Privacy, GDPR & UK Data Protection

Effective date: 19 January 2026
Last updated: 19 January 2026

This page explains how Tech Generation Ltd approaches privacy and UK data protection in a practical, plain-English way. For the full legal detail, please also read:


Whom this applies to

This applies to Tech Generation Ltd and the brands it operates, including Tech Generation, Pressific, Fusion Bear, Clougency, and Biznific, wherever this page and our policies are linked.


Controller vs Processor (important for client websites)

When you visit our websites (or you buy services from us directly), Tech Generation Ltd is usually the data controller for the personal data we collect and use for our own business purposes (for example, enquiries, billing, support, and site analytics).

When we manage a website or service for your organisation (for example, WordPress hosting/maintenance or site work), your organisation is typically the data controller for personal data collected via your website (for example, contact form submissions, customer enquiries, or newsletter sign-ups), and we act as a processor when handling that data on your behalf.

If you’re an end-user contacting one of our clients through their website, your data rights requests should normally be made to that client (the controller). We’ll support our clients with those requests where we’re acting as their processor.


What personal data we handle

Depending on how a client or website visitor interacts with us, we may handle:

  • Contact and business details (name, business name, work email, phone number, role if provided)
  • Enquiry and support content (messages, attachments, support history, and call records where calls are recorded)
  • Account and service data (logins where applicable, service configuration, operational and security logs)
  • Billing and administration (invoices, payment status, transaction references)
  • Website usage data (IP address, device/browser info, pages visited, cookie/pixel identifiers where enabled)

For full detail, see our Privacy Policy.


Why we process personal data (lawful bases)

We only process personal data where we have a lawful basis, such as:

  • Contract – to deliver services you request
  • Legitimate interests – to run and protect the business (for example security, fraud prevention, service improvement)
  • Legal obligation – accounting, tax, and compliance duties
  • Consent – mainly for non-essential cookies/pixels and certain tracking

Cookies, Meta Pixel, and affiliate tracking (PECR)

Our websites use cookies and similar technologies for essential functionality, security, analytics, marketing measurement, and affiliate attribution.

  • Essential technologies help the site function and stay secure.
  • Analytics helps us understand usage and improve the site.
  • Marketing (including Meta/Facebook Pixel) helps measure advertising performance and improve ad relevance.
  • Affiliate tracking may be used on blog pages containing affiliate links (including Amazon Associates and Impact).

Under UK rules, most non-essential cookies/pixels require consent. For details and controls, see our Cookie Policy.


Who we share data with

We don’t sell personal data.

We share data only where needed to deliver services and run the business. This can include suppliers used for payments, hosting/infrastructure, security/CDN, support tooling, collaboration, analytics, advertising measurement, and affiliate attribution.

Banks and financial institutions involved in sending/receiving payments may process payer/payee name, business name, transaction references, and amounts as part of standard payment processing.

For the detailed list (with provider links), see: Subprocessors & Third-Party Providers.


International transfers

Our services are primarily run from the UK/EU, but some suppliers may process data outside the UK. Where international transfers apply, we use appropriate safeguards.


Retention

We keep personal data only as long as needed for the purposes described in our Privacy Policy, including keeping invoice and tax records for the legally required period. When data is no longer needed, it is deleted or anonymised where practical.


Security

We use reasonable technical and organisational measures to protect personal data (for example access controls, least-privilege access, monitoring, and encryption in transit where appropriate).


Your rights under UK GDPR

UK GDPR provides rights for individuals (subject to legal limits and exemptions), including:

  • Right to be informed
  • Right of access
  • Right to rectification
  • Right to erasure
  • Right to restrict processing
  • Right to object
  • Right to data portability
  • Rights related to automated decision-making and profiling

How to make a request

Email: accounts@techgeneration.uk

Please include enough detail for us to locate the data (for example your name, email address used, brand/service you interacted with, and what you’re requesting). We may ask for proof of identity where appropriate.

We respond without undue delay and usually within one month. In some cases (for example if a request is complex or there are multiple requests), the deadline can be extended—if so, we’ll explain why.


Authorities and legal requirements

We may share information with tax authorities, regulators, or law enforcement (for example HMRC, IRS, or similar bodies) only where we are legally required, or where needed to comply with lawful requests and legal obligations.


Questions or complaints

If you have any questions about privacy or data protection, contact: accounts@techgeneration.uk

If you remain unhappy after speaking with us, you can raise a concern with the UK Information Commissioner’s Office (ICO):
https://ico.org.uk/make-a-complaint/


Notes on guidance changes

The UK’s data protection and PECR guidance can be updated over time (including after legislative changes). We keep our policies under review and update them when needed.