1. Introduction
Tublat Ltd (hereinafter also referred to as “we,” “our,” or “tublat.com”) is
committed to protecting and respecting your privacy.
This Privacy Policy (together with our general terms and any other documents referenced herein) describes the manner in
which we process the Personal Data we collect from you or that you provide to
us.
For the purposes of this document, “Personal Data” means any information that
enables you to be identified, directly or indirectly.
We invite you to read this Privacy Policy carefully in order to understand our
policies and practices regarding your Personal Data and how we will treat it.
Tublat Ltd is the data controller of the Personal Data provided or collected in
connection with the products and services offered by tublat.com (hereinafter,
the “Services”).
The company is registered in the United Kingdom under number 16786049, with its
registered office at 40 Bowling Green Lane, London, United Kingdom, EC1R 0NE.
Tublat.com is part of a larger organization known as Tublat Ltd, whose vision
is to provide reliable and high-quality tools and products enabling businesses
and entrepreneurs to grow their activities in the digital environment.
Although this Privacy Policy is issued on behalf of tublat.com, it includes
references to the ways in which your Personal Data may be shared with other
companies belonging to the group.
2. Contact Details
For any questions regarding this Privacy Policy or our privacy practices, you
may contact our Data Protection Officer (DPO) using the following details:
• Email address: hello@tublat.com
• Postal address: Tublat Ltd, 40 Bowling Green Lane, London, United Kingdom,
EC1R 0NE
You have the right to lodge a complaint at any time with the Information
Commissioner’s Office (ICO), the UK supervisory authority for data protection (www.ico.org.uk).
However, we encourage you to contact us first to give us the opportunity to
address and resolve your concerns before approaching the ICO.
3. Information You Provide to Us
We will collect and process the following data about you:
a) Purpose of Processing
Reason
for processing: To make a purchase through tublat.com and to
maintain our business records up to date.
Data
processed: Name, address, email address, telephone number, as
well as payment information.
Legal
basis for processing:
1.
Performance of a contract between you and
us; and/or
2.
Taking pre-contractual steps at your
request;
3.
Necessity to pursue our legitimate
business interests.
Reason for processing: Managing information requests and/or correspondence received from you.
Data
processed: Contact details, including name, address, email
address, and telephone number.
Legal
basis for processing:
1.
Performance of a contract between you and
us; and/or
2.
Necessity to pursue our legitimate
business interests.
Important note: In limited circumstances (for example, for card payments), it may be
necessary to collect information from third parties, such as the cardholder or
a member of your family.
We invite you to ensure that such third parties are informed of this Privacy
Policy and that you have obtained their consent before providing us with their
personal data.
4. Fraud Detection
For security and fraud prevention purposes, we have implemented an automated
monitoring system that uses cookies and similar tracking technologies to
monitor and analyze certain user behaviors on the website, associated with IP
addresses and other browsing-related personal data.
In the event of attempted fraudulent conduct on the site (for example, repeated
use of a promotion without entitlement), we reserve the right to exclude such
individuals from the promotion or to take any necessary measures for our
protection.
5. Information We
Collect Automatically
In connection with each of your visits to our website, we will automatically
collect the following information:
a) Device
Information
Category of information collected: Device-related data.
Type of data: Internet Protocol (IP) address used to connect your
computer to the Internet, login information, browser type and version, time
zone setting, browser plug-in types and versions, operating system, and
platform.
Legal basis for processing: Necessity to pursue our legitimate business
interests (monitoring, security, and improvement of our website and services).
b) Browsing
Information
Category of information collected: Browsing data.
Type of data: Full Uniform Resource Locators (URLs), clickstream to,
through, and from our site (including date and time), products viewed or
searched for, page response times, download errors, length of visits to certain
pages, page interaction information (such as scrolling, clicks, and
mouse-overs), methods used to leave the page, and any phone number used to
contact our customer service.
