Last updated: June 2026

Introduction

Tremark Associates Limited (“Tremark”, “we”, “us” or “our”) is committed to protecting and respecting your privacy.

This Privacy Policy is our public-facing Data Privacy and Cookies Notice. It explains how we collect, use, store and share personal data when you visit our website, contact us, instruct us, supply services to us, or otherwise interact with us.

This Privacy Policy should be read together with our Terms of Use, Terms of Business and any other documents referred to within them.

www.tremark.co.uk/terms-of-use/

Who we are

Tremark Associates Limited is a company registered in England and Wales under company number 3120853. We are part of a group structure which includes Tremark ASP Limited, registered in England and Wales under company number 9653164.

Our registered and postal address is:

Tremark Associates Limited
Joshua Chambers
332 York Road
Leeds
LS9 9DN

Email: dataprotection@tremark.co.uk
Telephone: +44 (0)113 263 6466

We are registered with the Information Commissioner’s Office under registration number Z6357413.

Our role as controller or processor depends on the context in which we process personal data. This is explained below.

Our role as controller or processor

Data protection law distinguishes between a “controller” and a “processor”.

A controller decides why and how personal data is used. A processor uses personal data on behalf of, and under the instructions of, a controller.

Unless we tell you otherwise, Tremark Associates Limited is the controller of personal data collected through our website, enquiries, client onboarding, direct client instructions, supplier relationships, marketing activity, call recordings and general business administration.

In some circumstances, we may process personal data on behalf of another controller. This may include, for example, where we are instructed by a client to provide investigation, tracing, process serving, asset, surveillance or related services and the client determines the purpose of the instruction. In those cases, our role may be that of a processor, independent controller or joint controller, depending on the nature of the instruction, the information provided, and the level of decision-making required from us.

Where we act as a processor, we will process personal data in accordance with the controller’s lawful instructions, applicable data protection laws, contractual requirements and our confidentiality obligations. Where we act as a controller, we are responsible for determining the lawful basis for processing and for responding to data protection rights requests, unless another controller is responsible.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page and, where appropriate, notified to you by email.

Third-party links

Our website may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share information about you. We do not control third-party websites and are not responsible for their privacy notices, policies or practices.

What personal data we collect

Personal data means any information from which an individual can be identified. It does not include information where the identity has been removed.

Depending on our relationship with you, we may collect, use, store and share the following types of personal data:

• Identity Data, such as your name, title, username or similar identifier.
• Contact Data, such as your address, email address and telephone number.
• Financial Data, such as bank account or payment card details.
• Transaction Data, such as details of payments to and from you and services purchased from us.
• Technical Data, such as your IP address, browser type and version, device information, operating system, time zone setting and other technology used to access our website.
• Usage Data, such as information about how you use our website, services and online features.
• Marketing and Communications Data, such as your marketing preferences, communication preferences and engagement with our marketing communications.
• Special Category Data, where relevant to the services we provide, such as information relating to health, vulnerability or other sensitive circumstances.
• Publicly Available Information, including information you have made available through public platforms or records.

This list is not exhaustive and, in some cases, we may need to collect additional information for the purposes explained in this Privacy Policy.

How we collect personal data

We may collect personal data when you:

• complete forms on our website;
• contact us by telephone, email, post, website chat or any other communication method;
• request information, a quote or a service from us;
• instruct us to provide services;
• are the subject of, or otherwise connected to, services we provide for a client;
• visit or interact with our website;
• interact with our marketing emails, SMS messages, website chat, forms or landing pages;
• provide us with business card details or other contact information;
• supply goods or services to us;
• make or receive a payment; or
• are recorded during a telephone call or, in limited operational situations, by body-worn camera.

Information about other individuals

In some circumstances, we process personal data provided to us by a third party. For example, you may be the subject of, or otherwise included in, information provided to us for the purpose of services we are asked to carry out.

Where we process personal data on behalf of another controller, we will do so in accordance with that controller’s instructions, applicable data protection laws and our confidentiality obligations.

Call recording and body-worn cameras

When you call our main telephone number, we may collect your calling line identification and may record the call. We use call recordings to assess customer service, train and develop staff, review call quality and maintain a record of what was said where needed.

In certain operational situations, our field agents may use body-worn cameras. These may capture video and audio recordings. Body-worn camera recordings are used to support staff safety, evidence handling, dispute resolution, investigations and complaint handling.

