Privacy & Service Data

Controller for Titan's own business administration: Liam Lawther, trading as Titan Commercial Lab, 24 Athol Park, Sunderland, SR2 8BT, United Kingdom. Contact: titancommerciallab@gmail.com.

This page supplements the general Shopify privacy information for Titan Commercial Lab services and direct business outreach.

Information we use

Order and contact information needed to administer a purchase or enquiry.
Public tender references and public or properly authorised tender material supplied for a Tender Readiness Check.
A minimal non-sensitive supplier snapshot needed for tender analysis.
For Contractor Compliance Watch: customer-defined contractor names, business contact details, evidence types, document status, expiry dates, agreed chasing history and only the minimum supporting material required for the monitoring purpose.
Business contact details and relevant public business information used for proportionate business-to-business prospecting.
Communications, support requests and service-delivery records.

Why we use it

We use personal information where necessary to take steps at your request before a contract, perform the service you buy, administer orders and support, comply with legal or accounting obligations, protect the service from misuse and, where appropriate, pursue legitimate interests in relevant business-to-business prospecting and improving our service.

If we rely on legitimate interests for direct business marketing involving personal data, you have an absolute right to object to that direct marketing. We will stop and keep only the minimum suppression record needed to avoid contacting you again.

Contractor Compliance Watch — controller and processor roles

For contractor personal data that a customer supplies and instructs Titan to handle solely for the customer's monitoring purpose, the customer will ordinarily be the controller and Titan will ordinarily act as processor. The exact role depends on the actual processing activity. Where Titan acts as processor, the Contractor Data Processing Terms form part of the service arrangement and Titan processes that data only on documented customer instructions except where law requires otherwise.

The customer remains responsible for determining its lawful basis, the evidence it needs, who should be contacted and its contractor approval, competence and health-and-safety decisions. Titan does not use contractor contact details supplied for the monitoring service for Titan marketing.

Service providers and processing route

Shopify is used for storefront, order and payment infrastructure. Google/Gmail/Drive may be used for customer communications, contractor communications authorised by the customer, evidence tracking and working service records. OpenAI/ChatGPT may be used for the Tender Readiness Check as described above.

For the standard Contractor Compliance Watch pilot, Titan does not intentionally submit contractor personal data or contractor evidence files to OpenAI/ChatGPT unless the customer expressly agrees a different documented processing arrangement.

Providers may process information in more than one country. Where international transfers apply, Titan relies on the relevant provider's applicable transfer mechanism and contractual safeguards. Contact us if you want further information about safeguards relevant to a particular order.

Data minimisation and information we do not want

We ask customers to provide only information necessary for the agreed service. Do not send special-category personal data, criminal-offence data, passwords, payment-card details or unrelated personal information through the standard route. If an apparently necessary record contains sensitive information beyond the agreed purpose, contact us before sending it.

Retention

Working service data is kept only as long as reasonably needed to deliver the service, provide support, comply with documented customer instructions or resolve a dispute, and is then returned or deleted where applicable. Order, payment and administrative records may be retained longer where required for accounting, tax, legal or record-keeping purposes. Working contractor records are not treated as a permanent archive.

Where information comes from

Information may come directly from you, from Shopify when you order, from your communications with us, from contractors where the customer has authorised us to contact them, or from relevant public business/procurement sources.

Your rights

Depending on the circumstances and lawful basis, individuals may have rights including access, correction, erasure, restriction, objection and data portability. Where Titan acts only as a processor, requests relating to customer-controlled contractor data may need to be handled in cooperation with the relevant customer/controller.

You can contact titancommerciallab@gmail.com. You also have the right to complain to the UK Information Commissioner's Office if you are unhappy with how personal information is handled.

No automated compliance decisions

Titan Commercial Lab does not make final contractor approval, safety, competence or legal-compliance decisions on behalf of customers.

Changes

We may update this page when our processing route or service changes. We will not start a materially different use of customer-controlled contractor information without updating the relevant information and, where required, obtaining instructions or agreement first.