01 Introduction
TGen Limited ("TGen", "we", "us", or "our") is a company registered in England and Wales under Company Number 15384928, with its registered office at TGen Limited, Manchester, United Kingdom.
We operate tgen.limited (the "Website") and provide TikTok live commerce, creator incubation, short-video production, and TikTok Shop operations services (collectively the "Services").
This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We are committed to handling your data responsibly and transparently.
02 Information We Collect
Information you provide directly
- Contact enquiry details: name, email address, company name, phone number, and message content submitted via our contact form
- Career application information: name, email, CV/resume, cover letter, and any other information you choose to provide
- Creator application details: social media handles, follower counts, content niche, and engagement metrics
- Newsletter subscription: email address when you subscribe to our communications
Information collected automatically
- Usage data: pages visited, time on site, referring URL, and navigation paths
- Technical data: IP address, browser type and version, device type, operating system, and screen resolution
- Performance data: page load times, error logs, and Core Web Vitals metrics (collected anonymously)
- Cookie data: preferences and session identifiers (see Cookies section below)
03 How We Use Your Information
We use the personal data we collect for the following purposes:
Responding to enquiries and providing Services
We use contact form submissions to respond to your enquiries, discuss our Services, and fulfil any contracts we enter into with you.
Processing career and creator applications
We use application information to evaluate your suitability for roles or creator programmes and to communicate with you throughout the process.
Improving our Website and Services
We analyse anonymised usage data to understand how visitors use our Website and to make improvements to content, performance, and user experience.
Marketing communications
With your explicit consent, we may send you information about our Services, case studies, and industry insights. You can unsubscribe at any time.
Legal and compliance obligations
We process data where required by law, including for fraud prevention, tax compliance, and responding to lawful requests from authorities.
04 Legal Basis for Processing (UK GDPR)
Under UK GDPR Article 6, we rely on the following legal bases for processing your personal data:
Contractual necessity (Article 6(1)(b))
Processing required to perform a contract with you or to take steps at your request prior to entering a contract.
Legitimate interests (Article 6(1)(f))
Processing necessary for our legitimate business interests — such as improving our Website, analysing performance, and fraud prevention — where these are not overridden by your interests or rights.
Consent (Article 6(1)(a))
Where you have given us clear consent to process your data for a specific purpose, such as marketing communications or optional analytics cookies.
Legal obligation (Article 6(1)(c))
Processing necessary to comply with a legal obligation, such as tax record-keeping requirements under UK law.
05 Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements.
| Data Type | Retention Period |
|---|---|
| Contact form enquiries | 3 years from last contact |
| Career applications (successful) | Duration of employment + 6 years |
| Career applications (unsuccessful) | 12 months from decision |
| Creator applications | 24 months from application |
| Financial and contract records | 7 years (HMRC requirement) |
| Website analytics data | 26 months (anonymised) |
| Marketing consent records | Until consent withdrawn + 3 years |
When data is no longer required, we securely delete or anonymise it in accordance with our data retention schedule.
06 Your Rights Under UK GDPR (Articles 15–22)
You have the following rights regarding your personal data. To exercise any of these rights, please contact us at privacy@tgen.limited. We will respond within 30 days.
Article 15
Right of Access
Request a copy of the personal data we hold about you and information about how we process it.
Article 16
Right to Rectification
Request correction of inaccurate personal data or completion of incomplete data we hold about you.
Article 17
Right to Erasure
Request deletion of your personal data where there is no compelling reason for its continued processing.
Article 18
Right to Restriction
Request restriction of processing of your personal data in certain circumstances.
Article 20
Right to Portability
Receive your personal data in a structured, machine-readable format and transmit it to another controller.
Article 21
Right to Object
Object to processing based on legitimate interests or for direct marketing purposes.
Article 22
Automated Decision-Making
Not be subject to solely automated decisions that produce significant legal effects on you.
Consent
Right to Withdraw Consent
Withdraw consent at any time where processing is based on consent, without affecting prior lawful processing.
You also have the right to lodge a complaint with the UK's supervisory authority, the Information Commissioner's Office (ICO), at ico.org.uk or by calling 0303 123 1113.
07 Cookies
Our Website uses cookies and similar tracking technologies to enhance your browsing experience and analyse Website performance. You can manage your cookie preferences via our cookie consent banner.
Strictly Necessary Cookies (Required)
Essential for the Website to function. These include session management and security cookies. Cannot be disabled.
Analytics Cookies (Optional)
Help us understand how visitors interact with our Website by collecting anonymised information about pages visited, time spent, and navigation paths.
Preference Cookies (Optional)
Remember your settings and preferences (such as cookie consent status) to provide a more personalised experience on return visits.
08 Third-Party Services
We share limited personal data with trusted third-party service providers to operate our Website and Services. All third parties are contractually required to handle your data in accordance with UK GDPR and our instructions.
Our key third-party processors include:
- Amazon Web Services (AWS) — Cloud infrastructure hosting our Website and API in the EU (Ireland/London regions)
- Google Workspace — Business email and document processing — used to receive and manage enquiry submissions
- Sentry — Application error monitoring — receives anonymised technical error data to help us fix bugs
- CloudFront (AWS) — Content delivery network for fast, reliable Website delivery
We do not sell your personal data to third parties under any circumstances.
09 International Data Transfers
Some of our third-party service providers may process your data outside the United Kingdom. Where such transfers occur, we ensure appropriate safeguards are in place, including:
- UK International Data Transfer Agreements (IDTAs) with processors outside the UK
- Transfers only to countries with UK adequacy decisions where possible
- Standard Contractual Clauses (SCCs) where no adequacy decision exists
- Regular third-party processor reviews to ensure ongoing compliance
10 Children's Privacy
Our Website and Services are intended for individuals aged 18 and over. We do not knowingly collect personal data from children under the age of 13. If you believe we have inadvertently collected data from a child, please contact us immediately at privacy@tgen.limited and we will delete the data promptly.
11 Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will notify you of any material changes by posting a prominent notice on our Website and updating the "Last updated" date at the top of this page.
We encourage you to review this Privacy Policy periodically. Your continued use of our Website after any changes constitutes your acceptance of the updated policy.
12 Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Data Protection contact:
We aim to respond to all legitimate requests within 30 calendar days. Occasionally it may take longer if your request is particularly complex or you have made multiple requests. In this case we will notify you and keep you updated.