How we use your personal data

We will only use your personal data where the law allows us to do so. This may include where:

you have given consent;

we need to perform a contract with you or take steps before entering into a contract;

the processing is necessary for our legitimate interests or those of a third party, provided your rights and freedoms do not override those interests;

we need to comply with a legal or regulatory obligation; or

the processing is necessary for the establishment, exercise or defence of legal claims.

We may use personal data to:

• provide our services;
• respond to enquiries and requests;
• manage client, supplier and business relationships;
• verify information and process payments;
• maintain records of services, communications and instructions;
• support investigations, tracing, process serving, asset, surveillance or related services;
• protect the safety and security of our staff, clients and others;
• improve our website, services and communications;
• send relevant marketing communications where permitted;
• manage website chat, forms and enquiry handling;
• comply with legal, regulatory, contractual and professional obligations; and
• deal with complaints, disputes, fraud prevention, security incidents or legal claims.

Information we share

We only share personal data with trusted third parties where there is a lawful reason to do so.

We may share information with:

• companies within our group;
• business partners, suppliers, contractors, agents and subcontractors involved in providing services to us or to you;
• professional advisers, insurers, auditors and legal representatives;
• payment processing providers;
• marketing, advertising, analytics, search engine, website conversion and chat technology providers;
• IT, hosting, software, security and managed service providers;
• regulators, law enforcement agencies, courts, government bodies or other authorities where required or permitted by law; and
• third parties where disclosure is necessary in connection with suspected or actual fraud, criminal activity, legal claims, safety, security or regulatory obligations.

We only provide third parties with the information they need to perform their specific services. We do not allow our service providers to use your personal data for their own purposes and only permit them to process it for specified purposes and in accordance with our instructions.

We will never sell your personal data to a third party. We will not share your personal data with a third party for their own marketing purposes without your consent.

Marketing and website tracking

We may contact you with information about our services, updates or sector developments where permitted by law. You can object to marketing at any time by contacting us or by using the unsubscribe link in our marketing emails.

We use marketing and website technologies to help us understand engagement with our website and communications.

Force24

We use Force24’s marketing automation platform. Force24 cookies are first-party cookies and help us understand audience engagement and optimise our marketing activity.

Information stored by Force24 cookies remains anonymous unless you visit our website by clicking from an email or SMS sent through Force24 and cookies are accepted, or you complete a form containing your email address on our website or a Force24 landing page.

We also use similar technologies, including tracking pixels and link tracking, to monitor engagement with emails and SMS messages.

Leadoo

We use Leadoo’s website conversion and chat technology to help us understand how visitors use our website and to respond to enquiries more effectively.

Leadoo may collect information about your visit, including pages viewed, interactions with our website and interactions with any chat or bot features. Where you provide details through a chat, bot or form, this information may be linked with your website usage to help us manage your enquiry, understand engagement with our services and improve the relevance of our communications.

Leadoo uses tracking technologies, including ETag-based tracking, to recognise repeat visits and connect activity across different browsing sessions. Leadoo processes this information on our behalf as our data processor. We remain the controller of personal data collected through our website unless otherwise stated.

Further information about Leadoo and its approach to privacy and data protection is available in Leadoo Marketing Technologies Ltd’s privacy information.

Where we store personal data

Your personal data will be stored on systems with appropriate technical and organisational security measures and controls.

Personal data collected through our website contact forms will be stored on our server and within the Contact Form Database in the secure administration area of the back end of our website.

Sometimes, we will need to share personal data with third parties and suppliers outside the UK, including in Europe or the USA.

Where we use Leadoo’s website conversion, chat and analytics technology, customer data processed through the Leadoo platform is stored in the EU, currently in Ireland. Depending on the features used, related hosting infrastructure for AI functionality may be located in Sweden or France, including Paris.

Leadoo has confirmed that customer data is not transferred outside the EU/EEA unless this is expressly selected by us, for example through a chosen integration, or otherwise approved by us in writing. Leadoo has also confirmed that personal data and other information collected in the course of providing its services is not used to train, fine-tune or improve AI models unless we expressly agree otherwise.

Where we need to transfer personal data outside the UK, we will ensure that appropriate safeguards are in place. These safeguards are designed to ensure that personal data receives an equivalent level of protection to that provided under UK data protection laws.

