Privacy policy
Last updated: 19 October 2026
This policy explains how TydeX collects and uses personal data, and the rights you have. It covers our website (tydex.ai), our free valuation, our partner programme and partner portal, and our business contact with companies, office-holders and buyers.
1. Who we are
TydeX is a trading name of Anchor Digital Ltd, a company registered in England and Wales with company number 16225031. Registered office: 12 Parklands Avenue, Goring-By-Sea, Worthing, England, BN12 4NH. ICO registration number: [ICO NUMBER].
Anchor Digital Ltd is the controller of the personal data described in this policy. You can contact us about privacy at charlie@tydex.ai.
2. What TydeX does, and what we never hold
TydeX helps companies license de-identified copies of their records to AI developers. We act as an agent. We never hold, copy, export or process the records themselves, or the personal data in them. Any export and de-identification is done by the buyer, or a provider appointed by the company or the buyer, under a contract the company signs directly with the buyer. That company is the controller of the personal data in its records, and the buyer's own privacy terms apply to what it receives.
This policy covers only the personal data that TydeX itself collects and uses.
3. The personal data we collect
Visitors to our website
- Analytics. We use Umami to count visits and see which pages are used. Umami does not use cookies and does not collect personal data. It records things like the page visited, the referring site, the browser type and the country.
- Spam protection. Our forms use Cloudflare Turnstile to check that a person, not a bot, is filling them in. Turnstile processes technical information such as your IP address and browser details for this purpose.
- Referral links. If you arrive through a partner's link (for example tydex.ai/r/ABCD123), we store the partner's code, the partner's firm name and the date in your browser's local storage for up to 90 days. This lets us credit the right partner if your company later asks for a valuation. It is not used to track you across other websites.
- Server logs. Our hosting provider keeps short-term technical logs, including IP addresses, to run and secure the site.
People who ask for a valuation
When you complete our valuation form or funnel, we collect your name, work email, company name, your role, the company's status, size, systems and years of records, any message you send us, the page you came from and any campaign codes in the link, and any partner code stored in your browser.
Partners
When you join our partner programme, we collect your name, firm, role, work email, phone number (optional) and the approximate number of business clients you work with. While you use the partner portal, we also hold:
- your partner code, sign-in records and email settings;
- the introductions you make, their stages and the fees due or paid to you;
- your bank details (account holder name, sort code and account number) and any VAT number, so we can pay you;
- counts of visits to your referral link, which contain no personal data about the visitors.
Sign-in codes are stored only in scrambled (hashed) form and expire after 10 minutes.
People at companies introduced to us
When a partner introduces a company in the partner portal, they may give us the name, role, email address and phone number of a contact at that company, with the company's agreement. If you are that contact, we use your details only to discuss the introduction with you. We will tell you that we received your details from the partner the first time we contact you.
Office-holders, company directors and buyers we contact
To find companies whose records may have value, we use public sources such as The Gazette and the Companies House register, along with professional networking sites and company websites. From these we may collect the names, roles and business contact details of insolvency practitioners, directors and staff at buyers. We use them to contact you about our services in a business context.
People who email or call us
We keep the correspondence and the contact details you give us.
4. Why we use personal data, and our lawful basis
| Purpose | Personal data | Lawful basis |
|---|---|---|
| Running and securing the website, and stopping spam | Technical data, IP address | Legitimate interests: keeping the site working and secure |
| Measuring how the website is used | Anonymous visit data (no personal data) | Not personal data |
| Crediting partners for referrals | Partner code stored in your browser | Legitimate interests: paying partners fairly for introductions |
| Responding to valuation requests, and acting for your company | Valuation details, contact details, correspondence | Legitimate interests: responding to your request and providing our service. Where you sign an engagement letter, performance of that contract |
| Running the partner programme and portal | Partner account details, introductions, sign-in records | Performance of our contract with you (the partner terms) |
| Paying partners | Bank details, VAT number, fee records | Performance of our contract with you, and legal obligation (tax and accounting records) |
| Following up introductions | Contact details given by a partner | Legitimate interests: discussing an introduction the company agreed to |
| Business development | Business contact details from public sources | Legitimate interests: telling businesses and office-holders about a service relevant to their work |
| Keeping financial records | Invoices, payments, fee records | Legal obligation |
| Dealing with complaints and legal claims | Relevant correspondence and records | Legitimate interests: protecting our legal rights |
Where we rely on legitimate interests, we have weighed our interests against yours. You can ask us for details of that assessment.
We send business emails only to corporate addresses, in line with the Privacy and Electronic Communications Regulations. Every marketing email we send lets you opt out, and we will stop straight away if you ask.
5. Who we share personal data with
We do not sell personal data. We share it only with:
- Service providers who process it on our behalf, under contract: Lovable Cloud (website hosting, database and partner portal), Resend (sending email), Cloudflare (spam protection), Umami (cookie-free analytics), our email and office software provider, and our bank (to pay partners).
- Companies House, when a partner searches for a company in the portal. Only the search words are sent, and the results are public data.
- Buyers, only with your company's agreement, and only the business contact details needed to arrange a deal. We never share the records themselves.
- Partners. If you started a valuation through a partner's link, we tell that partner your company's name and the stage it reaches. We never share your own details with them.
- Professional advisers, such as our accountant and solicitors, where needed.
- Authorities, such as HMRC, or a court or regulator, where the law requires it.
6. International transfers
Some of our service providers are based in, or store data in, the United States or other countries outside the UK. Where personal data leaves the UK, we make sure it is protected by UK adequacy regulations (including the UK-US data bridge, where the recipient is certified), or by the ICO's International Data Transfer Agreement or the UK Addendum to the EU standard contractual clauses.
7. How long we keep it
| Data | How long we keep it |
|---|---|
| Valuation requests that do not proceed | 12 months from our last contact |
| Records of companies we act for | 6 years after the engagement ends |
| Partner accounts | While your account is open, then 6 years after it closes (for fee and tax records) |
| Bank details | While your account is open, and deleted within 90 days after the last payment due to you |
| Contact details given by a partner | 12 months from our last contact, unless the introduction proceeds |
| Business development contacts | 2 years from our last contact, or until you ask us to stop |
| Sign-in codes | 10 minutes, then deleted within 24 hours |
| Server and security logs | Up to 90 days |
| Referral code in your browser | 90 days, or until you clear your browser storage |
8. Your rights
You have the right to:
- ask for a copy of your personal data;
- ask us to correct data that is wrong or incomplete;
- ask us to delete your data;
- ask us to restrict how we use your data;
- object to our use of your data where we rely on legitimate interests, including for business development, where we will stop;
- ask for data you gave us in a portable format, where we use it under a contract.
To use any of these rights, email charlie@tydex.ai. We will respond within one month. We may ask you to confirm your identity first.
9. Security
We use access controls, encryption in transit, scrambled sign-in codes, and checks on any change of partner bank details. Only people who need personal data to do their work can see it.
10. Children
Our services are for businesses. We do not knowingly collect personal data from anyone under 18.
11. Complaints
If you are unhappy with how we use your personal data, please contact us first at charlie@tydex.ai. You also have the right to complain to the Information Commissioner's Office (ICO): ico.org.uk/make-a-complaint, or 0303 123 1113.
12. Changes to this policy
We will update this policy when our services or the law change. The date at the top shows when it last changed. If we make a significant change, we will tell partners by email.