Privacy Policy

1. Who We Are

This Privacy Policy applies to Tangbls Ltd, a company registered in England and Wales with company number 16273221, whose registered office is at 85 Great Portland Street, London, England, W1W 7LT ("Tangbls", "we", "us", "our").

We operate the website tangbls.com and related services. We are the data controller for the personal information we collect through this website.

If you have any questions about this policy or how we handle your data, please contact us at info@tangbls.com.

2. What Information We Collect

We collect information you provide directly to us, including:

• Contact information — your name and email address when you submit a form on our website
• Investor information — investment amount ranges you indicate when requesting our pitch deck
• Gallery information — gallery name and contact details when requesting early access
• Collector information — asset class preferences when registering interest
• NDA signature — your digital signature and the timestamp when you sign our Non-Disclosure Agreement

We also collect certain technical information automatically when you visit our website, including IP address, browser type, pages visited, and referring URLs. This is collected via standard web server logs and analytics tools.

3. How We Use Your Information

We use the information we collect to:

• Respond to your enquiries and send you the materials you have requested
• Keep a record of Non-Disclosure Agreements entered into with us
• Send you updates about Tangbls, including investor updates, product news, and podcast episodes, where you have consented to receive these
• Improve and develop our website and services
• Comply with our legal obligations

4. Legal Basis for Processing

We process your personal data on the following legal bases under UK GDPR:

• Contract — where processing is necessary to perform a contract with you or take steps at your request before entering a contract
• Legitimate interests — where we have a legitimate business interest in processing your data, such as responding to investor or partner enquiries, provided this is not overridden by your interests
• Consent — where you have given us explicit consent to process your data for a specific purpose, such as receiving marketing communications
• Legal obligation — where processing is necessary to comply with our legal obligations

5. How We Share Your Information

We do not sell your personal data. We may share your information with:

• Service providers — third-party companies that help us operate our business, including our CRM provider (GoHighLevel) and email service providers. These providers are contractually obligated to protect your data
• Professional advisors — lawyers, accountants, and other advisors where necessary
• Regulatory authorities — where we are required to do so by law

6. Data Retention

We retain your personal data for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements.

NDA records are retained for a minimum of two years from the date of signing, in line with the duration of the agreement.

If you request deletion of your data, we will do so within 30 days, subject to any legal obligations to retain certain records.

7. Your Rights

Under UK GDPR, you have the following rights:

• Right of access — to request a copy of the personal data we hold about you
• Right to rectification — to request correction of inaccurate data
• Right to erasure — to request deletion of your personal data in certain circumstances
• Right to restrict processing — to request that we limit how we use your data
• Right to data portability — to receive your data in a structured, machine-readable format
• Right to object — to object to processing based on legitimate interests
• Right to withdraw consent — where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, please contact us at info@tangbls.com. We will respond within 30 days.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

8. Cookies

Our website uses cookies and similar technologies. Please see our Cookie Policy for full details of the cookies we use and how to manage them.

9. International Transfers

Some of our service providers are based outside the UK or EEA. Where we transfer personal data internationally, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the ICO.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice on our website or, where appropriate, by contacting you directly. The date at the top of this policy indicates when it was last revised.