How long we keep personal data

We keep personal data for as long as reasonably necessary for the purpose for which it was collected and in accordance with our legal, regulatory, contractual and operational requirements.

As a general rule, we retain personal data for a minimum of six years where this is necessary for legal, contractual, audit, complaint handling or record-keeping purposes.

Body-worn camera recordings are retained for 30 days unless they are required for ongoing investigations, complaints, legal proceedings or another justified purpose.

When personal data is no longer required, we will delete it, anonymise it or securely destroy it in accordance with our data retention and destruction processes.

Data security

We use technical, administrative and physical controls to help protect personal data.

Only authorised personnel and contractors have access to personal data, and information is managed in accordance with our information security policies. We use procedures and security features designed to prevent personal data from being accidentally lost, used, accessed, altered or disclosed without authorisation.

Any payment transactions carried out by us, or by our chosen payment processing provider, will be encrypted where possible.

The transmission of information over the internet is not completely secure. Although we do our best to protect personal data, we cannot guarantee the security of information transmitted to our website. Any transmission is at your own risk.

Your rights

Where we are acting as the controller of your personal data, you may have the following rights under data protection laws:

• the right to be informed about how your personal data is used;
• the right to access the personal data we hold about you;
• the right to ask us to correct inaccurate or incomplete personal data;
• the right to ask us to delete personal data in certain circumstances;
• the right to ask us to restrict processing in certain circumstances;
• the right to object to processing in certain circumstances, including direct marketing;
• the right to data portability in certain circumstances; and
• the right not to be subject to solely automated decisions that have a legal or similarly significant effect on you.

Where we process your personal data on behalf of another controller, we will usually pass your request to that controller so they can respond.

You will not usually have to pay a fee to exercise your rights. However, we may charge a reasonable fee or refuse to comply where a request is clearly unfounded, excessive or repetitive.

We may need to request specific information from you to confirm your identity before responding to a request. We aim to respond to legitimate requests within one month, although it may take longer where a request is complex or you have made multiple requests.

Cookies and similar technologies

Cookies are small text files created and stored on your browser or device by websites you visit. They help websites operate, remember information, monitor website traffic and improve user experience.

We use cookies and similar technologies on our website for purposes including:

• operating the website;
• understanding website traffic and usage;
• improving website performance;
• remembering information between pages;
• supporting marketing activity;
• measuring engagement with emails, SMS messages, website forms and landing pages;
• serving or measuring relevant advertising; and
• supporting website chat, bot and enquiry features.

Some technologies we use, including Leadoo, may use cookies or similar technologies such as ETags to recognise a browser or device and connect activity across browsing sessions. These technologies help us understand website engagement, improve the performance of our website and respond to enquiries submitted through chat, bot or form features.

The types of cookies and similar technologies we may use include:

• Strictly necessary cookies, which are required for the operation of the website.
• Analytical or performance cookies, which help us recognise and count visitors and understand how visitors move around the website.
• Functionality cookies, which help us recognise you when you return and remember preferences.
• Targeting or advertising cookies, which record visits, pages viewed and links followed so that advertising and website content may be more relevant.

We may use cookies and similar technologies provided by services such as Google Analytics, Google Tag Manager, Microsoft Clarity, Bing/Microsoft Advertising, Force24, Perfect Audience, AppNexus/Xandr, Twitter/X and Leadoo.

Most internet browsers accept cookies automatically. You can manage or delete cookies and similar technologies through your browser settings, including by blocking cookies, deleting cookies or clearing your browser cache. If you block or delete cookies, some parts of our website may not function as intended.

Third parties may also use cookies or similar technologies over which we have no control.

Detailed cookie and tracking technology list

The cookies and similar technologies used on our Website may change from time to time. The link below sets out the main cookies and similar technologies we currently understand are used on our Website. We review and update this list periodically.

Detailed Cookie and Tracking Technology list v1.0 June 2026

Contact us

If you have any questions about this Privacy Policy, the way we process personal data or any aspect of our website, please contact:

Data Protection
Tremark Associates Limited
Joshua Chambers
332 York Road
Leeds
LS9 9DN

Email: dataprotection@tremark.co.uk
Telephone: +44 (0)113 263 6466

You also have the right to lodge a complaint with the Information Commissioner’s Office if you are unhappy with how we have handled your personal data or responded to a request.

The Information Commissioner’s Office can be contacted by calling 0303 123 1113 or by visiting the ICO website.