This Privacy Policy explains what personal information we collect, why we use it, who may process it on our behalf and the choices you have.

Who we are

TagLink is a trading name of Orange Feather Ltd, registered in England and Wales under company number 14263776, based in Lightwater, Surrey.

For data protection purposes, Orange Feather Ltd is the controller of personal information processed through TagLink.

Contact: hello@taglink.co.uk

Information we collect

The information we collect depends on how you interact with TagLink.

When you activate a TagLink

We may collect:

• your name

• your email address

• the TagLink activation code associated with your item

This information connects the TagLink to the email address that should receive a notification if the item is found.

We do not require an owner's home address or phone number to operate the lost-and-found notification service.

When you report a found item

When a finder scans a TagLink and submits a message, we collect information about the found item, including:

• where the item was found

• a message explaining how it can be retrieved

• any name, email address or phone number the finder chooses to provide

Providing the finder's personal contact details is voluntary.

The information submitted by the finder is used to notify the TagLink owner and help them arrange the return of the item.

When you place an order

Purchases are processed through Stripe. Information collected in connection with an order may include:

• name

• email address

• phone number

• delivery address

• products ordered

• personalisation or engraving information

• payment and transaction information

Payment card information is processed securely by Stripe. TagLink does not receive or store your full payment card details.

We receive the information needed to prepare and deliver your order.

When you contact us

If you submit an enquiry through our website or contact us directly, we may collect:

• your name

• email address

• organisation or club details, where relevant

• the nature of your enquiry

• any information you choose to include in your message

We use this information only to respond to and manage your enquiry or request.

For larger business or organisational orders, we may also hold appropriate contact, billing and invoicing information.

How we use personal information

We use personal information to:

• activate and operate TagLinks

• route lost-item messages between finders and owners

• process and fulfil orders

• personalise products where requested

• arrange delivery

• respond to customer, club and business enquiries

• provide customer support

• administer invoices and business transactions

• maintain appropriate financial and accounting records

• protect and operate our services securely

We do not currently use customer, owner, finder or enquiry information for marketing mailing lists or promotional email campaigns.

We do not sell personal information.

Our lawful bases for processing

UK data protection law requires us to have a lawful basis for using personal information.

Depending on the circumstances, we rely on:

Contract

Where processing is necessary to fulfil an order, provide a TagLink service requested by you or take steps relating to a potential purchase.

Legitimate interests

Where necessary to operate the lost-and-found service, route a finder's message to an owner, respond to enquiries, provide customer support and operate TagLink effectively and securely.

We only rely on legitimate interests where we consider that our use of the information is proportionate and does not override the individual's rights and interests.

Legal obligation

Where information must be retained or processed to comply with legal, tax or accounting requirements.

This approach reflects the UK GDPR requirement to identify and explain an appropriate lawful basis for processing.

How the TagLink notification service works

When a TagLink is activated, its activation code is associated with the owner's email address within the systems used to operate the notification service.

If someone finds the item:

1. the finder scans the QR code

2. they complete a secure return form

3. the information they submit is processed through TagLink's automation system

4. a notification is sent to the email address associated with that TagLink

The finder does not need to see the owner's email address, phone number or home address in order to send the message.

Service providers

We use trusted third-party services to help operate TagLink.

These currently include services such as:

Stripe for processing purchases, payments and order information.

Tally for forms used when someone reports a found item.

Zapier for automation, TagLink activation records and routing lost-item notifications.

FreeAgent for accounting, invoicing and financial administration where appropriate, particularly for larger and business transactions.

Delivery providers
For delivering orders. We provide the delivery information required for the carrier to deliver the parcel.

We may also use website hosting, email and other technology providers where necessary to operate TagLink.

These organisations process information only where needed to provide their services.

We do not sell or rent personal information to third parties.

International processing

Some of the technology providers used by TagLink may process or store information outside the United Kingdom.

Where personal information is transferred internationally, we take reasonable steps to ensure that appropriate protections recognised under UK data protection law are in place.

UK GDPR contains specific requirements covering international transfers, including adequacy arrangements and approved safeguards.

How long we keep information

We keep personal information only for as long as it is reasonably required for the purpose for which it was collected.

As a general guide:

TagLink activation information
Kept while the TagLink remains active. An owner can ask us to deactivate their TagLink and remove the associated personal information.

Finder messages
Normally retained for no longer than 90 days after the message is submitted, unless we need to keep the information for longer to resolve a support, safety or legal issue.

General enquiries
Normally retained for up to 12 months after the last interaction, unless the enquiry develops into an ongoing customer or business relationship.

Orders and financial records
Transaction, order, invoice and accounting information may be retained for up to six years, or longer where required by law or reasonably necessary for accounting, tax or legal purposes.

We periodically review the personal information we hold and delete or anonymise information that is no longer needed.

Children and safeguarding

TagLink is designed so that personal contact information does not need to be displayed publicly on a child's bag, kit or belongings.

Where TagLinks are supplied to children through families, clubs, schools or youth organisations, we expect the TagLink to be activated and managed using the contact information of a parent, guardian or other responsible adult.

TagLink does not intentionally require children to provide their own personal email address, telephone number or home address in order to use the service.

More information about our approach is available on our Safeguarding page.

Cookies and analytics

TagLink does not currently use Google Analytics, advertising pixels or behavioural tracking technologies for marketing purposes.

We do not currently use personal information collected through the website to create advertising profiles or for targeted advertising.

The website and the third-party services required to operate it may use technologies that are strictly necessary for functionality, security or delivery of the service.

If we introduce analytics, advertising or other non-essential tracking technologies in the future, we will update this Privacy Policy and introduce appropriate cookie controls where required.

Security

We take reasonable technical and organisational measures to protect personal information from unauthorised access, misuse, loss or disclosure.

We also aim to minimise the amount of information required to operate TagLink.

No internet-based service can guarantee absolute security, but privacy and data minimisation form part of the way TagLink has been designed.

Your rights

Depending on the circumstances, UK data protection law may give you the right to:

• request access to the personal information we hold about you

• ask us to correct inaccurate information

• ask us to delete information

• ask us to restrict how information is used

• object to certain uses of your information

• request transfer of certain information in a portable format

• withdraw consent where processing is based on consent

Some rights depend on the lawful basis on which the information is being processed and are therefore not absolute.

To exercise your rights, contact:

hello@taglink.co.uk

You also have the right to raise a concern with the Information Commissioner's Office (ICO), the UK's data protection regulator.

Changes to this policy

We may update this Privacy Policy as TagLink develops, our services change or our legal obligations change.

The latest version will always be published on this page.