Legal basis for processing: Necessity to pursue our legitimate business
interests (monitoring and improving our website and services).
6. Purposes and
Use of the Processed Data
We use the personal data in our possession for the following purposes:
• To identify you and locate the accounts you hold with us;
• To provide you with customer support;
• To allow us to review, develop, and improve our services and website;
• To perform obligations arising from contracts entered into between you and us
and to provide you with the information, products, and services you request;
• To carry out marketing activities and statistical analysis.
As part of our
legitimate business interests, we may send you promotional communications via
email relating to products or services similar to those already purchased, in
accordance with the “soft opt-in” exemption. This exemption allows us to
contact existing customers with offers relating to products or services similar
to those previously purchased. More information is available here;
• To provide you
with information about other goods and services offered, similar to those
already purchased or requested;
o We will contact you only regarding goods and services similar to those
subject to a previous sale or sales negotiation.
o If you wish to change your communication preferences to receive or not
receive certain communications, you can manage them within your Customer Area;
• To display targeted or personalized offers based on services already
purchased;
• To inform you of changes made to our services;
• To ensure that the content of our website is presented in the most effective
way for you and your device.
7. Other
Processing Activities
In addition to the specific purposes mentioned above, we may process your
Personal Data when it is necessary to:
• comply with a legal obligation to which we are subject; or
• protect your vital interests or those of another natural person.
Please do not
provide us with the Personal Data of other individuals unless you are expressly
requested to do so.
8. Information
Received from Other Sources
Tublat.com collaborates with third parties (including business partners,
service providers, and fraud prevention companies) and may receive information
about you from them.
Such information may be combined with data that you provide to us or that we
collect directly.
The combined data will be used for the purposes set out above, depending on the
type of information received.
9. Sharing of Your
Personal Data
To manage and provide the services of Tublat.com, we may share your Personal
Data with:
• Companies within our group, including subsidiaries, the parent company, and
its affiliates;
• Selected third parties, including:
o Business partners, suppliers, and subcontractors necessary for the
performance of contracts entered into with them or with you;
o Advertisers and advertising networks that require data to select and display
relevant advertisements to you on other websites. Our partners may use cookies
and similar technologies to collect information about your online activities in
order to provide you with interest-based advertising and to assess the
effectiveness of advertising campaigns;
o Entities performing analytical activities through tracking tools (cookies and
similar technologies) to verify and measure the quality and effectiveness of
our online advertising campaigns and improve the performance of the services
offered;
o The relevant registry for the domain you have purchased (where applicable).
Further details are provided in the section “Domain Registration Data in the
Public WHOIS.”
10. Disclosure of
Your Personal Data to Third Parties
We may disclose your Personal Data to third parties in the following cases:
• Corporate transactions: If we
sell or purchase a business or business unit, we may disclose your data to the
prospective buyer or seller.
• Acquisition: If Tublat Ltd or
a substantial portion of its assets is acquired by a third party, the Personal
Data held about customers will be transferred to the new owner.
• Legal compliance: If we are
under a duty to disclose or share your Personal Data in order to comply with a
legal obligation, or to enforce or apply our terms and conditions or other
agreements; or to protect the rights, property, or safety of Tublat.com, our
customers, or others. This may include exchanging information with other
companies or organizations for fraud prevention and credit risk reduction
purposes.
• ICANN or other registries compliance:
We will share your data to the extent necessary to comply with the rules,
regulations, and policies of ICANN or any national domain registries (ccTLDs)
in the event of a domain name registration through our services.
We also engage
trusted third-party providers who perform services on our behalf in connection
with the purposes described above or other purposes set out in this Privacy
Policy.
Whenever we work with such providers, we conduct compliance due diligence and
impose contractual obligations to ensure that the shared Personal Data is
adequately protected, even in the case of international transfers, and that it
may be used solely for the purposes defined under our contractual relationship.
