Privacy policy

Information We Collect

We collect the following categories of information:

1. Contact & Identity Data. Name, email address, phone number, company name, job title, postal address and other identifiers you provide when contacting us, requesting a quote, registering for an event or subscribing to our newsletter.
2. Account & Transaction Data. Billing and payment information when you purchase our services (we do not store full card data — payment is processed via trusted payment gateways).
3. Technical Data. IP address, device type, browser type & version, operating system, pages visited, time and date stamps, referral/exit pages and other information collected automatically via cookies and similar technologies.
4. Communications Data. Records of your communications with our team (email, phone recordings where lawful and disclosed, chat transcripts) for service, training and quality purposes.
5. Marketing & Preferences. Preferences you set for communications and marketing; any consents you provide.
6. Project & Service Data. Information necessary to deliver services to you — project requirements, technical specifications, invoices and contract documentation.

How We Collect Data

We collect information:

• Directly from you when you provide it (forms, email, phone, proposals, contracts).
• Automatically through your use of our website (cookies, server logs, analytics).
• From third parties and publicly available sources (business partners, public registries) where permitted by law.

Cookies & Similar Technologies

We use cookies and similar tracking technologies to operate the site, analyse usage, and personalise content. Cookies fall into categories:

• Essential: required for site operation (session, security).
• Functional: remember preferences.
• Analytics: aggregated usage to improve the site.
• Marketing: third-party cookies that deliver relevant ads.

You can manage cookie preferences via your browser; disabling cookies may reduce site functionality.

Why We Use Personal Data (Legal Bases)

Depending on the context and applicable law, we process personal data for purposes including:

• Performance of a contract: to provide services, fulfil orders, manage projects and communicate with you.
• Legitimate interests: improving services, fraud prevention, network and information security, internal operations, analytics and marketing (balanced against your rights).
• Consent: for direct marketing, cookies, and when required by law.
• Legal compliance: to comply with legal obligations and respond to lawful requests such as subpoenas.

Examples: responding to service inquiries, delivering projects, sending invoices, sending marketing emails where consented or where legitimate interest exists.

When We Share Data

We may share personal data with:

• Service providers: payment processors, cloud hosting, CRM, email and analytics providers under contracts to protect your data.
• Professional advisors: lawyers, accountants, auditors.
• Affiliates and subsidiaries for group operations and centralized services.
• Third parties in business transfers (merger, sale, reorganization) — we will require the acquirer to protect personal data.
• When required by law: to respond to lawful requests from authorities or to defend our legal rights.

We do not sell personal data to third parties for direct marketing.

International Transfers

Our infrastructure and service providers may be located outside your jurisdiction. Where data is transferred internationally, we will take appropriate steps to ensure adequate protections (standard contractual clauses, adequacy decisions, or other lawful mechanisms).

Security

We implement administrative, technical and physical safeguards to protect personal data appropriate to the risk. Access to personal data is limited to authorised personnel who need it to perform their jobs. No method of transmission over the internet or electronic storage is 100% secure — absolute security cannot be guaranteed.

Data Retention

We retain personal data only as long as necessary to fulfil the purposes explained in this policy, or as required by law. Retention periods vary by data type (e.g., accounting records retained for statutory periods; marketing data retained until consent is withdrawn or unsubscribed).

Your Rights

Where applicable, you may have rights including:

• Access to the personal data we hold about you.
• Correction of inaccurate or incomplete data.
• Deletion / erasure ("right to be forgotten") subject to legal limits.
• Restriction of processing.
• Data portability.
• Object to processing (including direct marketing).

To exercise any of these rights, contact us at info@tristoneindustries.com. We will verify your identity before fulfilling requests. If you are in a jurisdiction with supervisory authorities, you may lodge a complaint with the relevant authority.

Third-Party Links & Services

Our website may link to third-party sites and services (e.g., social platforms, partner pages). We are not responsible for the privacy practices of third parties. Review their privacy notices before providing personal data.

Children

Our Services are not directed to children under 13 (or higher age if local law requires). We do not knowingly collect personal data from children. If you believe we collected data from a child, contact us to request deletion.

Marketing Communications

We may contact you about our services, new offerings, events and updates based on your consents or our legitimate interests. You can opt out of marketing emails by clicking the unsubscribe link in emails or contacting info@tristoneindustries.com.

Changes to This Policy

We may update this policy from time to time. When changes are material we will provide a clear notice and update the effective date at the top of this page. Continued use of Services after updates constitutes acceptance of the revised policy.