Privacy Policy
Last updated: 28 July 2026
This privacy policy explains how TDH Innovation Ltd collects, uses, and protects your personal data when you visit our website or get in touch with us. We are committed to handling your data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who we are
TDH Innovation Ltd is the “data controller” responsible for your personal data.
- Company: TDH Innovation Ltd
- Registered in England & Wales, company number: 16448849
- Registered office: 34 Blossom Lane, Berkeley, Gloucestershire, England, GL13 9FW
- Contact for privacy matters: hello@tdh-innovations.com
If you have any questions about this policy or how we handle your data, please contact us using the details above.
2. The information we collect
Information you give us. When you complete a form on our website (for example a contact, enquiry, or demo request form), we collect the information you choose to submit. This typically includes your name, email address, and any other details you provide, such as your company name, phone number, or the content of your message.
Our forms are built with Gravity Forms. When you submit a form, your submission is stored as an entry in our website database and is also sent to us by email so we can respond to you.
Information we collect automatically. When you visit the site, our server automatically logs limited technical information, such as your IP address and browser type, as part of normal, secure website operation.
Our forms are protected by Cloudflare Turnstile, which performs a background check to distinguish real visitors from automated bots. Turnstile assesses technical signals from your browser to do this. It does not use cookies for advertising or cross-site tracking.
Analytics. We use Google Analytics 4 to understand how people use our website, so we can improve it. This is only activated if you consent to statistics cookies — if you decline, no analytics data is collected and no analytics cookies are set. Where consent is given, Google Analytics collects information such as the pages you view, how long you spend on the site, your approximate location, and your device and browser type. IP addresses are anonymised by Google Analytics 4 by design and are not stored or made available to us. You can withdraw your consent at any time using the cookie settings link on this website.
We do not knowingly collect any special category data (such as health, ethnicity, or political opinions) through this website, and we ask that you do not submit such information through our forms.
3. How we use your information and our legal basis
Under UK GDPR we must have a lawful basis for processing your data. The table below sets out what we use your data for and why.
| What we use it for | Lawful basis |
|---|---|
| Responding to your enquiries and providing information you’ve requested | Legitimate interests (to respond to people who contact us) and/or steps prior to entering a contract |
| Sending you a demo or follow-up about our products, where you’ve asked for this | Legitimate interests, or consent where required |
| Operating and securing the website | Legitimate interests (running a safe, functional website) |
| Protecting our forms from spam and abuse | Legitimate interests (preventing bot and spam submissions) |
| Understanding how the website is used, using analytics cookies | Consent (you can withdraw this at any time) |
| Meeting our legal and regulatory obligations | Legal obligation |
Where we rely on legitimate interests, we’ve considered whether those interests are overridden by your rights, and we believe our use is reasonable and expected. Where we rely on consent, you can withdraw it at any time.
4. Cookies
We use a small number of cookies and similar technologies. When you first visit the site you’ll see a cookie banner asking for your choices. Nothing beyond the essential and functional cookies below is placed unless you consent.
- Essential and functional cookies — needed to keep the site secure and working correctly, and to remember your cookie preferences so we don’t ask you again on every page. These are placed without consent because the site cannot function properly without them.
- Statistics cookies (Google Analytics) — used to understand how visitors use the site. These are only placed if you consent to statistics cookies, and are blocked entirely until you do.
- Cloudflare Turnstile — used on our forms to tell real visitors apart from automated bots. Turnstile may store a short-lived token in your browser to avoid re-checking you unnecessarily. It is not used for advertising or cross-site tracking.
We do not use advertising or cross-site tracking cookies on this website.
You can change or withdraw your consent at any time using the cookie settings link on this website, and you can also manage or delete cookies through your browser settings. Please note that blocking essential cookies or Turnstile may stop parts of the site — including our forms — from working. A full list of the cookies we use is available in our Cookie Policy.
5. Who we share your information with
We do not sell your personal data. We share it only with trusted service providers (“data processors”) who help us run our business, and only as far as necessary. These are:
- Krystal Hosting — our website hosting provider, which stores the website and its database (including Gravity Forms entries). Data is hosted in the UK.
- Resend — used to deliver transactional and notification emails sent from the website.
- Microsoft — provides our business email, through which we receive and respond to your enquiries.
- Google — provides Google Analytics, used only where you have consented to statistics cookies. We have accepted Google’s Data Processing Terms, and we have disabled the setting that would allow Google to use our analytics data to improve its own products and services.
- Cloudflare — provides Turnstile, used to protect our forms from spam and automated abuse.
We may also disclose your information where required by law, to enforce our terms, or to protect our rights, property, or safety.
6. International data transfers
Our website and its database are hosted in the UK. Some of our service providers are based outside the UK, or may process data outside the UK, and this includes Google, Cloudflare, Microsoft, and Resend.
Where personal data is transferred outside the UK, we make sure appropriate safeguards are in place so that your data receives an equivalent level of protection. Depending on the provider, this is achieved through a UK adequacy decision, the International Data Transfer Agreement (IDTA), or the UK Addendum to the EU Standard Contractual Clauses. For Google Analytics specifically, transfers are covered by the Google Ads Data Processing Terms, which incorporate the UK Addendum to the Standard Contractual Clauses.
7. How long we keep your information
We keep your personal data only for as long as necessary for the purposes described above.
- Enquiry and form data: kept for [RETENTION PERIOD, e.g. 24 months] after your last contact with us, then deleted or anonymised, unless we need it longer for legal or accounting reasons.
- Analytics data: retained by Google Analytics for [ANALYTICS RETENTION, e.g. 14 months] from your last visit, after which it is automatically deleted. Analytics data is aggregated and does not identify you personally.
- Cookie consent records: your cookie preferences are stored in your browser for up to 12 months, after which you will be asked again.
When data is no longer needed, we securely delete or anonymise it.
8. How we protect your information
We take appropriate technical and organisational measures to protect your data against unauthorised access, loss, or misuse. These include secure hosting, encrypted connections (HTTPS), access controls, and keeping our software up to date. No system is completely secure, but we work to protect your data at all times.
9. Your rights
Under UK GDPR you have the right to:
- Access the personal data we hold about you.
- Rectification of inaccurate or incomplete data.
- Erasure of your data in certain circumstances (“right to be forgotten”).
- Restrict or object to our processing in certain circumstances.
- Data portability — receive your data in a portable format.
- Withdraw consent at any time, where we rely on consent. For analytics cookies, you can do this using the cookie settings link on this website.
To exercise any of these rights, contact us at hello@tdh-innovations.com. We’ll respond within one month. There’s normally no charge, and we may need to verify your identity first.
10. Complaints
If you’re unhappy with how we’ve handled your data, we’d like the chance to put it right, so please contact us first. You also have the right to complain to the Information Commissioner’s Office (ICO):
- Website: ico.org.uk
- Helpline: 0303 123 1113
11. Changes to this policy
We may update this policy from time to time. Any changes will be posted on this page with a revised “last updated” date. Please check back periodically.
12. Contact us
For any questions about this policy or your personal data:
TDH Innovation Ltd
Registered in England & Wales, company number 16448849
34 Blossom Lane, Berkeley, Gloucestershire, England, GL13 9FW
Email: hello@tdh-innovations.com