11. Domain Registration Data in the Public WHOIS
To register a domain name, you must provide certain personal information,
including:
• Contact information: name, address, telephone number, and email;
• Identity verification: in some cases, registries may require additional
documents (e.g., identity card or passport);
• Additional contacts: some registries may require the designation of further points of
contact (e.g., for administrative or technical matters).
Your Personal Data will be used for the
following purposes:
• Verifying your identity and contact details;
• Invoicing and managing payments related to the domain registration;
• Providing customer support and assistance;
• Sending important communications relating to the registration or renewal of
the domain.
The domain Registrar, i.e., the entity
responsible for managing registrations, collects and retains your data in
compliance with applicable laws and regulations and may share it with other
registrars to complete the registration.
The Registry, responsible for the database of registered domain names, will
receive your Personal Data to keep records up to date and to ensure regulatory
compliance.
The Registrar and Registry may also be required to share your data with ICANN
(Internet Corporation for Assigned Names and Numbers) in order to comply with
the compliance policies established by that body.
The list of the competent registries for each domain extension is available on
the website https://www.iana.org/domains/root/db (“Root Zone Database”), which indicates top-level domains (TLDs),
whether generic (e.g., “.com”) or country-code (e.g., “.uk”).
The Registrar or Registry with which we cooperate for domain registrations may
publish your Personal Data in the online directory known as WHOIS, unless you
have purchased a Domain Privacy service.
a) Generic domains (.com, .net, .jobs)
If the Registrar indicated in the WHOIS belongs to our corporate group, your
Personal Data will not be published in the public WHOIS.
As an ICANN-accredited Registrar, our group is required to comply with the
WHOIS policies established by ICANN.
b) Nominet domains (.co.uk, .uk, .org.uk,
.me.uk)
Your Personal Data will not be published in the public WHOIS.
c) .IE (Ireland) domains
For registrations made as a business entity, contact details will be published
in the public WHOIS, in accordance with the rules of the .IE registry.
If, however, the registration is made as a natural person or on a
non-commercial basis, Personal Data will not be published in the WHOIS.
If the publication of your Personal Data
in the public WHOIS is mandated by ICANN, or if the policies of Nominet or the
.IE Registry change, you will be informed by an update to this Privacy Policy.
Please note that the location of the TLD Registry will determine the place of
transfer of your Personal Data, which may also occur outside the United Kingdom
if necessary for the registration of a country-code domain.
In such cases, we will adopt appropriate safeguards to ensure the protection of
your Personal Data, as described at the end of this Privacy Policy (see section
“Appropriate Safeguards”).
12. Location of Personal Data Storage
As of 1 January 2026, data will be stored on secure servers located in the
United Kingdom and/or the European Union and may be processed by personnel
operating in both geographic areas for the same operational purposes.
After 31 December 2020, with the end of the United Kingdom’s membership of the
European Union, transfers of Personal Data may occur between the United Kingdom
and the EEA (European Economic Area).
In such cases, we ensure a level of protection equivalent to that provided
under European law by adopting at least one of the safeguards approved by the
European Commission (for example, standard contractual clauses), ensuring that
data is processed securely and protected from loss or unauthorized access.
For further information on the specific mechanism for transferring your data
outside the EEA, you may contact us at hello@tublat.com.
In the event that we share your data with providers located outside the EEA (or
if an EEA provider transfers data to third countries), we will adopt protective
measures consistent with the safeguards recognized by European law.
The Tublat Ltd group, comprising several
brands and subsidiaries, may share Personal Data internally to improve
coordination, resource efficiency, marketing campaigns, and customer support.
Such exchanges will occur only to the strictly necessary extent and with
appropriate security measures aimed at preventing unauthorized access or
disclosure.
13. Usernames and Passwords
If you have been provided with (or have independently chosen) a username and
password that allow you to access certain sections of our site, you are
responsible for maintaining the confidentiality of such credentials.
You are requested not to share this information with anyone.
Misuse of access credentials by unauthorized third parties cannot be attributed
to our responsibility.
