TailoredTailored
Let's talkES
TailoredBack home
Privacy

Privacy policy

Last updated: 19 September 2026

1. Who we are

This policy explains how we collect, use and protect personal data when you visit our website at https://tailored.so (the “Site”; our former address, thetailoredwebsite.com, now leads here), contact us, engage us as a client or prospective client, apply to work with us, or use any product or service we provide (together, the “Services”).

We operate through two related companies that share common ownership and apply the same data protection practices:

  • Tailored Web Innovations SL (“Tailored Spain”), registered in Spain, NIF ESB70723119, registered address Calle Gravina 4, 03002 Alicante, Spain. Tailored Spain is the controller of personal data relating to individuals in the European Economic Area (EEA).
  • Tailored Web Limited (“Tailored UK”), registered in England and Wales, company number 12400842, registered address Catalyst House, 720 Centennial Court, Elstree, Borehamwood, WD6 3SY, United Kingdom. Tailored UK is the controller of personal data relating to individuals in the United Kingdom.

“Tailored”, “we”, “us” and “our” mean whichever of these companies is the controller of your personal data. If you are outside both the EEA and the UK, the company that provides your Service is the controller. You can contact us about any privacy matter at alvaro@tailored.so or +34 661 95 43 13.

2. Scope

This policy covers personal data we process as a controller. Where we process personal data on behalf of a client under a services agreement, we act as a processor, and the client’s own privacy policy governs that processing. It does not cover third-party websites we link to.

3. What we collect

  • What you send us through the Site. The contact form asks for your name, your email address, what you would like to talk about and, optionally, your company. If you are applying to work with us, it also asks for a link to your work.
  • Correspondence and relationship data. Your name, email, telephone number, company, role and our correspondence and dealings with you.
  • Technical data. When you visit the Site, our hosting provider records the technical details every web request carries: IP address, browser and device information, the page requested and the time. The Site does not use cookies, analytics or advertising technology; see our cookie policy.
  • Data from connected services. Where you explicitly authorise it, data imported from third-party platforms you connect to our Services (see section 5).

4. How we use it, and our legal bases

We process personal data only where we have a lawful basis under the EU GDPR and the UK GDPR:

  • To answer your enquiry and, if we work together, to provide our Services and manage the relationship. Basis: taking steps at your request before entering a contract, performance of a contract, or our legitimate interest in responding to you.
  • To consider a job application. Basis: taking steps at your request before a possible contract, and our legitimate interest in recruiting.
  • To operate and secure the Site. Basis: our legitimate interest in running and protecting it.
  • For business-to-business marketing, such as news about our work. Basis: your consent, or our legitimate interest in business-to-business marketing. You can opt out at any time.
  • To process data from connected services you authorise. Basis: your consent (see section 5).
  • To comply with legal obligations and to establish, exercise or defend legal claims. Basis: legal obligation and legitimate interest.

Where we rely on legitimate interests, we have balanced them against your rights and can give you details of that assessment on request.

5. Data from connected services (including LinkedIn)

Some of our Services let you connect a third-party account so that data you hold there can be imported into our platform. Where the connected service is LinkedIn, we access LinkedIn member data only through LinkedIn’s official Data Portability APIs and only after you have authenticated and given your explicit consent. In relation to this data:

  • We access and process only your own data, and only for members who have authorised our application. We do not access the data of members who have not authorised us.
  • We use it solely to build and maintain the professional context layer that powers the Service for you.
  • We do not obtain LinkedIn data by scraping or any unofficial method, and we do not combine officially imported data with data obtained through such methods.
  • We store this data on the basis of your consent for as long as we have a continuing lawful basis to do so.
  • We delete all of your connected-service data promptly on your request or when you end your relationship with us, except where we are required by law to retain it. You can withdraw your authorisation at any time.

Our processing of LinkedIn data is also governed by our agreement with LinkedIn under its Data Portability API terms.

6. Who receives it

We do not sell your personal data, and we do not share it for advertising. We share it only with:

  • Service providers who process it for us, on our instructions and under written agreements, and who may not use it for their own purposes. For the Site these are Vercel (hosting), Postmark (delivering contact-form messages to us) and Microsoft (Microsoft 365, our email). A full list of the providers behind our Services is available on request.
  • Professional advisers, such as lawyers and accountants, where necessary.
  • Authorities or others where the law requires it, or to enforce our agreements or protect our rights.
  • A buyer or successor, if we merge with or are acquired by another organisation, who must then honour this policy.

7. International transfers

  • Between the EEA and the UK, because we operate through companies in both: transfers from the EEA to the UK rely on the European Commission’s adequacy decision for the UK, currently in force until 27 December 2031; transfers from the UK to the EEA rely on the UK’s adequacy regulations.
  • To the United States, because Vercel and Postmark are US companies and Microsoft may process data there. These transfers rely on the EU–US Data Privacy Framework and its UK Extension where the provider is certified, and otherwise on the EU Standard Contractual Clauses and the UK International Data Transfer Addendum.
  • For any other country without an adequacy decision, we use the same safeguards, and can give you a copy on request.

8. How long we keep it

  • Enquiries through the Site that do not lead to working together: 24 months from our last contact.
  • Job applications: 12 months after the recruitment it relates to closes, unless you agree to our keeping it longer for future roles.
  • Client and contract data: for the relationship, then for as long as legal, accounting and tax obligations require.
  • Marketing data: until you opt out or withdraw consent.
  • Connected-service data: while your authorisation remains in place (see section 5).
  • Technical data: for the short periods our hosting provider keeps request logs.

We may keep limited information longer where the law requires it or to defend legal claims.

9. Your rights

Subject to the conditions in the EU GDPR and the UK GDPR, you have the right to:

  • access your personal data and receive a copy of it;
  • have inaccurate or incomplete data corrected;
  • have your data erased;
  • restrict or object to our processing;
  • receive your data in a portable format, or have it sent to another controller;
  • withdraw consent at any time, without affecting processing before withdrawal.

To exercise any of them, contact us as in section 1. We will reply within the time limits the law sets.

10. Complaints

If you are concerned about how we handle your data, please tell us first so we can try to put it right. You also have the right to complain to a supervisory authority: in Spain and the EEA, the Agencia Española de Protección de Datos (aepd.es); in the United Kingdom, the Information Commissioner’s Office (ico.org.uk).

11. Cookies

The Site uses no cookies. It stores one item in your browser for the length of your visit, only so the opening animation plays once. Our cookie policy has the details.

12. Security

We use appropriate technical and organisational measures to protect personal data against loss, misuse and unauthorised access or alteration. The Site is served only over encrypted connections. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

13. Links to other sites

The Site links to sites we do not operate, such as LinkedIn, Behance and Dribbble. Nothing is sent to them unless you follow a link, and their own privacy policies then apply.

14. Changes to this policy

We will post any update here and change the date at the top. Where a change is material we will take reasonable steps to tell you, and where the law requires it we will ask for your consent.

15. Contact

Tailored Web Innovations SL (EEA) and Tailored Web Limited (UK), at the registered addresses in section 1. Email alvaro@tailored.so, phone +34 661 95 43 13.