TAKT Privacy Notice
Version c1788729576b
Controller: ABX DEVELOPMENT LLP, a limited liability partnership registered in Scotland, number SO301872. Registered office: 39/5 Granton Crescent, Edinburgh, EH5 1BN, United Kingdom. Privacy contact: [email protected].
These rules apply from 31 October 2026. Earlier versions of this notice and the record of events related to them are kept in our legal archive and are available on request at [email protected].
This notice covers TAKT's website, dashboard, catalogue fulfilment and subscriptions, hosted-run administration, support, custom business services, professional enquiries and our partner programme. Catalogue purchases use the independent seller's purchase terms and our Product Licence and Hosted Terms. Separately agreed custom business services use our Terms of Service; client project data processed for those services follows Annex A. Required fields enable the requested service; without them we cannot provide it.
Purposes, data and retention
“Contract” means your personal contract or requested preliminary steps; for organisation representatives, we use legitimate interests in delivering/administering services. “Legal duty” covers statutory obligations.
| Purpose | Data | Basis | Retention |
|---|---|---|---|
| Answer website requests | Contact, organisation, technical requirements, message, optional website feedback | Contract; otherwise legitimate interests in answering enquiries and presenting our services | Two years from receipt |
| Operate accounts and dashboard | Identity, credentials, sessions, orders, actions and engineering permissions | Contract; legitimate interests in administration and security | Account lifetime; ended sessions/login attempts 30 days; order/action/permission records generally six years |
| Receive payments and keep accounts | Billing, invoices, transactions, payer details for direct custom business services and earlier direct orders; merchant-of-record order references, product, customer contact/country, payment/refund status and settlement records for catalogue sales | Contract; legal duty; legitimate interests in administering fulfilment and refunds | Generally six years |
| Provide chat and ticket support | Messages, copied chat, contact details, status | Contract or legitimate interests in support; legitimate interests in efficient, proportionate API-assisted ticket handling | Tickets three years after closure; unlinked chats 90 days after last message |
| Professional enquiries | Published professional contact/role, source, relevant work, correspondence and objection record | Legitimate interests in relevant business enquiries and collaborations | Unanswered/unsent records: at most 12 months from collection; correspondence: 12 months from the person's last substantive reply; earlier if unnecessary |
| Assess applications and administer partnerships | Contact email, channel/project or organisation, optional channel link, country, applicant status, audience categories, proposed promotion, correspondence and accepted terms; payment and tax details after acceptance | Requested contractual steps and contract; legitimate interests in assessing and administering partnerships for organisation representatives; legal duties for accounting | Unsuccessful applications: six months after the decision, unless deleted earlier when unnecessary; active partnership records during participation; necessary agreement, payment and dispute records generally six years after the relevant accounting period or resolution |
| Attribute customer-selected referrals and calculate commissions | Referral code expressly entered or confirmed before payment, internal customer/order reference, eligible product amount, tax excluded from the calculation, payment/refund status and commission adjustments | Legitimate interests in crediting the customer's chosen referral and settling partner remuneration; legal duties for accounting | Necessary attribution and commission records generally six years after the relevant accounting period; unnecessary supporting details deleted earlier |
Connection data is used transiently to deliver and rate-limit enquiries and account access. We use aggregate statistics to assess our own service information.
We delete earlier when no longer necessary. Specific legal obligations/claims may justify restricted retention. Backups rotate within seven days; deletions precede restored use. Catalogue hosted inputs and results expire 30 days from creation under the Product Licence and Hosted Terms. Custom project materials normally expire 30 days from creation, subject to Annex A. Engineering permission evidence lasts six years after order-end or, without an order, the last decision.
Professional contacts
We use public organisational, project and research sources, identifying the particular source in our message. Outgoing messages, re-imports and automatic replies do not restart retention. Reply “no”, or otherwise object, to stop these enquiries and all direct marketing. Minimal suppression records remain while needed. New identifying contact preparation stays with ABX personnel/local software, outside AI services.
Recipients and transfers
ABX's servers are in Lithuania. Recipients by activity: authorised personnel; Cloudflare, Inc. for delivery/security; Hetzner for German email transit; Stripe's UK/Irish/US payment entities and Wise Payments Limited for direct custom business payments and earlier direct orders; the merchant of record identified at checkout for catalogue purchases; OpenAI OpCo, LLC as our processor for routine ticket content under its commercial API data processing agreement; separately authorised engineering providers in Annex A; necessary advisers/authorities. Payment providers and Cloudflare's own security services also act for their own purposes. Partners receive commission statements and adjustments. We do not share buyers' names, email addresses or payment details with partners. Banks or payout services identified before a partner provides payment details process partner payments and any legally required verification under their applicable privacy notices.
For catalogue purchases, the merchant of record named at checkout is the seller and an independent controller for checkout, payment, fraud checks and tax records under its own privacy notice, linked before payment. We exchange the order reference, product, customer contact/country and payment/refund status to deliver licences, support and refunds. We keep our own fulfilment and accounting records; the seller keeps the customer-location evidence and retail tax records required for its sales. Our notice covers our processing, not the seller's separate retention periods.
Our chat assistant runs locally. On legitimate interests, we use OpenAI's API to help answer routine tickets, sending relevant content without a separate account/contact field; we do not opt into model training. OpenAI's abuse-monitoring content normally remains up to 30 days, with legal/safety exceptions. You may object at our privacy contact and request staff handling. Partner applications and identifying partner correspondence are handled by our personnel outside AI services.
Processing can involve the EEA, UK, US and providers' other operating countries; applicable transfers use adequacy arrangements, including covered Data Privacy Framework participation, or contractual safeguards such as EU standard clauses with the UK Addendum where needed; request copies at our privacy contact.
We do not sell personal data.
Browser storage
We use essential session/chat/security storage and a chosen-language preference: dashboard sessions last up to 12 hours, language preferences one year and chat markers for the tab; we use no advertising or analytics cookies.
You can enter or expressly confirm a partner code before payment. We record that choice with the order without placing a referral cookie or tracking you between visits.
Your rights
Contact us for access, correction, erasure, restriction, portability where applicable, objection to legitimate-interest processing, or a complaint. Prices and trial charges follow the accepted offer and deadlines; request human review, express your views or contest an automated decision at our contact.
You may complain to us or the UK Information Commission (ico.org.uk); approaching us first is optional.
Where the EU GDPR applies, you may also complain to a competent EU supervisory authority, including in your country of residence or work.