Privacy Policy

TinyAnalytics is operated by Next Marketing Technology Ltd, a company registered in England and Wales under company number 14384054. Our registered office is Flat 1, 25 Daleham Gardens, London, England, NW3 5BY.

When this policy refers to “TinyAnalytics”, “we”, “us”, or “our”, it means Next Marketing Technology Ltd.

This policy applies to our public website, customer dashboard, analytics script, APIs, support, and related TinyAnalytics services (together, the “Service”).

We use personal information to:

• provide, operate, maintain, and secure the Service;
• create accounts and administer subscriptions and payments;
• process analytics data and generate the dashboards, reports, recordings, alerts, and exports requested by customers;
• provide support and respond to questions, complaints, and rights requests;
• communicate service changes, security notices, and administrative messages;
• understand use of the Service and improve its reliability, usability, and features;
• prevent fraud, abuse, unauthorised access, and violations of our Terms of Use;
• send marketing where permitted, and honour opt-out requests; and
• meet legal, accounting, tax, and regulatory obligations and establish or defend legal claims.

We do not sell personal information or customer analytics data. We do not use customer analytics data to build advertising profiles for third parties.

Where UK or EEA data-protection law applies, we rely on one or more of the following lawful bases:

• Contract: to create and manage your account, provide the Service, process payments, and provide support.
• Legitimate interests: to secure and improve the Service, understand product use, prevent fraud, manage our business, and communicate with business customers, provided those interests are not overridden by your rights.
• Consent: for optional marketing, optional cookies, or another purpose where we specifically ask for consent. You may withdraw consent at any time.
• Legal obligation: to comply with applicable law, lawful requests, tax and accounting rules, and regulatory duties.

When we process customer analytics data as a processor, the customer is responsible for identifying and documenting its lawful basis.

We disclose information only where needed for the purposes described in this policy. Recipients may include:

• hosting, infrastructure, security, email, customer-support, and other service providers acting under contract;
• payment processors and financial institutions involved in a transaction;
• professional advisers, including lawyers, accountants, auditors, and insurers;
• regulators, courts, law-enforcement bodies, or other authorities where disclosure is legally required or necessary to protect rights and safety;
• a buyer, investor, or successor in connection with a merger, financing, reorganisation, or sale of all or part of our business, subject to appropriate confidentiality safeguards; and
• other parties at your direction or with your consent, including integrations you choose to enable.

Providers may use information only to deliver their contracted services to us and must protect it appropriately.

We are based in the United Kingdom and aim to host core customer analytics data in the UK. Some suppliers may process limited business, account, support, or payment information in other countries.

Where personal information is transferred outside the UK or EEA, we use a lawful transfer mechanism where required, such as adequacy regulations or approved contractual clauses, together with supplementary safeguards appropriate to the risk. You may contact us for more information about the safeguards relevant to your data.

We retain personal information only for as long as reasonably needed for the purpose for which it was collected, including to provide the Service and meet legal, accounting, security, and dispute-resolution requirements.

• Account and subscription information is generally kept while an account is active and for a limited period afterwards.
• Customer analytics data is retained according to the selected plan, account settings, customer instructions, and our agreement with the customer. Where a plan includes “forever data retention”, that data may remain available while the account is maintained, unless the customer deletes it or asks us to do so.
• Transaction and tax records are retained for the period required by applicable law.
• Support, security, and fraud-prevention records are retained for a reasonable period based on their nature and the risk involved.
• Marketing information is kept until you opt out or it is no longer useful, although we may retain a minimal suppression record to honour your preference.

Information scheduled for deletion may remain temporarily in secure backups before being overwritten. We may retain anonymised or aggregated information that no longer identifies an individual.

We use technical and organisational measures designed to protect personal information, including access controls, encryption in transit, monitoring, backups, and procedures for handling security incidents. Access is limited to people and providers who need it for their work.

No internet service can guarantee absolute security. You are responsible for using a strong, unique password, safeguarding your credentials, and notifying us promptly if you suspect unauthorised account access.

Depending on where you live and the circumstances, you may have the right to ask us to:

• confirm whether we process your personal information;
• give you access to it and provide a copy;
• correct inaccurate or incomplete information;
• delete information in certain circumstances;
• restrict how we use information;
• provide information you supplied in a portable, machine-readable format;
• stop direct marketing; or
• withdraw consent where processing is based on consent, without affecting earlier lawful processing.

To exercise a right, email hello@tinyanalytics.io. We may need to verify your identity. If your request concerns analytics collected by one of our customers, we may direct the request to that customer or help it respond.

You may complain to the UK Information Commissioner’s Office at ico.org.uk/make-a-complaint, or to the data-protection authority where you live or work.

You can opt out of marketing emails at any time by using the unsubscribe link in the message or contacting us. We may still send non-marketing messages about your account, subscription, security, or material Service changes.

The Service is intended for businesses and adults and is not directed to children. We do not knowingly create accounts for, or collect personal information directly from, anyone under 16. If you believe a child has provided information to us, please contact us so we can investigate and take appropriate action.

The Service may link to or integrate with services we do not control. Their privacy practices are governed by their own notices. Enabling a third-party integration authorises us to exchange the information needed to operate that integration at your direction.

We may update this policy to reflect changes to the Service, our practices, or the law. We will post the revised version here and update the “Last updated” date. If a change materially affects how we use personal information, we will provide additional notice where required.

Questions, complaints, and privacy requests can be sent to: