Privacy Policy

Last updated: 9 April 2026

1. Introduction

IAG Technology Group Ltd ("we", "our", "us") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and share your personal data when you visit our website (iagtechgroup.com) or use our services, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Data Controller

The data controller responsible for your personal data is:

IAG Technology Group Ltd
124 City Road, London, EC1V 2NX
Company No. 17141378
Email: [email protected]

3. What Personal Data We Collect

We may collect and process the following categories of personal data:

3.1 Information you provide to us

Name and email address when you contact us via email
Any other information you choose to include in correspondence

3.2 Information collected automatically

Technical data: IP address, browser type and version, operating system, time zone setting
Usage data: pages visited, time spent on pages, page interaction information

We do not currently use any third-party analytics or tracking services on this website.

3.3 TayDex platform users

Account information: name, email address, username
Usage data: platform interactions, feature usage, preferences
Technical data: device information, IP address, browser type

4. How We Use Your Personal Data

We use your personal data for the following purposes:

Purpose	Lawful Basis (UK GDPR Art. 6)
To provide and maintain our services (TayDex platform)	Performance of a contract (Art. 6(1)(b))
To respond to your enquiries and correspondence	Legitimate interests (Art. 6(1)(f))
To ensure the security and proper functioning of our website	Legitimate interests (Art. 6(1)(f))
To improve our services and user experience	Legitimate interests (Art. 6(1)(f))
To send marketing communications (only with your consent)	Consent (Art. 6(1)(a))
To comply with legal obligations	Legal obligation (Art. 6(1)(c))

5. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected:

Contact enquiries: 2 years from the date of last correspondence
TayDex account data: Duration of your account plus 1 year after account closure
Server logs: 90 days
Legal/compliance records: 7 years as required by law

6. Data Sharing

We do not sell your personal data. We may share your data with:

Service providers: Hosting providers (Hetzner Online GmbH, Germany), DNS and security services (Cloudflare, Inc., USA) who process data on our behalf under appropriate safeguards
Legal authorities: When required by law, regulation, or legal process

7. International Data Transfers

Your data may be transferred to and processed in countries outside the United Kingdom, including:

Germany: Server hosting (Hetzner) — covered by UK adequacy regulations for the EEA
United States: Cloudflare CDN/security services — transfers are subject to appropriate safeguards including Standard Contractual Clauses (SCCs) and the UK International Data Transfer Agreement (IDTA)

We ensure that any international transfer of personal data is subject to appropriate safeguards in accordance with UK GDPR Chapter 5.

8. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

Right of access (Art. 15) — You can request a copy of the personal data we hold about you
Right to rectification (Art. 16) — You can request that we correct inaccurate or incomplete data
Right to erasure (Art. 17) — You can request that we delete your personal data in certain circumstances
Right to restrict processing (Art. 18) — You can request that we limit how we use your data
Right to data portability (Art. 20) — You can request your data in a structured, machine-readable format
Right to object (Art. 21) — You can object to processing based on legitimate interests
Right to withdraw consent — Where processing is based on consent, you can withdraw it at any time

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month.

9. Cookies and Local Storage

Our website uses only essential cookies that are strictly necessary for the website to function. These cookies do not require consent under UK PECR (Privacy and Electronic Communications Regulations 2003).

9.1 Cookies

Cookie	Purpose	Duration	Type
__cf_bm	Cloudflare bot management	30 minutes	Essential (security)

9.2 Browser Local Storage

We use your browser's local storage (not cookies) to remember your cookie banner preference. This data is stored only on your device and is not transmitted to our servers.

Key	Purpose	Type
cookie_consent	Stores your cookie banner preference (accepted/rejected)	Essential
cookie_consent_date	Records when the preference was set	Essential

We do not use any analytics, advertising, or third-party tracking cookies.

10. Security

We implement appropriate technical and organisational measures to protect your personal data, including:

SSL/TLS encryption for all data in transit
Access controls and authentication
Regular security assessments
Data minimisation practices

11. Children's Privacy

Our services are not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.

12. Complaints

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Information Commissioner's Office
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Website: https://ico.org.uk/make-a-complaint/
Telephone: 0303 123 1113

13. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically.

14. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

IAG Technology Group Ltd
124 City Road, London, EC1V 2NX
Email: [email protected]