Privacy Policy

Last updated: April 08, 2026

1. Introduction

This Privacy Policy describes how Timspark LTD, including but not limited to the company itself, its owners, directors, employees and contractors, (altogether hereinafter referred to as “Timspark”, “Company”, “we”, “us”, or “our”) collects, uses, discloses, and protects personal data when users (hereinafter “you”) access or use our website, products, and services (collectively, the “Services”).

We are committed to safeguarding your privacy and processing personal data in line with internationally recognized data protection principles, widely accepted industry standards, and applicable privacy and data protection laws.

By using our Services, you agree to the terms of this Privacy Policy.

2. Data Controller

The data controller responsible for your personal data is:

Timspark LTD
6 St Davids Square, London, United Kingdom, E14 3WA, marketing@timspark.com

3. Information We Collect

3.1 Information You Provide

We collect personal data that you voluntarily provide, including:

    • Full name
    • Email address
    • Phone number
    • Company name
    • Any other information submitted via forms (e.g., contact/demo requests)

3.2 Automatically Collected Data

We automatically collect certain non-personally Identifiable technical and usage data:

    • IP address
    • Device and browser type
    • Domain names
    • Language preferences
    • Location
    • Operating system
    • Pages visited, session duration
    • Referrer URLs and interaction data, etc.

3.3 Data from Third Parties

We may receive data from third-party services such as:

    • Analytics providers (e.g., Google Analytics)
    • Marketing platforms (e.g., LinkedIn, CRM tools)
    • Customer engagement tools

4. Legal Bases for Processing Personal Data

We process personal data based on one or more of the following legal grounds, depending on the nature of the data and the purposes for which it is used:

    • Consent
      We process personal data where you have given your clear and informed consent for specific purposes. This includes, for example, sending marketing communications, newsletters, or placing non-essential cookies on your device. You have the right to withdraw your consent at any time by messaging us without affecting the lawfulness of processing carried out before such withdrawal.
    • Performance of a Contract
      We process personal data where it is necessary to enter into or perform a contract with you (for example, non-disclosure agreement or software development agreement, etc.). This includes responding to your inquiries, providing requested services, managing accounts, and fulfilling our contractual obligations.
    • Legitimate Interests
      We process personal data based on our legitimate interests where such processing is necessary for the operation, improvement, and security of our Services, provided that these interests are not overridden by your fundamental rights and freedoms. We carefully assess and balance our interests against your privacy rights and implement appropriate safeguards to minimize any impact.
    • Legal Obligations
      We process personal data where necessary to comply with applicable legal or regulatory obligations, including responding to lawful requests from public authorities, enforcing legal claims, and meeting compliance or reporting requirements.

5. How We Use Your Information

5.1. Purposes:

We use personal data to:

    • Provide and operate our Services
    • Respond to inquiries and requests
    • Improve website performance and user experience
    • Send marketing communications (with consent)
    • Ensure security and prevent fraud
    • Comply with legal obligations

5.2. Third-Party Sources

Timspark uses third-party services, including HubSpot, Microsoft Clarity, Google Analytics, LinkedIn, Google Tag Manager (GTM), Google reCAPTCHA, and Bing to improve Services’ functionality and user experience. These services help us track user engagement, analyze visitor data, and monitor site performance. Information from these sources is used to understand user behavior, administer the Website, and enhance our services.

6. Cookies

We use cookies and similar technologies to enhance user experience. By clicking “Accept” on our pop-up menu, you agree to our use of cookies. Cookies are small files that are placed on your device to store information, such as user preferences and the pages accessed on the website. This information helps us optimize your experience by customizing website content based on your preferences and browser type.

Types of Cookies:

    • Necessary Cookies: These cookies are essential for the functioning of the website and cannot be disabled in our systems. They are used to provide basic functions such as security, page navigation, and ensuring the website performs optimally. Examples include cookies from Google reCAPTCHA, HubSpot, Microsoft Clarity, and others.
    • Preferences Cookies: These cookies allow the website to remember your preferences, such as your language or region. Examples include cookies from LinkedIn.
    • Analytics Cookies: These cookies help us understand how visitors interact with our website by collecting and reporting data. They are used to measure website performance and improve content. Examples include cookies from Google Analytics, Microsoft Clarity, and LinkedIn.
    • Marketing Cookies: These cookies are used to track visitors across websites and display relevant advertisements. They help us deliver targeted marketing content. Examples include cookies from LinkedIn, Bing, and Microsoft Clarity.

You can manage cookies via browser settings or consent banner. Please note that disabling cookies may affect the functionality of the Website.

7. Sharing of Information

We may share your personal data with:

    • Employees and contractors (on a need-to-know basis)
    • Service providers (e.g., hosting, analytics, CRM tools)
    • Legal authorities when required

We do not sell personal data.

8. International Data Transfers

Your data may be transferred outside your country, including to countries that may not provide the same level of data protection. In these cases we ensure appropriate safeguards such as:

    • Standard Contractual Clauses (SCCs)
    • Data Processing Agreements (DPAs)

9. Data Retention

We retain personal data only as long as necessary for:

    • Business purposes
    • Legal obligations
    • Dispute resolution

When no longer needed, data is securely deleted or anonymized.

10. Your Rights

10.1. If you are in the EU/EEA, you have the right to:

    • Access your personal data
    • Correct inaccurate data
    • Delete your data (“right to be forgotten”)
    • Restrict processing
    • Data portability
    • Object to processing
    • Withdraw consent

You may also lodge a complaint with a supervisory authority.

10.2. If you are a California resident, you have the right to:

    • Know what personal data we collect
    • Request access to your data
    • Request deletion of your data
    • Opt out of sale or sharing of personal data
    • Non-discrimination for exercising your rights

11. Data Security

We take the security of your personal data very seriously and implement appropriate technical, administrative, and organizational measures to protect it from unauthorized access, disclosure, alteration, or destruction. These measures include, but are not limited to:

11.1. Access Controls

    • Personal data is accessible only to authorized employees, contractors, and service providers on a need-to-know basis.
    • Strong authentication and role-based access are used to prevent unauthorized access.

11.2. Encryption

    • Personal data is encrypted in transit using industry-standard protocols (e.g., TLS/SSL).
    • Where appropriate, data at rest is also encrypted to reduce the risk of exposure in case of system compromise.

11.3. Network and System Security

    • Firewalls, intrusion detection and prevention systems, and secure network architecture are in place to protect our systems.
    • Regular vulnerability scanning and security assessments are conducted.

11.4. Data Minimization and Pseudonymization

    • We limit the collection of personal data to what is necessary for the intended purposes.
    • Where feasible, personal data is pseudonymized to reduce the risk of identifying individuals.

11.5. Monitoring and Incident Response

    • Our systems are continuously monitored for security threats.
    • In the event of a data breach, we have established procedures for immediate response, mitigation, and notification in accordance with applicable laws.

11.6. Vendor and Third-Party Security

    • We ensure that all third-party service providers who process personal data on our behalf implement appropriate security measures.
    • Data Processing Agreements or Standard Contractual Clauses are used where required.

11.7. Employee Training and Awareness

    • All employees and contractors handling personal data receive regular training on data protection and security best practices.

Despite these measures, no system can be completely secure. We encourage you to take precautions when using our Services and report any suspected security incidents promptly.

12. Children’s Privacy

Our Services are not intended for individuals under 18 (or applicable age). We do not knowingly collect personal data from children.

13. Third-Party Links

Our Services may contain links to third-party websites. We are not responsible for their privacy practices.

14. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date.

15. Contact Us

If you have questions or wish to exercise your rights, please contact us: marketing@timspark.com