Privacy Policy

Tessera Engineering Ltd ("Tessera", "we", "us") is the data controller for personal data collected through tesseraengineering.co.uk.

• Company number: 17313228 (registered in England and Wales)
• VAT number: 523 7401 14
• Registered office: 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ

You can contact us about this policy or any privacy matter at hello@tesseraengineering.co.uk.

Our ICO registration number will be added here once confirmed.

When you submit the contact form we collect:

• Your name
• Your email address
• Your company name (optional)
• The content of your message
• Technical metadata generated by our hosting and email infrastructure (e.g. timestamp, delivery status)

With your consent we also use Google Analytics 4 to measure aggregate site usage (see "Cookies and analytics" below). We do not use advertising pixels or fingerprinting.

We use the information you submit only to respond to your enquiry and to have a follow-up conversation about a potential engagement.

Our lawful basis under Article 6(1) of the UK GDPR is legitimate interests — namely, responding to unsolicited business enquiries you have chosen to send us. Where a message leads to a contract, the lawful basis becomes performance of a contract or steps taken at your request prior to entering into a contract.

We do not use your details for marketing and we will not add you to any mailing list without your explicit consent.

Contact-form enquiries are retained for up to 24 months from your last interaction with us, after which they are deleted or anonymised.

Where an enquiry becomes a client engagement, related records are kept for the period required by UK tax, accounting and professional-liability obligations (typically six years after the end of the engagement).

Email delivery logs (message ID, recipient, timestamp, status) are retained for a shorter operational period to diagnose delivery issues and honour unsubscribe requests.

We do not sell personal data and we do not share it for marketing. We use a small number of trusted service providers who process data on our instructions:

• Lovable Cloud — website hosting and backend database used to store the contact-form submission and email delivery records.
• Our email delivery provider — used to transmit the contact-form email to our inbox.
• Our email inbox provider — used to receive and reply to your message.

Each of these providers is bound by a data processing agreement and processes personal data only for the purposes described above.

We may also disclose information where we are required to do so by law, regulation, or a valid legal request.

Our providers may process data outside the United Kingdom, including in the European Economic Area and the United States. Where personal data is transferred outside the UK, we rely on one of the safeguards recognised under the UK GDPR — typically the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or an adequacy decision made by the UK government.

Data is transmitted over TLS, stored on managed infrastructure with row-level access controls, and access is limited to the people at Tessera who need it to respond to you.

This site uses Google Analytics 4 (provided by Google Ireland Limited) to measure aggregate usage such as page views, referrers, and approximate location. Google Analytics sets cookies (e.g. _ga, _ga_*) and processes a truncated IP address and a randomly generated client identifier.

Analytics cookies are only set after you click Accept on our cookie banner. If you decline, no analytics scripts or cookies are loaded. Our lawful basis for setting these cookies is your consent under regulation 6 of the Privacy and Electronic Communications Regulations (PECR) and Article 6(1)(a) of the UK GDPR.

You can withdraw consent at any time by clearing the tessera-cookie-consent entry in your browser's site storage, or by using your browser's cookie controls to delete cookies for this site. The banner will then reappear on your next visit.

Strictly necessary storage (e.g. remembering your cookie choice) is exempt from consent under PECR and is always set.

Under the UK GDPR you have the right to:

• Access the personal data we hold about you
• Ask us to correct inaccurate data
• Ask us to erase your data ("right to be forgotten")
• Ask us to restrict or object to our processing
• Ask us to transfer your data to you or another controller (portability)
• Withdraw consent at any time, where we rely on consent

To exercise any of these rights, email hello@tesseraengineering.co.uk. We will respond within one month.

If you are unhappy with how we have handled your personal data, you have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk/make-a-complaint. We would appreciate the chance to resolve any concern before you do so.

We may update this policy from time to time. Material changes will be reflected in the "Last updated" date at the top of this page.