Skip to Content
Tidebridge
Talk to us

Privacy Policy

1. Who We Are

Tidebridge Ltd. Company No. 16764828

Registered Office: 10 Queen Street Place, London, EC4R 1AG

Trading Address: Swan House, 17-19 Stratford Place, W1C 1BQ, London

Tidebridge Ltd ("Tidebridge", "we", "our", "us") is the controller of the personal data described in this policy.

For anything to do with your data, email hello@tidebridge.co.uk.

2. What This Policy Covers

This policy explains what personal data we collect through this website, why we collect it, who we share it with and what rights you have. Personal data means any information that identifies you, directly or indirectly, such as your name, email address or IP address.

It does not cover the work we do for clients, which is governed by our contracts with them. Our website links to other sites that we do not control, and their own privacy policies apply.

3. What We Collect and Why

Contact form

When you use our contact form, we collect your full name, email address, phone number and message. We use them to reply to your enquiry and, if you want to work with us, to discuss that with you.

Tidebridge AI

Tidebridge AI is the assistant on some of our guides. It answers questions about the RICS standard on the responsible use of AI. Here is how it handles what you type:

  • Your conversation is held in your browser while the page is open. It is not saved, and it is gone when you close or reload the page.
  • Each time you send a message, the conversation so far goes to our server (an Azure Function run by Microsoft), which passes it to Anthropic, the company that provides the AI model, to generate the reply.
  • Our server does not save or log what you type. If something goes wrong, it records technical error details, not your conversation.
  • To stop misuse, our server keeps a temporary in-memory record of the IP address each request comes from, so it can limit how many questions can be asked in ten minutes. This is not written to a database.
  • Anthropic handles the conversation under its own commercial terms and privacy policy, which set how long it keeps that data.

Please don't enter confidential information, or personal information about other people, into the chat.

If you use "Talk to us about this", we collect your name, work email and company, and optionally your mobile number. The box to include your conversation is ticked by default: if you leave it ticked, a copy of the conversation is sent to us with your details. Untick it and we receive only your details.

Analytics

We use Google Analytics to understand how people use our website, so we can improve it. It collects information such as the pages you visit, how you arrived, how long you stay, your device and browser type, and your approximate location (worked out from your IP address). We use this in aggregate and do not use it to identify you. We have turned off Google signals and ad personalisation, so it is used for site statistics only. You can turn it off at any time. See section 5.

Fonts and hosting

Our typeface is loaded from Google Fonts, so your browser sends your IP address to Google when a page loads. Our hosting provider, Microsoft, processes your IP address and basic request details to deliver the website and keep it secure.

Emails and calls

If you email or phone us directly, we keep what you send us and use it to reply.

4. Our Lawful Bases

Under UK GDPR we need a lawful basis for each use of your data:

  • Legitimate interests: replying to enquiries, answering your questions through Tidebridge AI, and running and securing our website. We have weighed these against your interests and they are what you would expect when you contact us or use the site.
  • Steps before a contract: where you ask us about working together.
  • Legitimate interests (analytics): understanding how our website is used so we can improve it, using analytics cookies that the law allows without prior consent for this purpose alone. You can turn them off at any time.
  • Legal obligation: where the law requires us to keep or disclose information.

5. Cookies and Similar Technologies

Cookies are small files stored on your device. We use:

  • Google Analytics cookies (_ga and _ga_BN7BR0MHV5): these tell visits apart and measure how the site is used. Google sets them to last up to two years by default.
  • Tidebridge AI setting (tb-assistant-minimised, stored in your browser, not a cookie): remembers whether you minimised the assistant. It contains no personal data and never leaves your device.

The law allows analytics cookies without prior consent where they are used only to understand how a website is used and improve it, as long as you are told about them and can easily turn them off. That is the only way we use them. A notice tells you about them on your first visit, and you can turn them off with "Decline" there or with the cookie settings link at the bottom of every page. If you decline, Google Analytics stops loading and we delete its cookies. We remember your choice in your browser (tb-cookie-consent, not a cookie) for 12 months, then show the notice again. You can also block or delete cookies in your browser settings, or install Google's Analytics opt-out browser add-on. Turning them off does not affect how the site works.

6. Who We Share It With

We do not sell your personal data. We use these service providers, who process it on our behalf:

  • Microsoft (Azure Static Web Apps and Azure Functions): hosts the website and runs the Tidebridge AI server.
  • Formspree: receives and stores our form submissions and forwards them to us by email.
  • Anthropic: provides the AI model behind Tidebridge AI.
  • Google: provides Google Analytics and Google Fonts.

Each provider's own privacy policy also applies to the data it handles.

We may also disclose information where the law requires it, to protect our rights, or to a buyer or successor if our business is sold or restructured.

7. International Transfers

Google, Formspree and Anthropic are based in the United States, so your data may be processed there. Microsoft hosts our website in Europe, but is a US company and may process data in the US for support and security.

Where data leaves the UK, we rely on the safeguards UK law allows: UK adequacy regulations (including the UK Extension to the EU-US Data Privacy Framework, where the provider is certified) or the International Data Transfer Agreement or UK Addendum in the provider's data processing terms. Contact us if you would like more detail.

8. How Long We Keep It

  • Enquiries: for as long as we need them to deal with your request and any follow-up conversation, and then deleted.
  • Mailing preferences: until you ask us to stop. We keep a record that you opted out so we don't contact you again.
  • Tidebridge AI conversations: not stored by us. Anthropic's terms govern its own retention.
  • Analytics: kept by Google in line with the retention setting on our Google Analytics account.
  • Client records: if you become a client, for as long as our contract and the law require.

9. Security

We use appropriate technical and organisational measures to protect personal data, and we are certified to ISO/IEC 27001:2022. See our Trust and Security page for details. No system is completely secure, so we review our controls regularly.

10. Your Rights

Under UK GDPR you have the right to:

  • be told how your data is used (this policy)
  • access the personal data we hold about you
  • have inaccurate data corrected
  • have your data erased
  • restrict how we use your data
  • object to our use of your data, including for direct marketing at any time
  • receive your data in a portable format
  • withdraw consent at any time, where we rely on it

We do not make decisions about you based solely on automated processing. Tidebridge AI answers questions; it does not make decisions about you.

To use any of these rights, email hello@tidebridge.co.uk. There is normally no charge. We will reply within one month, or tell you within that month if we need up to two more months because your request is complex.

11. Complaints

If you are unhappy with how we have handled your data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK data protection regulator, at ico.org.uk/make-a-complaint or on 0303 123 1113.

12. Contact Details

For questions about this policy or your data, contact us:

13. Changes to This Policy

We update this policy when the way we use personal data changes. The date below shows when it last changed. If we make a significant change that affects you, we will tell you where we can.

Last updated: 03/10/2026