123 1113
We would appreciate the opportunity to address any concerns before you contact the ICO. Please reach out to us first at adam@thetechfactory.co.uk.
13. Changes to This Policy #
We may update this privacy policy from time to time. Any significant changes will be communicated via our website. We encourage you to review this page periodically. The “last updated” date at the top of this policy indicates when it was last revised.
If you have any questions about this privacy policy or how we handle your personal data, please contact us:
Quimera Technology Limited (trading as The Tech Factory)
Chestnut Field House, Chestnut Field, Rugby, Warwickshire, CV21 2PD
Email: adam@thetechfactory.co.uk
Telephone: +44 (0)1788 550000
Company number: 06648284 (England & Wales)