Privacy policy

Who we are

This privacy policy explains how Titan ("we", "us") processes personal data when you visit titanmis.co.uk, request a demonstration, or use the TITAN Print MIS application. For UK GDPR purposes we are the controller of data collected on this marketing website. For data you enter into TITAN as a paying customer, your company is the controller and we act as the processor.

Contact for privacy enquiries: privacy@titanmis.co.uk.

Information we collect on this website

When you submit the demonstration request form we collect your name, work email address, company name and any optional details you choose to provide (telephone number, team size, message). We use this information solely to respond to your enquiry and arrange a demonstration. The legal basis is legitimate interests (responding to a business enquiry you initiated).

This site does not use third-party tracking cookies. Essential cookies required for authentication are set only when you sign in to the application.

Information processed in the TITAN application

For signed-in customers, TITAN processes business data (customers, contacts, quotes, jobs, financial documents, artwork files) on behalf of the subscribing company, which remains the data controller. Access is restricted by user accounts and role-based permissions, and each company's data is segregated within the platform by tenant isolation.

Staff account data (name, email, role, login activity) is processed so we can provide the service, enforce security controls and support your organisation. The legal basis is contractual necessity and legitimate interests in securing the platform.

Sharing and subprocessors

We use infrastructure providers to host the application, database, object storage and outbound email. These providers process data only on our instructions and under written agreements. We do not sell personal data. We may disclose data if required by law or to protect the rights, property or safety of Titan, our customers or others.

International transfers

Where a subprocessor stores or processes data outside the UK / EEA, we rely on an appropriate transfer mechanism (for example the UK International Data Transfer Agreement or European Commission standard contractual clauses) and additional safeguards where required.

Retention

Demonstration enquiries are retained for up to 24 months while relevant to a potential engagement, then deleted or anonymised. Customer application data is retained for the life of the subscription and for a limited period afterwards as needed for backup, dispute resolution and legal obligations, then deleted according to our deletion schedule or on written request from the controller.

Your rights

Under UK GDPR you may request access to, correction of, erasure of, or restriction of processing of your personal data, and you may object to processing based on legitimate interests. You may also lodge a complaint with the Information Commissioner's Office (ico.org.uk). To exercise your rights regarding marketing-site data, email privacy@titanmis.co.uk. For data held in a customer's TITAN tenant, contact that company first — they are the controller.

Security

We apply technical and organisational measures appropriate to the risk, including encrypted transport (TLS), encrypted secrets at rest, role-based access control, tenant isolation and optional virus scanning of uploaded artwork. No method of transmission or storage is completely secure; please use strong unique passwords and keep account credentials confidential.

Changes

We may update this policy from time to time. The "Last updated" date at the top of this page will change when we do. Material changes will be highlighted on this page or communicated to account administrators where appropriate.