14. Transmission of Data
The transmission of information via the Internet cannot be considered
completely secure.
While we are committed to protecting your Personal Data using the highest
security standards, we cannot guarantee the absolute security of data
transmitted to our site: any transmission is at your own risk.
Once we have received the data, we will implement strict procedures and
security measures to prevent loss, misuse, or unauthorized access.
15. Processing of Minors’ Data
Our websites and services are not intended for individuals under thirteen (13)
years of age.
We will not knowingly collect or retain information relating to such
individuals.
If you believe we may have collected Personal Data of a child under the age of
13, please notify us immediately by sending an email to hello@tublat.com.
We will promptly take the necessary steps to investigate and, where
appropriate, delete such information from our records.
16. Retention
Period of Personal Data
We will retain your Personal Data for as long as necessary to provide you with
the requested services or to fulfill the purposes for which the data was
originally collected.
Additionally, we may be required to retain certain information for longer
periods where mandated by law or justified by legitimate business purposes (for
example, maintaining tax and accounting records for VAT purposes).
17. Data Subject
Rights
Under applicable data protection laws, you have certain rights in relation to
your Personal Data, which you may exercise against the data controller under
specific circumstances:
a) Right of Access
You have the right to obtain confirmation as to whether or not Personal Data
concerning you is being processed, and, where that is the case, to access such
data and related information (purposes of the processing, categories of data,
recipients, etc.).
You may also request a copy of your Personal Data.
b) Right to
Rectification
If you believe that the data we hold about you is inaccurate or incomplete, you
have the right to request that it be corrected or completed.
c) Right to
Erasure (“Right to Be Forgotten”)
In certain circumstances, you may request the erasure of your Personal Data
without undue delay.
This right applies, for example, when:
• the data is no longer necessary for the purposes for which it was collected;
• you withdraw the consent on which the processing is based;
• you object to the processing for direct marketing purposes;
• the data has been unlawfully processed.
The right to erasure does not apply where processing is necessary, among other
things, for compliance with legal obligations, the exercise of the right to
freedom of expression and information, or for the establishment, exercise, or
defense of legal claims.
d) Right to
Restriction of Processing
You have the right to obtain restriction of processing of your data in the
following cases:
• you contest the accuracy of the data (for the time necessary to verify it);
• the processing is unlawful but you oppose erasure;
• the data is no longer required for our purposes but you request its retention
for the establishment or defense of legal claims;
• you have objected to processing pending verification of the grounds for
objection.
When processing is restricted, the data may be stored but not further
processed, except for legal obligations or with your authorization.
e) Right to Object
You may object to the processing of your Personal Data for reasons related to your
particular situation when processing is based on:
• the legitimate interest of the controller or third parties;
• the performance of a task carried out in the public interest.
In such a case, we will cease processing unless compelling legitimate grounds
prevail over your rights or processing is necessary for the establishment,
exercise, or defense of legal claims.
f) Right to Data
Portability
You have the right to receive your Personal Data, which you have provided to
us, in a structured, commonly used, and machine-readable format, and, where
technically feasible, to have such data transmitted directly to another
controller.
This right may be exercised when the processing is based on consent or on a
contract and is carried out by automated means.
g) Right to Lodge
a Complaint
If you believe that the processing of your Personal Data violates applicable
law, you may lodge a complaint with a competent supervisory authority, in the
place of your habitual residence, place of work, or where the alleged infringement
occurred.
h) Right to
Withdraw Consent
Where processing is based on your consent, you may withdraw it at any time,
without affecting the lawfulness of processing based on consent before its
withdrawal.
i) Right to Object
to Direct Marketing
You have the right to object at any time to the processing of your Personal
Data for direct marketing purposes.
If you exercise this right, your data will no longer be used for such purposes.
You may manage your communication preferences directly in your Customer Area.
