Who we are
Software Systems Limited (company no. 14466340), trading as Talltree® Technologies, registered at 7 Bell Yard, London, WC2A 2JR, United Kingdom, is the data controller for personal data collected through talltree.tech and any other site we operate (together, “the sites”).
This notice covers all properties we run, including:
- Talltree® Technologies — main site and consulting services
For any privacy question, contact privacy@talltree.tech.
What we collect and why
We collect only what we need to run the business and the sites.
Contact and enquiry data — name, email, company, and the contents of your message. Used to respond and to keep a record of what was discussed. Lawful basis: legitimate interests in running the business, or steps taken at your request before entering a contract.
Newsletter and marketing data — email address and engagement metrics (opens, clicks). Used to send the content you signed up for. Lawful basis: consent — withdraw any time via the unsubscribe link in every email or by emailing privacy@talltree.tech.
Customer and billing data — information needed to deliver services and take payment. Card details are handled by our payment provider; we do not store them. Lawful basis: performance of a contract, and legal obligations (tax, accounting).
Site analytics — pages viewed, approximate location, device and browser type, referrer. Used in aggregate to understand what’s useful and to improve content and delivery. Lawful basis: legitimate interests for privacy-preserving measurement, or consent where required.
Advertising data — where you have consented, we may run ads on platforms such as LinkedIn and Google and use their tools to measure performance and build audiences. The platforms collect data directly from you under their own privacy notices. Lawful basis: consent.
How we use AI and automated content
We may use machine learning and large language models, run by us or by our providers, to help personalise content, suggest relevant services, summarise enquiries, or improve how the sites work. These uses do not produce legal or similarly significant decisions about you. If we ever introduce automated decision-making that does, we will tell you and ask for consent where required.
You can object to profiling-based personalisation at any time by emailing privacy@talltree.tech.
Who we share data with
We share personal data only with vendors that help us run the business — for example, cloud hosting and storage, email and newsletter delivery, payment processing, customer relationship and analytics tools, and advertising platforms. Each is bound by a contract that limits what they can do with the data.
We may also share data where we are legally required to (for example, in response to a valid request from a regulator or court).
Where data is stored
Our providers operate globally. Personal data may be stored and processed in United Kingdom, European Economic Area, United States, depending on the service. Where data leaves the UK or EEA, we rely on safeguards approved by the UK and EU authorities, such as adequacy decisions, the UK International Data Transfer Agreement, or Standard Contractual Clauses with the UK Addendum.
We do not control where third-party platforms (for example, LinkedIn or Google) store data you share directly with them through their products or ads — see their own privacy notices for details.
How long we keep it
- Enquiries: up to 24 months after last contact.
- Newsletter and marketing: until you unsubscribe or ask to be removed.
- Customer records: for the duration of our engagement plus 6 years (UK limitation period for contract claims).
- Payment and invoicing records: as required by tax and accounting law (currently 6 years from end of relevant financial year).
- Analytics: up to 26 months in aggregated form.
Cookies and consent
We aim to use only privacy-preserving analytics and tracking that does not require consent under UK and EU rules, so the sites may not show a cookie banner. If we later add tools that do need consent, we will show one and only set those cookies once you agree.
Booking, scheduling, and payment pages provided by third parties may display their own cookie or consent banners on their domains. Those are governed by the relevant provider’s notice, not ours.
Your rights
Under UK GDPR you have the right to:
- access the personal data we hold about you;
- have inaccurate data corrected;
- ask us to delete data we no longer need to keep;
- restrict or object to processing, including profiling;
- receive your data in a portable format;
- withdraw consent at any time, where consent is the lawful basis.
To exercise any of these, email privacy@talltree.tech. We aim to respond within one month.
If you are not satisfied with how we handle your data, you can complain to the Information Commissioner's Office (ICO).
Changes to this notice
We may update this notice from time to time. The “last updated” date below will change, and material changes will be announced on the site or by email where appropriate.