Privacy Policy

1. Who We Are

TLN is a private business network operated by The Link Network Group Ltd, a company registered in England and Wales (company number 17011961), whose registered office is at Winding Wood Farm, Ash Green Lane East, Ash, Hampshire, GU12 6JA. We are the data controller for all personal data collected through this platform. If you have any questions about this policy, please contact us.

2. Data We Collect

We collect personal data in two ways:

• Data you provide directly: Your name, email address, business name, industry, location, description, and any other information included in your profile or application.
• Data generated by your use: Login activity, session timestamps, and profile view counts. We do not track behaviour across third-party websites.

3. How We Use Your Data

We use the data we collect to:

• Verify your identity and business credentials during the application process.
• Provide and operate the TLN member platform and directory.
• Process membership payments securely via Stripe.
• Send service-related communications (e.g. approval notifications, billing receipts).
• Enforce our Terms & Conditions.

We will not send you marketing emails without your explicit consent.

4. Legal Basis for Processing

We process your personal data on the following legal bases under UK GDPR:

• Contract: Processing necessary to provide your membership.
• Legitimate interests: Preventing fraud and maintaining platform security.
• Legal obligation: Where required by applicable law.
• Consent: Where you have given explicit consent (e.g. marketing).

5. Data Sharing

We do not sell your personal data. We share your data only with:

• Stripe — for secure payment processing. Stripe's own privacy policy governs their handling of your payment data.
• Supabase — our hosted database and authentication provider, based in the EU.
• Law enforcement — where required by applicable law or court order.

6. Data Retention

We retain your personal data for as long as your account is active, plus up to 7 years after closure for accounting and legal compliance purposes. After that period, your data is securely deleted or anonymised.

7. Your Rights

Under UK GDPR you have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate or incomplete data.
• Erase your data (subject to legal retention requirements).
• Restrict or object to processing in certain circumstances.
• Data portability — receive your data in a machine-readable format.
• Withdraw consent at any time where processing is consent-based.

To exercise any of these rights, please contact us. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).

8. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. All data is encrypted in transit and at rest.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify active members by email of any material changes. Continued use of the platform after notification constitutes acceptance of the updated policy.