Privacy notice

1. Who we are

This notice is issued by TAYPRA LTD (company number 17288662), registered office at Pilgrim House, Oxford Place, Plymouth, PL1 5AJ. We are registered in England and Wales. References to "Taypra", "we", "us", or "our" mean TAYPRA LTD.

We are the controller of personal data described in this notice. You can contact us at ian@taypra.com.

2. What data we collect and why

We collect personal data in the following circumstances:

• Registration enquiries. When you submit the contact form on our website we collect your name, employer name, Companies House number (optional), what your firm delivers, regions, whether your firm currently bids for contracts, and your work email address. We use this to prepare a tailored opportunity view and to contact you before any call. The legal basis is our legitimate interests in responding to business enquiries (Article 6(1)(f) UK GDPR).
• Member accounts. If you become a Taypra member we collect and process additional data necessary to provide the service, including bid documents, evidence records, and usage data. This is governed by a separate data processing agreement and service terms agreed at onboarding.
• Website usage. Our server may log your IP address and browser type in standard access logs; these are retained for up to 30 days for security purposes.
• Marketing site analytics. This marketing website uses PostHog to understand how visitors use it. PostHog records page views, referrer, approximate country derived from IP address, device and browser type, session duration, scroll depth, and named interactions such as clicking a navigation link or a call to action. We do not record session replays, and we do not send PostHog anything entered into the contact form. When you submit the form we record only that a submission happened, with no name, email address or free text attached. PostHog data is processed and held in the European Union on PostHog's EU infrastructure. The legal basis is our legitimate interests in understanding and improving our own marketing site (Article 6(1)(f) UK GDPR).
• PostHog does not run on the product. PostHog is loaded on this marketing website only. It is not present on the Taypra product at app.taypra.com, so it never sees member tender packs, evidence records or drafted answers.

3. How long we keep your data

Registration enquiry data is kept for up to 24 months from the date of submission, unless you become a member (in which case member service terms apply) or you ask us to delete it sooner.

4. Who we share your data with

We do not sell your personal data. The following providers receive data when they help us operate the website and service:

• Email delivery (Resend Inc.), to send you and us notifications from the contact form. Data is processed in the EU/US under standard contractual clauses.
• Hosting and infrastructure, data is stored in London data centres.
• Marketing site analytics (PostHog), processing in the European Union. Used on this marketing website only, not on the product.
• Certification badge (Blockmark), whose embedded footer badge receives standard web request data, including your IP address, browser information and the page you visited. The badge is used on this marketing website only.

We will disclose data to law enforcement or regulators where required by law. We will notify you if legally permitted to do so.

5. International transfers

If your data is transferred outside the UK or EEA we ensure appropriate safeguards are in place, typically UK International Data Transfer Agreements or standard contractual clauses approved by the ICO.

6. Your rights

Under UK GDPR you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request erasure where we have no lawful reason to retain it
• Object to processing based on legitimate interests
• Restrict processing in certain circumstances
• Data portability where processing is automated and based on consent or contract

To exercise any of these rights, email ian@taypra.com. We will respond within one calendar month.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

7. Cookies

Our marketing website sets functionally necessary cookies and the analytics cookies used by PostHog, described in section 2. The Cyber Essentials badge is embedded third-party content from Blockmark, which may use its own cookies or similar browser storage. We do not use cookies for advertising or remarketing. PostHog and the Blockmark badge are not loaded on the product at app.taypra.com.

8. Changes to this notice

We may update this notice from time to time. The current version is always at taypra.com/privacy. We will notify members of material changes by email.