Tully Experience
Privacy Policy
Tully Experience is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information. It is written to be clear and straightforward. If anything is unclear, email us at hello@tullyexperience.com. This policy is intended to comply with the EU GDPR, UK GDPR, and applicable US privacy principles including the CCPA.
01Who We Are
Tully Experience ('we', 'our', or 'us') is a workplace experience and facilities management consultancy. We are the data controller for personal information collected through this website.
Contact: hello@tullyexperience.com · tullyexperience.com
02What Information We Collect
Information You Provide Directly
When you contact us, submit a form, or enquire about our services, we may collect:
- Your name and job title
- Your company name
- Your email address and phone number
- The content of your message or enquiry
- Any other information you choose to share with us
Information Collected Automatically
When you visit our website, we may automatically collect certain technical information, including:
- Your IP address (typically anonymised)
- Browser type and version
- Device type and operating system
- Pages you visit and time spent on each page
- Referring website or source
This information is collected through cookies and similar technologies. Please see Section 08 (Cookies) for details.
Information We Do Not Collect
We do not intentionally collect sensitive personal information such as racial or ethnic origin, health data, financial account details, or government identification numbers through this website. Please do not submit such information via our contact forms.
03How We Use Your Information
We use your personal information for the following purposes:
- To respond to your enquiries and communicate with you about our services
- To assess whether an engagement is a good fit for both parties
- To send you information you have specifically requested
- To send occasional updates about our work, frameworks, or resources, you can unsubscribe at any time (see Section 07)
- To improve the performance and usability of our website
- To comply with our legal obligations
We do not use your personal information for automated decision-making or profiling. We do not sell your data, and we do not share it with advertisers or data brokers.
04Third-Party Tools & Service Providers
We use a small number of trusted third-party tools to operate our website and business. We share information with them only as needed to run the service, and they are contractually bound to handle data in accordance with applicable law. The tools we currently use include:
- Website hosting & analytics: Cloudflare
- Email & contact: Resend, Google Workspace
- Scheduling: Calendly
- Analytics: Google Analytics with anonymised IP enabled
Where providers process data outside the European Economic Area (EEA) or United Kingdom, we take appropriate steps to ensure adequate protections are in place in compliance with GDPR and UK GDPR requirements.
05Legal Basis for Processing (EU & UK)
For individuals in the European Union or United Kingdom, we process your personal data on the following legal bases:
- Legitimate interests — responding to business enquiries, improving our website, and developing our services, where our interests are not overridden by your rights
- Contractual necessity — processing required to enter into or perform a contract with you
- Consent — where you have given us explicit consent, for example by opting in to receive updates from us
- Legal obligation — where we are required to process data by law
You have the right to withdraw consent at any time where consent is the legal basis for processing.
06How Long We Keep Your Information
- Enquiry and contact form data: retained for up to 24 months from last contact, unless an engagement is initiated
- Client engagement data: retained for up to 7 years following the end of an engagement, in line with standard business record-keeping obligations
- Marketing contact data: retained until you unsubscribe or ask us to remove you
- Website analytics data: retained in anonymised or aggregated form
When data is no longer needed, we will securely delete or anonymise it.
07Your Rights & Communication Choices
Marketing vs. Transactional Communications
If you have opted in to receive updates from us, you can unsubscribe at any time using the unsubscribe link in any marketing email, or by emailing hello@tullyexperience.com. Unsubscribing from marketing does not affect transactional communications. If we are in an active engagement together, we will still send messages necessary to deliver that work.
Rights Under EU and UK Data Protection Law
If you are located in the EU or UK, you have the following rights:
- Right of access — to request a copy of the personal data we hold about you
- Right to rectification — to request correction of inaccurate or incomplete data
- Right to erasure — to request deletion of your personal data, in certain circumstances
- Right to restriction — to request that we limit how we use your data
- Right to data portability — to receive your data in a structured, machine-readable format
- Right to object — to object to processing based on legitimate interests
- Right to withdraw consent — at any time, where consent is the basis for processing
To exercise any of these rights, please contact us at hello@tullyexperience.com. We will respond within one month and may need to verify your identity before fulfilling a request.
If you believe we have not handled your data correctly, you have the right to lodge a complaint with the relevant supervisory authority. In the UK, this is the Information Commissioner's Office (ICO) at ico.org.uk. In the EU, this is the data protection authority in your country of residence.
California (CCPA) Rights
If you are a California resident, you have the right to know what personal information we have collected about you, the right to delete it, the right to correct it, and the right to opt out of any sale or sharing of your personal information. We do not sell personal information. To exercise any CCPA rights, email hello@tullyexperience.com.
08Cookies
Our website may use cookies and similar tracking technologies to improve your experience and help us understand how our site is used.
- Strictly necessary cookies — required for the website to function; cannot be switched off
- Analytics cookies — help us understand how visitors interact with the website using anonymised or aggregated data
- Advertising / performance cookies — if we run advertising campaigns, we may use pixels (e.g. LinkedIn Insight Tag, Meta Pixel) to understand which ads led to enquiries; these are only placed with your consent where required by law
You can control cookies through your browser settings. Where required by applicable law, we will request your consent before setting non-essential cookies. Disabling certain cookies may affect the functionality of the website.
09Data Security
We take appropriate technical and organisational measures to protect your personal information against unauthorised access, loss, destruction, or alteration. This includes secure connections (HTTPS), access controls, and regular review of our practices.
No method of transmission over the internet is 100% secure. While we work hard to protect your data, we cannot guarantee absolute security. If we ever discover a security incident that affects your information, we will let you know promptly.
10Children's Privacy
Our website is not directed at children under the age of 16 (or 13 in the US). We do not knowingly collect personal information from children. If you believe a child has submitted personal data to us, please contact us and we will delete it promptly.
11Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal obligations. When we do, we will update the effective date at the top of this page. For material changes that affect how we use your data, we will make reasonable efforts to notify active contacts by email before the changes take effect.
12Contact & Complaints
Questions, requests, or complaints are always welcome. Please reach out directly.
Email: hello@tullyexperience.com
Website: tullyexperience.com
We aim to respond to all privacy-related requests within 30 days.
This Privacy Policy was drafted in 2026 and should be reviewed periodically as data protection law evolves. A formal legal review is recommended before scaling client operations in the EU / Netherlands.