Privacy Policy

1. Who we are

The data controller for TileLay is:

2. What personal data we collect

• Email address — when you subscribe to updates or export a cutout PDF.
• Installation experience — first-time, intermediate or professional installer (collected during export or subscription).
• Marketing consent preference — whether you agreed to be contacted for service updates.
• Project names — entered by you when exporting PDFs; stored only in the generated PDF file.
• Usage data — browser type, IP address and pages visited (via standard server logs and analytics).

We do not collect payment information, passwords or sensitive personal data through TileLay.

3. How we use your data

We use your personal data for the following purposes and legal bases under UK GDPR:

• To send you service updates (where you have given consent — Article 6(1)(a) UK GDPR).
• To generate and email PDF cutout files (performance of a service you request — Article 6(1)(b) UK GDPR).
• To improve the application (legitimate interests in maintaining and enhancing the tool — Article 6(1)(f) UK GDPR).
• To respond to enquiries (legitimate interests in customer service — Article 6(1)(f) UK GDPR).

4. Data sharing and third parties

We share your email address and subscription preferences with Brevo (formerly Sendinblue), our email marketing service provider, so they can deliver newsletters and service updates on our behalf. Brevo processes data under its own privacy policy and data-processing agreements.

We do not sell your personal data to any other third parties.

5. Data retention

We keep your email address and marketing preferences for as long as you remain subscribed, or until you ask us to delete them. If you withdraw consent, we will remove your data from our mailing list within 30 days.

PDF files generated by the application are processed locally in your browser and are not stored on our servers.

Server logs are retained for up to 12 months for security and troubleshooting purposes.

6. Cookies and local storage

TileLay uses local storage (not cookies) to remember your drawing polygon, layout settings and preferences between sessions. This data stays on your device and is never transmitted to our servers.

We may use standard analytics cookies to understand how visitors use the site. You can control or disable cookies through your browser settings.

7. Your data protection rights

Under the UK GDPR and the Data Protection Act 2018, you have the following rights:

• Right to access — request a copy of the personal data we hold about you.
• Right to rectification — ask us to correct inaccurate or incomplete data.
• Right to erasure (“right to be forgotten”) — ask us to delete your personal data.
• Right to restrict processing — ask us to limit how we use your data.
• Right to object — object to processing based on legitimate interests or direct marketing.
• Right to data portability — receive your data in a structured, commonly used format.
• Right to withdraw consent — withdraw marketing consent at any time.

To exercise any of these rights, contact us at shereen@kadtronex.co.uk. We will respond within one calendar month.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe we have mishandled your personal data.

8. Data security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure or destruction. This includes encrypted connections (HTTPS) and secure API access for third-party services.

9. International data transfers

Brevo may process your data outside the UK and European Economic Area (EEA). Where this happens, Brevo relies on standard contractual clauses or other safeguards approved under UK GDPR to ensure an adequate level of protection.

10. Changes to this privacy policy

We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. Any changes will be posted on this page with an updated "last updated" date. We encourage you to review this policy periodically.

11. Contact us

If you have any questions about this privacy policy or how we handle your data, please contact: