Privacy Policy

‍

Last updated: 26 February 2026

1. Who we are

This website is operated by Tulip Technology Limited ("Tulip", "we", "us", "our"), a company incorporated in England and Wales (registration pending).

You can contact us regarding privacy matters at: privacy@tulip.md

2. What this policy covers

This policy explains how we collect, use, store and share personal data when you visit tulip.md (the "Website"). It applies to visitors, prospective customers, and anyone who contacts us or signs up to hear from us.

We are committed to protecting your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

3. Data we collect and why

3.1 Information you give us directly

Contact forms and email enquiries We collect your name, email address, company name, job title, and message content in order to respond to your enquiry. Our lawful basis is legitimate interests (Art. 6(1)(f)).

Waitlist and early-access sign-ups We collect your name and email address to notify you when our platform launches. Our lawful basis is consent (Art. 6(1)(a)).

Newsletter and marketing sign-ups We collect your name and email address to send you updates about Tulip. Our lawful basis is consent (Art. 6(1)(a)).

3.2 Information we collect automatically

When you visit our Website, we may automatically collect:

  • Technical data – IP address, browser type and version, operating system, and device type
  • Usage data – pages visited, time spent on pages, referring URL, and clicks
  • Cookie data – see Section 7 below

We collect this data to understand how our Website is used, to improve it, and to ensure its security. Our lawful basis is legitimate interests (running a functioning, secure website).

4. How we use your data

We use personal data only for the purposes set out at the point of collection. Specifically:

  • To respond to enquiries and communicate with prospective customers
  • To notify waitlist and early-access registrants of product updates and our launch
  • To send marketing communications to people who have opted in
  • To analyse Website traffic and improve user experience
  • To comply with legal obligations

We will not use your data for automated decision-making or profiling that has a legal or significant effect on you.

5. Marketing communications

Where you have given us consent to send marketing emails, you can withdraw that consent at any time by clicking the unsubscribe link in any marketing email, or by emailing us at privacy@tulip.md.

Withdrawal of consent does not affect the lawfulness of processing before withdrawal.

6. Who we share your data with

We do not sell your personal data. We may share it with trusted third-party service providers who act as data processors on our behalf, including:

  • Website hosting and infrastructure providers
  • Email and CRM platforms (for waitlist or newsletter management)
  • Analytics providers
  • Customer support tools

All processors are required to handle your data in accordance with UK GDPR and are bound by appropriate data processing agreements.

We will only disclose personal data to third parties outside of this context if required to do so by law or a competent authority.

7. Cookies

Our Website uses cookies and similar technologies. These may include:

  • Strictly necessary cookies – required for the Website to function; no consent needed
  • Analytics cookies – help us understand how visitors use the Website (e.g. page views, session duration)
  • Preference cookies – remember your settings and choices

On your first visit, you will be presented with a cookie banner allowing you to accept or decline non-essential cookies. You can update your preferences at any time via the cookie settings link in the Website footer.

For full details of the cookies we use, please see our Cookie Policy.

8. International transfers

We aim to keep your personal data within the UK and European Economic Area (EEA). Where we use service providers based outside the UK or EEA, we ensure appropriate safeguards are in place, such as the UK International Data Transfer Agreement (IDTA) or equivalent approved mechanisms.

9. How long we keep your data

We retain personal data only for as long as necessary for the purposes described in this policy.

  • Enquiry and contact data – 2 years from last contact
  • Waitlist and sign-up data – until the purpose is fulfilled or you withdraw consent
  • Marketing consent records – 3 years from last interaction
  • Website analytics data – up to 26 months, or as configured with the analytics provider

After these periods, data is securely deleted or anonymised.

10. Your rights

Under UK GDPR, you have the following rights in relation to your personal data:

  • Right of access – to request a copy of the data we hold about you
  • Right to rectification – to ask us to correct inaccurate or incomplete data
  • Right to erasure – to ask us to delete your data in certain circumstances
  • Right to restrict processing – to ask us to limit how we use your data
  • Right to data portability – to receive your data in a structured, machine-readable format
  • Right to object – to object to processing based on legitimate interests or for direct marketing
  • Right to withdraw consent – where we rely on consent, to withdraw it at any time

To exercise any of these rights, please contact us at privacy@tulip.md. We will respond within one month. We may need to verify your identity before processing your request.

11. How to complain

If you are unhappy with how we handle your personal data, please contact us first at privacy@tulip.md and we will do our best to resolve your concern.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection, at ico.org.uk or on 0303 123 1113.

12. Data security

We take reasonable technical and organisational measures to protect your personal data from unauthorised access, loss, or disclosure. However, no internet transmission is completely secure and we cannot guarantee absolute security.

13. Third-party links

Our Website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their policies independently.

14. Children

Our Website is not directed at children under the age of 13. We do not knowingly collect personal data from children. If you believe we have inadvertently collected such data, please contact us at privacy@tulip.md and we will delete it promptly.

15. Changes to this policy

We may update this policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. We encourage you to review this policy periodically.

16. Contact us

For any questions or requests relating to this privacy policy or your personal data:

Tulip Technology Limited Email: privacy@tulip.md Website: tulip.md