At a glance
- We collect what you give us in the booking form or by email, plus basic technical details to stop spam.
- We use it to reply to your enquiry and arrange your audit. That's it.
- No marketing list, we never sell your data, and no analytics or advertising cookies.
- Your enquiry is stored on a server in London, UK.
1. Who we are
TO Solutions is the trading name of Tyler O'Sullivan, a sole trader. For UK data protection law (the UK GDPR and the Data Protection Act 2018), Tyler O'Sullivan is the controller of your personal data. That means we decide how and why it's used, and we're responsible for looking after it.
- Controller
- Tyler O'Sullivan, trading as TO Solutions
- Post
- Tyler O'Sullivan, trading as TO Solutions, c/o Unit E, London Group Business Park, 715 North Circular Road, London NW2 7AH
- ICO registration
- Applied for (September 2026), number to follow
- Website
- tosolutions.co.uk
2. What we collect
When you book a free audit
The "Book a free audit" form asks for:
- About your enquiry: the services you're interested in, and optionally what takes up most of your time (free text).
- About your business: company name, team size, and optionally how many hours a week go on repetitive tasks.
- Your preferred slot: date and time for the audit call.
- Your details: name, work email and, if you choose to give it, phone number.
- Your confirmation that you're happy for us to contact you about this enquiry.
Everything is required except the fields marked optional above. We need the required details to arrange the call; without them we can't book it.
Please don't put sensitive information (for example health details) in the free-text box. We don't need it.
Technical details sent with the form
- Your IP address, which we store only as a salted one-way hash. We can't turn it back into your IP address. We use it to limit repeat submissions and block abuse.
- Your browser's user agent (the browser and device type your browser reports), which helps us spot spam and fix problems.
When you email us
If you email info@tosolutions.co.uk directly, we get your email address, name and whatever you include in your message.
Just browsing
We don't use analytics, tracking pixels or advertising tools, so we don't build a picture of how you use the site. When the page loads its fonts, your browser contacts Google (see section 4).
3. How we use it and our legal basis
Data protection law says we need a lawful basis for each use of your data. Here's ours:
| What we do | Data used | Legal basis |
|---|---|---|
| Reply to your enquiry, arrange your audit and follow it up | Form answers, contact details | Steps you've asked us to take before a possible contract, and our legitimate interest in answering enquiries |
| Keep track of enquiries in our private admin system (status, notes, follow-up reminders) | Form answers, contact details, our notes | Legitimate interests: running our business and not losing track of your enquiry |
| Stop spam and abuse, and keep the form working | Hashed IP address, browser user agent | Legitimate interests: keeping our website and systems secure |
| If you become a client: deliver our services and keep business and tax records | Contact details, project and billing information | Performance of our contract with you, and our legal obligations |
About the tick box. The tick on the form confirms you're happy for us to contact you about this enquiry. We only use your details for that enquiry. We don't add you to a mailing list, we don't send marketing, and we never sell your data.
We don't make any decisions about you by automated means alone, and we don't profile you.
5. Transfers outside the UK
Your enquiry is stored in the UK. Microsoft and Google may process data in other countries, including the USA. Where they do, the transfer is protected by safeguards recognised under UK law, such as the UK-US data bridge or the UK International Data Transfer Addendum to standard contractual clauses.
6. How long we keep it
- Enquiries that don't lead to work: 24 months after our last contact with you, then deleted.
- Client and financial records: 6 years after our work together ends, to meet tax and legal requirements.
The hashed IP address and browser details are kept with the enquiry and deleted with it. You can ask us to delete your data sooner (see section 8).
7. How we keep it safe
Enquiries are stored in our own database on a server in London. Only TO Solutions can sign in to the admin system, and it's password protected. We store IP addresses only in hashed form, and we keep no more data than we need.
8. Your rights
Under UK data protection law you have the right to:
- Access a copy of the personal data we hold about you.
- Rectification: have anything inaccurate corrected.
- Erasure: have your data deleted.
- Restriction: ask us to limit how we use your data.
- Object to us using your data on the basis of legitimate interests.
- Portability: get the data you gave us in a common, machine-readable format.
To use any of these rights, email info@tosolutions.co.uk. It's free, and we'll reply within one month. We may ask you to confirm your identity first.
9. Complaints
If you're unhappy with how we've handled your data, please tell us first at info@tosolutions.co.uk and we'll try to put it right.
You also have the right to complain to the Information Commissioner's Office (ICO), the UK data protection regulator: ico.org.uk/make-a-complaint or 0303 123 1113.
10. Changes to this policy
If we change how we use your data, we'll update this page and the "last updated" date at the top. For how the site uses cookies and browser storage, see our cookies policy.