Who we are

tinor.io is operated by Tinor (“Tinor”, “we”, “us”). We are responsible for the personal information described in this policy and decide how it is used. You can reach us about anything in this policy at contact@tinor.io.

This policy covers this website and the enquiries sent through it. Personal information handled as part of a paid Tinor service is governed by the written agreement for that service.

What we collect

Enquiries. When you send a request through our contact form, we collect your company name, your name, your work email address, the product or service you are interested in, and your confirmation that we may contact you about the request. You may also give your company website and a message. We record the time of the submission and a follow-up status (new, contacted or closed).

Emails. If you write to contact@tinor.io, we receive your email address and whatever you include in your message.

Abuse protection. To stop the form from being flooded, we limit how many requests can be sent in an hour. For this we calculate a one-way keyed hash (HMAC) of your IP address and keep it with a short-lived counter that expires after one hour and is then removed. We do not store your IP address itself, either with your enquiry or in these counters.

Technical data handled by our hosting provider. The website is delivered through Cloudflare. To deliver and protect the site, Cloudflare processes connection data such as your IP address, browser information and the pages requested, and it may ask your browser to report network errors. We do not use this data to build profiles of visitors.

What we do not collect. This website has no analytics, no advertising and no tracking cookies, and it loads no third-party tracking scripts or social media plugins. Fonts are served from tinor.io itself. There are no user accounts or payments on this website.

Please do not send confidential documents or sensitive personal information through the form or by email.

How we use it and why

To review your enquiry and reply to you about it. We rely on the consent you give on the form and, where it applies, on taking steps you have asked for before entering into an agreement with you.
To keep the website and the form secure, including rate limiting and protection against abuse. Where the applicable law requires a legal basis for this, it is our legitimate interest in keeping the service safe and available.
To meet legal obligations, where the law requires us to keep or disclose information.

We do not sell personal information, use it for advertising, add you to a mailing list, or make decisions about you based solely on automated processing. The website sends no automatic emails; when we reply to an enquiry, a member of the Tinor team writes to you.

Where it is stored and who processes it

Enquiries are stored in a database run on Cloudflare D1. Cloudflare, Inc. provides our hosting and infrastructure and processes this information on our behalf. Only authorised Tinor staff can view enquiries, through a password-protected administration area.

Emails sent to or from contact@tinor.io are handled through Zoho Mail, an email service provided by Zoho Corporation, which stores and processes those messages on our behalf.

We do not share your personal information with anyone else, except service providers who process it for us to run the website, or where we are required to do so by law.

International transfers

Cloudflare and Zoho operate internationally. Your information may therefore be processed in countries other than the one where you live, whose data protection laws may differ from those in your country. Where the applicable law requires particular steps or safeguards for such transfers, we take them.

How long we keep it

Enquiries are kept for 24 months from the date of submission. A scheduled job runs every day and automatically deletes enquiries older than that.
Emails you send us about an enquiry are kept for the same period.
Rate-limit counters expire after one hour.

We keep information longer only where the law requires it or where it is needed to establish, exercise or defend legal claims. If you ask us to delete your enquiry sooner, we will.

Cookies

Public pages of this website do not set cookies, and we do not use similar technologies to track you. The only cookie we set is a strictly necessary session cookie for authorised Tinor staff who sign in to the administration area under /admin; it is limited to that area and expires after eight hours. Because we use no optional cookies, we do not show a cookie banner.

Your rights

Depending on where you live and the law that applies to you, you may have the right to:

know what personal information we hold about you and receive a copy of it;
have inaccurate information corrected or incomplete information completed;
have your information deleted;
withdraw your consent at any time — this does not affect processing that took place before you withdrew it;
object to or ask us to restrict certain processing;
ask us to explain how we handle your personal information; and
complain to a data protection or other competent supervisory authority.

To exercise any of these rights, email contact@tinor.io. We may need to confirm your identity before acting on a request. We will respond within a reasonable time, normally within 30 days, and we do not charge for reasonable requests.

Children

This website is intended for businesses and professionals. It is not directed at children, and we do not knowingly collect personal information from anyone under 18. If you believe a child has sent us personal information, contact us and we will delete it.

Security

The website is served only over HTTPS. Access to enquiries is limited to authorised staff and protected by a password and sessions that expire. The form is protected by server-side validation and rate limits, and IP addresses are not stored. No method of transmission or storage is completely secure, but we work to protect your information and will notify you and the authorities of a security incident where the law requires it.

Changes to this policy

We may update this policy when our website or our practices change. The date at the top of this page shows when it was last updated. If we make a significant change, we will say so on this page.

Contact

Tinor
Email: contact@tinor.io

See also our Terms of Use and company information.