Privacy Policy
Introduction and scope
Tech Setup Hacks Limited operates in the Desk Setups & Workspace Ergonomics sector and provides services and products via the domain techsetuphacks.com. This Privacy Policy describes how we collect, use, disclose, and protect personal data of individuals worldwide who interact with our Services, including customers, contractors, and visitors. By using our Website and Services, you acknowledge and consent to the practices described in this Policy. We may update this Policy from time to time; the latest version will be published on techsetuphacks.com and will indicate the date of the last update.
Information collection practices
Personal Data We Collect
- Identifiers and contact information: name, email address, postal address, phone number, username, company name, and job title.
- Account data: login credentials and security-related information, where applicable.
- Transaction data: purchases, orders, payments, and billing information required to provide our Services, while minimizing data collection and storage.
- Usage data: IP address, device type, browser type, pages visited, time and date of access, and referral source.
- Ergonomic preferences: data related to desk setups, chair preferences, monitors, peripherals, and ergonomic product selections.
- Communications: records of correspondence with our support teams, feedback, surveys, and other interactions.
- Any data you explicitly provide when requesting consultations or generating ergonomic recommendations.
How We Collect Data
- Direct interactions: data you provide when you register, request services, place orders, participate in surveys, or contact us.
- Automated technologies: cookies and other tracking technologies that collect usage information as you interact with techsetuphacks.com.
- Third-party sources: data from partners or publicly available sources when permissible by law and with your consent.
Cookies and Tracking Technologies
- We use cookies, pixel tags, and similar technologies for essential site functionality, analytics, personalization, and advertising. We may deploy first-party and third-party cookies on techsetuphacks.com. You can manage cookies via browser settings or our site preferences banner.
How data is used and processed
Purposes of Processing
- To provide, operate, and personalize our Services, including ergonomic product recommendations and desk setup guidance.
- To process orders, fulfill services, and manage accounts and billing.
- To communicate with you about orders, support requests, service updates, and marketing (subject to consent where required).
- To improve the quality, safety, and security of our Services and to develop new offerings.
- To conduct analytics, understand usage patterns, and perform research to optimize ergonomics and workspace configurations.
- To comply with legal obligations and enforce our policies.
Legal Bases for Processing
- Performance of a contract or to take steps at your request before entering into a contract.
- Legitimate interests (e.g., security, fraud prevention, product improvement).
- Compliance with legal obligations.
- Consent where applicable.
Data Retention
- We retain personal data only as long as necessary to fulfill the purposes described in this Policy and to comply with applicable laws. Retention periods depend on data type, purpose, and legal requirements.
- When data is no longer needed, we securely delete or anonymize it.
Data Subject Rights
- You have rights to access, correct, delete, restrict, or object to processing, and to request data portability where applicable. You may withdraw consent at any time where consent is the basis for processing.
- You may lodge complaints with a supervisory authority if you believe your rights have been violated.
International Transfers
- Personal data may be transferred to countries outside your home jurisdiction, including the United Kingdom and the United States. We implement appropriate safeguards, such as data processing agreements and, where required, standard contractual clauses.
Automated Decision-Making
- We generally do not rely on automated decision-making with legal or similarly significant effects. If we do, we will provide meaningful information about the logic involved and the significance and consequences of such processing.
Data security measures
- We implement industry-standard security measures, including Transport Layer Security (TLS) for data in transit and encryption at rest for stored data.
- Access control, authentication, and authorization measures limit who can access personal data, with a principle of least privilege.
- Regular security training for staff, vulnerability assessments, and monitoring to detect and respond to security incidents.
- Data minimization, privacy-by-design, and regular reviews of policies and procedures.
- Business continuity and disaster recovery plans, including data backups and regular testing.
User rights
Access and Correction
- You may access your personal data upon request and request corrections to inaccurate or incomplete data.
Deletion
- You may request the deletion of your personal data, subject to applicable legal exemptions (for example, to complete a transaction, comply with legal obligations, or enforce our rights).
Restriction of Processing
- You may request restriction of processing in certain circumstances, such as while a request for correction or objection is being considered.
Data Portability
- You may request your data in a structured, commonly used, and machine-readable format where applicable.
Objection and Withdraw Consent
- You may object to processing based on legitimate interests or withdraw consent where it is the basis for processing, without affecting the lawfulness of processing based on prior consent.
CPRA Rights (California residents)
- To exercise CPRA rights, contact [email protected].
How to Submit a Privacy Request
- To protect your privacy, we may require verification of your identity before fulfilling requests. We will respond within applicable timeframes and comply with legal requirements.
Third-party services and cookies
Third-Party Service Providers
- We engage with service providers for hosting, analytics, payment processing, email communications, customer relationship management, and other business operations. These providers process personal data on our behalf and are obligated to implement appropriate security measures and data protection terms.
- We may share data with these providers solely to operate and improve the Services and to fulfill our contractual obligations.
Cookies and Similar Technologies
- We use cookies to improve site functionality, analyze performance, remember preferences, and provide personalized content. You can configure cookie preferences or opt out via the site banner or browser settings.
Cross-Border Data Transfers
- We may transfer personal data to jurisdictions outside your location, including the United Kingdom and the United States, with safeguards such as data processing agreements and standard contractual clauses where required.
Data Processing Agreements
- We maintain data processing agreements with all vendors processing personal data on our behalf to ensure appropriate data protection measures.
How to Contact Us for Privacy Inquiries
If you have questions about this privacy policy or wish to exercise your rights, you can contact us at:
- Privacy email: [email protected]
- Phone: +44 20 7946 0783
- Mailing address: 4th Floor, 1 Wood Street, London EC2V 7WS, United Kingdom
For California residents seeking CPRA rights, To exercise CPRA rights, contact [email protected].
Last updated
Last updated: 2026-02-28
