Written in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018

The short version

We collect your email address when you sign up for early access. We use it only to contact you about ticked. We do not sell it, share it with advertisers, or use it for anything else. You can ask us to delete it at any time by emailing privacy@getticked.co.uk.

1

Who we are

ticked is a supplier compliance platform operated by ticked Ltd ("we", "us", "our"). We are the data controller for personal data collected through this website.

Data controller: ticked Ltd, registered in England & Wales

Website: getticked.co.uk

Data protection contact: privacy@getticked.co.uk

ICO registration: We will register with the Information Commissioner's Office (ICO) prior to processing personal data at scale. Our registration number will be published here upon confirmation.

2

What data we collect and why

At this stage, this website is a pre-launch holding page. The only personal data we collect is your email address when you voluntarily submit it via the early access sign-up form.

We do not use cookies, tracking pixels, analytics scripts, or any other technology that collects data about your visit to this website. There is no cookie banner because there is nothing to consent to.

When the ticked platform launches, this policy will be updated to reflect the additional data we collect as part of the service. You will be notified of any material changes before they take effect.

3

Our lawful basis for processing

We rely on consent as our lawful basis under Article 6(1)(a) of UK GDPR. By submitting your email address via the early access form, you are providing clear, affirmative consent for us to contact you about the ticked platform.

You can withdraw your consent at any time by emailing privacy@getticked.co.uk or by clicking the unsubscribe link in any email we send you. Withdrawing consent does not affect the lawfulness of processing carried out before your withdrawal.

4

How we use your email address

We will use your email address only for the following purposes:

We will not send you unsolicited marketing, promotional content unrelated to ticked, or third-party offers of any kind.

5

Who we share your data with

We do not sell, rent, or trade your personal data. We may share it with the following categories of third-party service providers, strictly for the purposes described above:

We may disclose your data if required to do so by law, by court order, or by a regulatory authority - including the ICO.

6

Where your data is stored

We store personal data within the United Kingdom or European Economic Area (EEA). Where any third-party provider stores data outside the UK or EEA, we ensure that appropriate safeguards are in place - such as UK International Data Transfer Agreements (IDTAs) or EU Standard Contractual Clauses (SCCs) - in line with UK GDPR requirements.

7

How long we keep your data

We will retain your email address for as long as you remain on our early access list, or until you ask us to remove it - whichever comes first.

If you have not engaged with any communications from us within 24 months of signing up, we will delete your email address unless you have actively confirmed you wish to remain on the list.

Once the ticked platform launches, customers and users will be subject to a separate retention schedule, which will be set out in the platform privacy policy.

8

Your rights under UK GDPR

You have the following rights in relation to your personal data. We will respond to all valid requests within one calendar month.

Right of access

You can request a copy of the personal data we hold about you and information about how we use it.

Right to rectification

You can ask us to correct any personal data that is inaccurate or incomplete.

Right to erasure

You can ask us to delete your personal data. We will do so promptly unless we are required to retain it by law.

Right to restrict processing

You can ask us to pause processing your personal data in certain circumstances - for example, while you contest its accuracy.

Right to data portability

You can ask us to provide your personal data in a structured, commonly used and machine-readable format.

Right to object

You can object to us processing your personal data where we rely on legitimate interests as our lawful basis. You can also withdraw consent at any time where consent is our basis.

Right to withdraw consent

Where we rely on consent, you can withdraw it at any time without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, email us at privacy@getticked.co.uk. We will not charge a fee and will not require you to justify your request.

9

How to complain

If you believe we have not handled your personal data correctly, we would ask that you contact us first at privacy@getticked.co.uk so we can try to resolve the matter.

If you remain unsatisfied, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's independent data protection authority.

Information Commissioner's Office

Website: ico.org.uk

Helpline: 0303 123 1113

Post: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

10

Changes to this policy

We will update this privacy policy as the ticked platform develops and as our data processing activities change. We will always publish the effective date and version number at the top of the page.

For material changes - changes that affect how we use your data or your rights - we will notify you directly by email before the changes take effect.

11

Contact us

For any questions about this privacy policy or about how we handle your personal data:

Email: privacy@getticked.co.uk

Website: getticked.co.uk

Response time: We aim to respond to all privacy enquiries within 5 working days, and to all formal data subject requests within one calendar month.