Privacy Policy

Last updated: October 05, 2026

1. Introduction

This Privacy Policy describes how Timspark LTD, including but not limited to the company itself, its owners, directors, employees and contractors, (altogether hereinafter referred to as “Timspark”, “Company”, “we”, “us”, or “our”) collects, uses, discloses, and protects personal data when users (hereinafter “you”) access or use our website, products, and services (collectively, the “Services”).

We are committed to safeguarding your privacy and processing personal data in line with internationally recognized data protection principles, widely accepted industry standards, and applicable privacy and data protection laws.

By using our Services, you agree to the terms of this Privacy Policy.

2. Data Controller

The data controller responsible for your personal data is:

Timspark LTD
6 St Davids Square, London, United Kingdom, E14 3WA, contact@timspark.com

3. Information We Collect

3.1 Information You Provide

We collect personal data that you voluntarily provide, including:

• • Full name
  • Email address
  • Phone number
  • Company name
  • Any other information submitted via forms (e.g., contact/demo requests)

3.2 Automatically Collected Data

When you use our website, we may automatically collect certain technical and usage information, including:

• IP address
• Device and browser type
• Domain names
• Language preferences
• Approximate location
• Operating system
• Pages visited and session duration
• Referrer URLs
• Website interaction and browsing data
• Cookie and similar technology identifiers

The data collected depends on your consent choices and the technologies enabled on the website.

3.3 Data from Third Parties

We may receive data from third-party services such as:

• • Analytics providers (e.g., Google Analytics)
  • Marketing platforms (e.g., LinkedIn, CRM tools)
  • Customer engagement tools

4. Legal Bases for Processing Personal Data

We process personal data based on one or more of the following legal grounds, depending on the nature of the data and the purposes for which it is used:

• • Consent
    We process personal data where you have given your clear and informed consent for specific purposes. This includes, for example, sending marketing communications, newsletters, or placing non-essential cookies on your device. You have the right to withdraw your consent at any time by messaging us without affecting the lawfulness of processing carried out before such withdrawal.

• • Performance of a Contract
    We process personal data where it is necessary to enter into or perform a contract with you (for example, non-disclosure agreement or software development agreement, etc.). This includes responding to your inquiries, providing requested services, managing accounts, and fulfilling our contractual obligations.
  • Legitimate Interests
    We process personal data based on our legitimate interests where such processing is necessary for the operation, improvement, and security of our Services, provided that these interests are not overridden by your fundamental rights and freedoms. We carefully assess and balance our interests against your privacy rights and implement appropriate safeguards to minimize any impact.
  • Legal Obligations
    We process personal data where necessary to comply with applicable legal or regulatory obligations, including responding to lawful requests from public authorities, enforcing legal claims, and meeting compliance or reporting requirements.

5. How We Use Your Information

5.1. Purposes:

We use personal data to:

• • Provide and operate our Services
  • Respond to inquiries and requests
  • Improve website performance and user experience
  • Send marketing communications (with consent)
  • Ensure security and prevent fraud
  • Comply with legal obligations

5.2. Third-Party Sources

Timspark uses third-party services, including HubSpot, Microsoft Clarity, Google Analytics, LinkedIn, Google Tag Manager (GTM), Google reCAPTCHA, YouTube, and Bing to improve the Services’ functionality and user experience. These services help us track user engagement, analyze visitor data, and monitor site performance. Information from these sources is used to understand user behavior, administer the Website, and enhance our services.

6. Cookies

We use cookies and similar technologies to operate our website, remember certain preferences, understand how visitors use the website, and, where consent is provided, support analytics and marketing activities.

We use a consent management platform to manage these technologies. When you first visit the website, you can accept non-essential cookies, reject them, or manage your preferences. You can change or withdraw your consent at any time through the cookie preferences available on the website.

