Privacy Policy

This Privacy Policy explains how Tavyaan Limited collects, uses, and protects personal data when you interact with this website or engage with us directly. We are committed to handling personal data transparently and in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This policy reflects our practice at the point of initial website launch. It will be updated as Tavyaan's commercial operations, data processing activities, and regulatory footprint evolve. Any material changes will be reflected here with a revised effective date.

Who we are

Tavyaan Limited is a company registered in England and Wales (Company No. 17147085), with its registered office at Westgate Chambers, Elm Park Road, London HA5 3LA. Our office is at 48 Warwick Street, Soho, London W1B 5AW. For the purposes of UK GDPR, Tavyaan Limited is the data controller for personal data collected through this website and through direct commercial engagement.

What personal data we collect

We only collect personal data you provide to us directly, or that is generated as a necessary part of you using this website. This includes:

•     Information you submit through the conversation form: name, company, work email, role, and the free-text context you share about your commercial situation.

•     Information you send in direct correspondence: name, email, organisation, and the content of your message.

•     Technical information collected automatically: anonymised aggregate usage statistics where analytics are deployed. No tracking cookies are set without your consent.

How we use your personal data

We use the personal data you provide to:

•     Respond to your enquiry and explore whether Tavyaan can be useful to you.

•     Maintain a record of our correspondence and any resulting commercial engagement.

•     Send you, where you have expressly consented, occasional updates about our work. You can withdraw consent at any time.

•     Comply with our legal, regulatory, and contractual obligations.

We do not sell personal data. We do not share it with third parties for marketing purposes. We do not use it to train AI models.

Legal basis for processing

Under UK GDPR, we process your personal data on the following legal bases:

•     Legitimate interests: to respond to commercial enquiries you initiate, to manage our client relationships, and to operate our business.

•     Consent: where you have expressly agreed, for example in relation to optional updates or non-essential cookies.

•     Contract: where processing is necessary to enter into or perform a contract with you or your organisation.

•     Legal obligation: where we are required to process data by law.

How long we keep your data

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including any legal, accounting, or reporting requirements. Enquiry correspondence that does not progress to engagement is typically retained for up to 24 months. Data relating to active or completed commercial engagements is retained for the duration required by contract and applicable law, typically not less than six years from the end of the engagement.

Sharing your data

We do not share personal data with third parties except where necessary for the operation of our business, and in each case only with providers bound by confidentiality and data protection obligations. This may include email infrastructure providers, professional advisers (legal, accounting, audit), and commercial partners where you have separately consented. Where data is transferred outside the UK or European Economic Area, we ensure appropriate safeguards are in place.

Your rights

Under UK GDPR, you have the right to:

•     Access the personal data we hold about you.

•     Request correction of inaccurate or incomplete data.

•     Request erasure of your personal data, subject to our legal obligations to retain certain records.

•     Object to or restrict processing in certain circumstances.

•     Request portability of data you have provided to us.

•     Withdraw consent where processing is based on consent.

•     Lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

To exercise any of these rights, contact us at enquiry@tavyaan.com. We will respond within one month of receipt.

Security

We take the security of personal data seriously. We maintain technical and organisational measures proportionate to the nature of the data we hold and the risks of processing. No transmission of data over the internet can be guaranteed as entirely secure, but we take reasonable steps to protect your information from unauthorised access, loss, or disclosure.

Cookies

This site uses only essential cookies by default. Non-essential cookies, where used, are set only with your consent. For details, see our Cookie Policy.

Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practice, the legal framework, or the scope of our services. The current version is always available at this URL, with the effective date shown at the top.

Contact

For any question about this Privacy Policy, to exercise your rights, or to raise any concern about how we handle your personal data, contact us at enquiry@tavyaan.com.

© 2026 Tavyaan Limited · All rights reserved

Last updated: May 2026