Who we are
Tactics Unit (“Tactics Unit”, “we”) is a software and automation studio. We are the controller of the personal data described here. Contact us about privacy at privacy@tacticsunit.com.
If you send us a request or book a call
When you use the request form at /request, book a call at /book, or email us, we collect what you give us:
- your name and email address, and optionally your website;
- what you want to accomplish, the kind of help and the tools you use, and your timing and budget range;
- for a call: the time you picked, your time zone, and whether you agreed to the call being recorded;
- basic technical data: a one-way keyed hash of your IP address (not the address itself) used for spam prevention and rate limiting, your browser’s user-agent string, the page you arrived on and any campaign (UTM) tags in the link you followed.
We use this only to reply to you, schedule and hold the call, scope and quote your project, and keep a record of the conversation. The request is assigned to one member of our team, who writes to you and runs the call. The legal basis is taking steps at your request before entering into a contract, and our legitimate interest in running and protecting our business (for example, spam prevention). We do not add you to a mailing list, and we never sell your data.
The forms are protected by Cloudflare Turnstile, which checks that you are a human. Cloudflare processes limited technical signals to do this.
We only record a call if you agreed when booking and confirm at the start of the call.
If you become a customer
We keep your contact details, proposals, invoices, approvals, messages and files for the project in the Customer Center at app.tacticsunit.com. You sign in with a one-time code sent by email; we store only a hash of the code and of your session. We never ask for your passwords: you invite us to your tools as a collaborator instead.
If we contacted you first
Short version: we may have emailed you because your business looks like one we can help. To stop hearing from us, reply “no” to any of our emails, or email privacy@tacticsunit.com. We will stop, and delete your details except for the minimum needed to make sure we never contact you again.
What we hold
Business contact information only: your name, job title or role, work email address, company name, company website, country, and notes about your business that are relevant to our services (for example, which public tools your website uses or what you sell). We also keep a record of the emails we have exchanged. We do not collect sensitive or special-category data.
Some of our emails contain a tiny image that tells us whether the email was opened, so we can see which of our messages are useful. We record only that it loaded and when, never your IP address or device. We do not use it for anyone in the UK, the EU, the EEA or Switzerland. Blocking images in your mail app turns it off.
Where it comes from
- Company websites: contact details your business publishes, such as on a contact or team page;
- Business data providers: commercial databases of business contacts that state they collect data lawfully;
- Manual research: public professional sources we look at individually, such as your company’s site, public profiles and podcast or event pages;
- Referrals: someone who knows you suggested we get in touch.
We record where each contact came from and when. We do not use scraped social-network data, lists of unknown origin, or data belonging to our clients or employers.
Why, and on what basis
We use this information to send a small number of relevant, personally written business emails about services that may help your company, and to follow up a limited number of times. Our legal basis is legitimate interest: telling businesses about relevant services in a proportionate way. We have weighed this against your interests: we contact business addresses only, keep volumes low, include a simple way to opt out in every message, and honour objections promptly. We do not contact people in jurisdictions where this type of outreach requires prior consent.
How long we keep it
If you don’t reply, we delete your details 12 months after our last contact. If you ask us to stop, we delete your details but keep your email address on a suppression list so we never contact you again. That list is kept indefinitely for that purpose only.
How to object or ask for deletion
Reply “no” (or anything like “unsubscribe” or “remove me”) to any email from us, or write to privacy@tacticsunit.com. We act on automatic opt-outs immediately and on other requests within two business days. You can also ask for a copy of what we hold about you.
Which addresses we email from
Replies to your requests, booking confirmations, reminders and everything about a project come from tacticsunit.com, from the person looking after you (for example “Name, Tactics Unit”). Replies go back into your project record. First-contact outreach is sent only from our team’s mailboxes on tacticsunit.net, so opting out of outreach never affects email about work you asked for.
This website
This site does not use advertising or tracking cookies. We may use Cloudflare Web Analytics, which counts visits without cookies and without building a profile of you. The request form remembers campaign tags and your landing page in your browser tab (session storage) so we know how you found us; this is cleared when you close the tab. Your theme choice is stored in your browser. After you book or open a manage link, we set one strictly necessary cookie so this browser can show that booking again; it holds no personal data and expires after 30 days. Fonts are loaded from Google Fonts, which receives your IP address when your browser requests them.
Who processes data for us
We use a small number of service providers, under their data-processing terms:
- Cloudflare: website hosting, database, security (Turnstile), sending and receiving email, and analytics;
- Cal.com: scheduling calls and calendar invites;
- Google Workspace: email, calendars, video calls (Google Meet) and documents;
- Paystack and Payoneer: payments, if you become a customer;
- Anthropic: an AI model we use to help summarise requests and research publicly available information about businesses. Drafts are always reviewed by a person; nothing is sent automatically.
If we start a project together, the tools used for that project are set out in the proposal.
International transfers
Our providers may process data in the United States and other countries. Where required, transfers rely on the providers’ standard contractual clauses or equivalent safeguards.
How long we keep data
- Requests and bookings that do not lead to work: 12 months from your last message.
- Customer records: for the length of our contract, then 6 years for tax and accounting.
- Outreach contacts: 12 months after last contact if there is no reply (see If we contacted you first).
- Suppression list: indefinitely, containing only what is needed to not contact you.
Your rights
Depending on where you live, you may have the right to access, correct or delete your data, to object to or restrict how we use it, to data portability, and to complain to your data protection authority. To use any of these rights, email privacy@tacticsunit.com. We may need to confirm your identity. We respond without undue delay and within one month.
Changes and contact
We will update this page when our practices change and note the date at the top. Questions: privacy@tacticsunit.com.