We use the following general categories of cookies and similar technologies:

• • Necessary and functional technologies: required for the website to operate securely and provide requested functionality, including certain security, consent-management, form, and session technologies.
  • Statistics technologies: used, with your consent where required, to understand how visitors use the website and to improve its performance and content. These may include Google Analytics and Microsoft Clarity.
  • Marketing technologies: used, with your consent, to measure marketing activities and understand interactions with our campaigns. These may include LinkedIn and Microsoft Advertising technologies.

Third-party content, such as embedded YouTube videos, may also use cookies or similar technologies and may be blocked until the relevant consent is provided.

Our cookie settings, categories, providers, purposes and retention periods are described in our Cookie Policy. The Cookie Policy is maintained through our consent management system and may be updated as the technologies used on the website change.

You can manage your cookie preferences at any time through the cookie settings available on the website.

7. Sharing of Information

We may share your personal data with:

• • Employees and contractors (on a need-to-know basis)
  • Service providers (e.g., hosting, analytics, CRM tools)
  • Legal authorities when required

We do not sell personal data.

8. International Data Transfers

Your data may be transferred outside your country, including to countries that may not provide the same level of data protection. In these cases, we ensure appropriate safeguards such as:

• • Standard Contractual Clauses (SCCs)
  • Data Processing Agreements (DPAs)

9. Data Retention

We retain personal data only as long as necessary for:

• • Business purposes
  • Legal obligations
  • Dispute resolution

When no longer needed, data is securely deleted or anonymized.

10. Your Rights

10.1. If you are in the EU/EEA, you have the right to:

• • Access your personal data
  • Correct inaccurate data
  • Delete your data (“right to be forgotten”)
  • Restrict processing
  • Data portability
  • Object to processing
  • Withdraw consent

You may also lodge a complaint with a supervisory authority.

10.2. If you are a California resident, you have the right to:

• • Know what personal data we collect
  • Request access to your data
  • Request deletion of your data
  • Opt out of sale or sharing of personal data
  • Non-discrimination for exercising your rights

11. Data Security

We take the security of your personal data very seriously and implement appropriate technical, administrative, and organizational measures to protect it from unauthorized access, disclosure, alteration, or destruction. These measures include, but are not limited to:

11.1. Access Controls

• • Personal data is accessible only to authorized employees, contractors, and service providers on a need-to-know basis.
  • Strong authentication and role-based access are used to prevent unauthorized access.

11.2. Encryption

• • Personal data is encrypted in transit using industry-standard protocols (e.g., TLS/SSL).
  • Where appropriate, data at rest is also encrypted to reduce the risk of exposure in case of system compromise.

11.3. Network and System Security

• • Firewalls, intrusion detection and prevention systems, and secure network architecture are in place to protect our systems.
  • Regular vulnerability scanning and security assessments are conducted.

11.4. Data Minimization and Pseudonymization

• • We limit the collection of personal data to what is necessary for the intended purposes.
  • Where feasible, personal data is pseudonymized to reduce the risk of identifying individuals.

11.5. Monitoring and Incident Response

• • Our systems are continuously monitored for security threats.
  • In the event of a data breach, we have established procedures for immediate response, mitigation, and notification in accordance with applicable laws.

11.6. Vendor and Third-Party Security

• • We ensure that all third-party service providers who process personal data on our behalf implement appropriate security measures.
  • Data Processing Agreements or Standard Contractual Clauses are used where required.

11.7. Employee Training and Awareness

• • All employees and contractors handling personal data receive regular training on data protection and security best practices.

Despite these measures, no system can be completely secure. We encourage you to take precautions when using our Services and report any suspected security incidents promptly.

12. Children’s Privacy

Our Services are not intended for individuals under 18 (or the applicable age). We do not knowingly collect personal data from children.

13. Third-Party Links

Our Services may contain links to third-party websites. We are not responsible for their privacy practices.

14. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date.

15. Contact Us

If you have questions or wish to exercise your rights, please contact us: contact@timspark.com