If you wish to:
• Request access, rectification, or erasure of your Personal Data; or
• Request that your Personal Data be transferred to another entity,
you may contact us at hello@tublat.com.
Please note that,
due to Internet regulatory requirements, domain registries (such as Nominet or
ICANN) may not be able to delete your data immediately but only after a certain
period.
We reserve the right to charge a reasonable fee if your requests are manifestly
unfounded, repetitive, or excessive, or to refuse the request in such
circumstances.
We may also request additional information to verify your identity.
18. Links to
Third-Party Websites
Our website may occasionally contain links to websites belonging to partner
networks, advertisers, or affiliates.
If you access any of these websites via a link, please note that such sites
have their own privacy policies, for which we disclaim any responsibility or
liability.
We therefore encourage you to review those privacy policies before providing
any Personal Data.
19. Cookies
Our website uses cookies to distinguish you from other users.
This enables us to provide you with a better browsing experience and to improve
the overall functioning of the site.
For detailed information about the cookies we use and the purposes for which we
use them, please refer to our Cookie Policy.
20. Personal Data
Managed on Behalf of Clients
The term “Client” refers to any entity that uses the services of Tublat Ltd on
the basis of a contract entered into with us.
Our Clients may use our services to host, transmit, or process data on our
hosting platform. Such information may include Personal Data relating to their
end customers, which we will refer to as “Client Customer Data.”
We have a contractual relationship exclusively with our Clients and not
directly with the individuals to whom such data relates.
We do not collect, view, or share such data, except in the cases provided for
in the contract with the Client (Service Agreement) or where required by law or
by a court order.
This Privacy Policy does not replace or modify the specific terms and
conditions of the Service Level Agreement entered into with the Client.
In accordance with that agreement, Clients are responsible for compliance with
data protection legislation, including the adoption of appropriate security
measures (such as encryption and the confidentiality of accounts) to protect
data uploaded to our platform.
To learn how the Client collects, stores, and processes Personal Data
(including how to exercise rights of access or rectification), please contact
the Client directly or refer to the Client’s privacy policy.
Any requests or communications we receive relating to Client Customer Data will
be promptly forwarded to the relevant Client.
21. Changes to Our
Privacy Policy
Any changes to this Privacy Policy will be posted on this page.
In the event of material changes, you will be informed by email.
We encourage you to check this section periodically for any updates or changes
to our Privacy Policy.
22. Appropriate
Safeguards for International Data Transfers
Whenever we transfer your Personal Data outside the United Kingdom, we ensure
that a level of protection equivalent to that provided under European law is
maintained by applying at least one of the following safeguards:
- Transfer to countries
with an adequacy decision: we will transfer your Personal Data only to countries that the
European Commission or the UK Government has recognized as providing an
adequate level of data protection.
- Standard Contractual
Clauses (SCCs): when we use certain service providers, we rely on contracts approved
by the European Commission or the UK Government that afford the data the
same level of protection as provided within the European Union.
- Transfers to providers in
the United States: where necessary, data may be transferred if the provider adopts the
Standard Contractual Clauses (SCCs) which impose the obligation to ensure
protections equivalent to those provided under European law.
- Supplementary measures: we may implement
additional technical and organizational measures to ensure an adequate
level of protection under applicable law.
Finally,
Tublat.com has designated Tublat Ltd, with its registered office at 40 Bowling
Green Lane, London, United Kingdom, EC1R 0NE, as its representative in the
European Union for matters relating to the protection of personal data.
23. Conclusion
This Privacy Policy provides a comprehensive description of how Tublat Ltd
collects, uses, stores, and protects your Personal Data, in compliance with the
General Data Protection Regulation (EU Regulation 2016/679 – GDPR) and the
applicable UK legislation (UK GDPR).
If you have any questions, requests, or complaints, you may contact our Data
Protection Officer (DPO) at hello@tublat.com
or by post at 40 Bowling Green Lane,
London, United Kingdom, EC1R 0NE.
