Targets Live

Privacy Policy

Last updated 5 September 2026. This policy is a draft pending legal review — every bracketed item below must be completed before it is published.

Who we are

[LEGAL ENTITY NAME] ("Targets Live", "we") operates the Targets Live platform and this website. Our registered address is [REGISTERED ADDRESS] and our company number is [COMPANY NUMBER]. For questions about this policy, or to exercise any of the rights below, write to [PRIVACY CONTACT EMAIL].

Where we decide why and how personal data is processed, we are the data controller. Where we process data on behalf of a customer using the platform, that customer is the controller and we are their processor.

What we collect

When you use this website

  • Your email address, if you subscribe to updates.
  • Your name, email, phone, company and enquiry, if you give them to our site assistant or ask to be contacted. We also store the conversation that led to the enquiry.
  • Standard technical information your browser sends — IP address, browser and device type, pages visited — used to keep the site working and to understand which pages are read.

When you use the platform

  • Account data. Names, work email addresses, roles and permissions of the people you give access to.
  • Operational data. Whatever your organisation records in the modules you use — orders, routes, visits, attendance, payroll inputs, customer records, survey responses. Some of this is personal data about your employees and your customers. You decide what is entered; we hold it on your behalf.
  • Location data, where you enable geofenced attendance or route tracking for field staff. This is a category that requires particular care, and you are responsible for informing the staff concerned and establishing a lawful basis for it.
  • Usage data. Logs of access to the system, retained so that access is auditable.

Why we process it, and on what basis

  • To provide the platform — performance of our contract with you.
  • To secure it — our legitimate interest in preventing unauthorised access, and our legal obligations.
  • To bill you — performance of our contract, and legal obligations relating to accounting records.
  • To answer enquiries you send us — our legitimate interest in responding to people who contact us.
  • To send you updates you asked for — your consent, withdrawable at any time using the link in any message we send.

Who we share it with

We do not sell personal data. We share it only with:

  • Service providers who help us run the platform — hosting, email delivery, and, where you use the site assistant, the provider of the language model that answers. Our current sub-processors are listed at [SUB-PROCESSOR LIST LOCATION].
  • Authorities, where we are legally required to.
  • A buyer, if the business is sold, subject to the same protections.

Where it is held

Data is hosted on secure cloud infrastructure in [HOSTING REGION]. On-premise deployment is available for organisations that require data to remain on their own infrastructure. Where data is transferred outside its country of origin, we rely on [TRANSFER MECHANISM — e.g. Standard Contractual Clauses].

How long we keep it

Account and operational data is kept for as long as your subscription is active, and for [RETENTION PERIOD] after it ends, so that it can be restored or exported if you ask. Enquiry records are kept for [ENQUIRY RETENTION PERIOD]. Backups are retained for [BACKUP RETENTION PERIOD] and then overwritten.

How it is protected

  • Databases are encrypted, and hosting is secure cloud infrastructure.
  • Access is governed by role-based controls, and every access is logged and auditable.
  • Data is backed up daily.
  • Enterprise deployments are covered by SOC 2 Type II and GDPR compliance, with dedicated infrastructure and advanced security controls available.

No system is perfectly secure. If a breach affects your data we will tell you and the relevant supervisory authority within the time limits the law requires.

Your rights

Depending on where you live, you may have the right to ask us for a copy of your data, to correct it, to delete it, to restrict or object to how we use it, and to receive it in a portable form. You can also withdraw consent at any time where consent is what we rely on. Write to [PRIVACY CONTACT EMAIL] and we will respond within [RESPONSE PERIOD].

If your data is held by an organisation that uses our platform, ask them first — we act on their instructions and will refer your request to them.

You may also complain to your data protection authority. In the UK that is the Information Commissioner's Office; in the EU it is the authority for the country you live in.

Cookies

This site uses cookies that are necessary for it to work, and [ANALYTICS COOKIE DETAIL — which analytics, whether consent is required]. The site assistant stores your conversation in your own browser for the length of your visit so it is not lost if you reload; that never leaves your device unless you ask to be contacted.

Changes

We will post any change here and update the date at the top. Material changes will be notified to account holders by email.