Privacy Policy

Who this applies to

This policy applies to individuals who browse tizno.systems, submit contact or briefing requests, email our teams (including security and procurement enquiries), or otherwise interact with website-hosted forms and content. It is intended to be read alongside our Terms of Use.

Data controller

TiZNO, operating in connection with Gibraltar, determines the purposes and means of processing personal data described here. For privacy-specific requests, contact privacy@tizno.systems.

Categories of personal data

Depending on how you interact with us, we may process:

• Contact and enquiry data — information you provide in contact forms, briefing requests, or direct email (for example name, work email, organisation, role, telephone number, and the content of your message).
• Security and procurement correspondence — details submitted when you request documentation packs, vendor materials, or security information (including identifiers needed to respond and message content).
• Technical and usage data — basic analytics and similar telemetry that help us understand aggregate traffic patterns (for example page views, approximate geography at region level, device/browser type, and referral source), where such tools are enabled.
• Server and security logs — standard web server and infrastructure logs (for example IP address, timestamps, request path, HTTP status, and user agent string) used for security monitoring, troubleshooting, and abuse prevention.
• Cookies and similar technologies — where used, limited to operating the site, remembering preferences, or measuring site performance; any non-essential cookies will be described in an updated notice if introduced.

Purposes and lawful bases

We process personal data for the following purposes, as permitted under applicable law (including the Gibraltar GDPR and, where relevant, the UK GDPR):

• Responding to enquiries — to answer contact form submissions, email requests, and procurement or security pack requests. Lawful bases may include contract (steps prior to a contract), legitimate interests in managing commercial correspondence, or consent where we rely on it for a specific channel.
• Website operation and improvement — to deliver pages, maintain reliability, and understand aggregate usage. Typically legitimate interests in operating a secure public site, balanced against your rights.
• Security and compliance — to detect abuse, protect systems, and meet legal obligations. Lawful bases may include legitimate interests and legal obligation where applicable.

Procurement and security pack requests

Information you provide when requesting security, procurement, or compliance materials is used only to respond to that business inquiry, to verify eligibility where appropriate, and to maintain a proportionate record of correspondence. It is not used for unrelated marketing unless you separately agree.

Sale of personal data

TiZNO does not sell personal data collected through this website.

Recipients and processors

We use a limited set of service providers (for example hosting, email delivery, and analytics) to operate the site. They process data on our instructions and under contractual terms that require appropriate confidentiality and security measures.

International transfers

Some infrastructure or service providers may process data outside Gibraltar or the European Economic Area. Where required, we implement appropriate safeguards—such as standard contractual clauses approved by the relevant authorities or equivalent mechanisms—and assess transfer risk in line with applicable law.

Retention

We retain personal data only as long as necessary for the purposes above, including to resolve disputes, maintain security logs for a defined period, and satisfy legal or professional retention requirements. Retention periods vary by data category and are reviewed periodically.

Security

We apply administrative, technical, and organisational measures appropriate to the nature of the website and the data processed—for example access controls on systems, encryption in transit where supported, and monitoring of infrastructure. No online transmission or storage method is completely secure; we work to reduce risk in a manner proportionate to the TiZNO public web presence.

Your rights

Subject to applicable law (including the Gibraltar GDPR / UK GDPR), you may have rights to access, rectify, erase, restrict, or object to certain processing, and to data portability where processing is based on consent or contract. You may also lodge a complaint with a supervisory authority. To exercise these rights in connection with this website, contact privacy@tizno.systems. We will respond within the timeframes required by law.

Third-party sites

This site may link to third-party websites or services. Their privacy practices are governed by their own policies; we are not responsible for their content or handling of personal data.

Children

The website is directed at institutional and professional audiences. We do not knowingly collect personal data from children.

Changes

We may update this policy to reflect operational, legal, or regulatory changes. The “Last updated” date at the top of this page will be revised when material changes are made.