Who is responsible
TitanX Global Ltd is responsible for the personal information it uses to run the directory and membership service. Company number 13319184. Location: Salisbury, Wiltshire, United Kingdom. Email info@titanxglobal.com for privacy questions or requests.
Information we use
We receive information you enter: account email, company name, business sector, employee count, delivery area, company types, description, website, business contact email, approximate location, uploaded images and product and service catalogue entries. A business contact’s name or email and identifiable people in photographs may be personal information. Please only upload information you are entitled to share.
Account authentication is handled through Supabase. Payment processing is handled through Stripe. We use payment and subscription references, plan, payment status and renewal information to connect a membership to a listing. TitanX does not store your full card number or card security code.
Hosting and service providers may process technical information such as IP address, browser information, request times and security logs to deliver and protect their services. We also receive information you send us when asking for help.
Why we use it
- To provide your account and requested services: we use account, listing and subscription information to perform our contract with you or take steps you request before entering one.
- To operate and protect the directory: we have legitimate interests in preventing fraud, handling support and keeping the service reliable. Where we rely on these interests, we must consider your rights and the necessity of the processing.
- To meet legal obligations: we may retain required accounting records and respond to lawful requests.
- For optional analytics, personalised suggestions and email marketing: we rely on your separate choices. Optional browsing tracking stays off until permitted. You can withdraw consent in Privacy settings. Creating an account does not by itself sign you up for marketing.
Where you act for a corporate customer rather than contracting personally, our legitimate interest in providing that company’s requested service may be the relevant basis. You do not have to provide information, but we cannot create a usable account or listing without the required details.
What other people can see
Your account email is used for account management. The business contact details you choose for a listing are intended to be visible to buyers when you publish your profile. Published information may be copied, indexed by search engines or used by others to contact you. Avoid publishing a private home address or personal contact details unless you intend to make them public.
The directory includes labelled examples and public company profiles. Publishing a profile makes its company details, business contact information, images and map location available to visitors. Local previews remain on your device until transferred to your account and can be seen by someone using the same browser profile. Existing private test profiles stay private unless their owner chooses to publish them.
Enquiries to businesses
Public enquiries pass a security check before they are delivered to the recipient’s private company inbox. Private test enquiries remain available only to the owner of the test profile.
When you send an enquiry, we store your name, reply email, company name if provided, message and the company or product you asked about. The recipient business can read it in its TitanX inbox and reply directly to your email. This sharing is necessary to deliver the enquiry you request. The recipient is responsible for how it handles your information after receiving it. Sending an enquiry does not subscribe you to marketing.
Enquiries are private to the recipient company account. Private test enquiries can only be sent to your own test profile. We retain message and delivery records to operate the inbox and protect it from abuse. Contact us to request deletion. Enquiry messages are reviewed after 12 months and removed when no longer needed, subject to unresolved requests, disputes and justified retention.
International processing
Our Supabase project is configured in the eu-central-1 region and our Resend sending domain in eu-west-1. These settings do not establish where every support, security or subprocessor operation takes place. Our providers may process information outside the United Kingdom. Where restricted international transfers occur, an applicable adequacy decision or approved contractual safeguards and any necessary supplementary measures are required. Supabase and Resend publish data processing terms that include standard contractual clauses and a UK transfer addendum where applicable. Stripe also publishes its transfer arrangements. Cloudflare describes its international processing and safeguards in its privacy policy. You can ask us for information about the safeguards relevant to your information using the contact address below. See the Supabase data processing terms, Resend data processing terms, Stripe data processing terms and Cloudflare Turnstile Privacy Addendum.
Website activity and your preferences
Our private owner overview brings together signup dates, email confirmation, recent sign in, company profiles, membership status and profile completion to operate the service. Access is restricted to authorised TitanX staff. Account and payment records do not depend on optional browsing tracking.
Website analytics, when you allow it: we count visits, searches, filter use, pricing views, selections of Featured and starts of previews, signups and checkouts. We also count business profile views, product views, website clicks and contact clicks. Our own activity records include action names, normalised search terms, selected filters, result counts and the company, product or event involved. Searches resembling contact details or credentials are redacted. We do not collect enquiry contents, passwords or card details in analytics. A random session reference connects actions and expires after 30 minutes of inactivity; it is not a buyer identity. On site pages, Google Analytics 4 also receives page views and fixed action names for listing previews, signup, directory use and checkout stages. Page paths exclude query details. If you arrive through a tagged campaign link, we share only safe campaign labels such as source, medium and campaign name, plus the referring site without its page details. Google may receive device and network information and use analytics cookies to distinguish browsers. We do not give Google your TitanX account ID or use analytics to reveal visitor identities to listed businesses. You can withdraw website analytics consent in Privacy settings. A separate optional heatmap choice loads Microsoft Clarity only on public discovery pages with no query details beyond a fixed view choice. Clarity records masked clicks and scrolling to show where visitors struggle. All page text is masked, and account, profile builder and checkout pages are excluded. Microsoft receives device and network information. Existing analytics consent alone does not enable this recording. You may turn it off in Privacy settings; an owner can also exclude this browser from both services.
The analytics service uses a daily keyed hash of the network address to limit repeated events. Raw network addresses are not stored in these activity tables. Legacy repetition records are kept for up to two days, ordered anonymous activity for up to 90 days and aggregate totals for up to 395 days, with daily cleanup. Withdrawing analytics clears browser context and removes the current session receipts. Hosting providers may separately retain security logs. Counts are indicative, may be incomplete, and do not prove an enquiry or sale.
Personalised suggestions, only when you separately agree: while you are signed in and allow this on your browser, TitanX links fixed page and action names to your account, including interest in pricing, Featured, previews and checkout. TitanX staff can use these signals to tailor suggestions and sales conversations. This does not itself authorise marketing emails. When you also allow website analytics and separately agree to personalised suggestions, your current signup and company setup session may be linked to its signed in onboarding receipt to understand setup completion. We do not link earlier sessions or unrelated browser history, reveal anonymous visitor identities or add third party advertising pixels. Activity is kept for up to 90 days, with daily cleanup. Turning this choice off in your signed in settings removes the linked browsing records. Service and payment records remain separate.
Email updates and offers: an optional signup box or your signed in Privacy settings lets you ask for TitanX listing tips, product updates and membership offers. We record the choice, date, notice version and source. You can switch emails off in Privacy settings or contact us. Marketing messages must include an unsubscribe route. Confirmation, security and requested service messages are separate from marketing.
The owner overview shows current permissions and allows private follow up notes. A stored contact address or browsing signal is not permission to contact someone. We keep preference evidence while the account exists, and a minimal suppression record where needed to honour an objection. No sales messages are sent automatically by this dashboard. Browser Do Not Track and Global Privacy Control disable optional browsing collection. .
Business prospect research
We use public exhibition directories and official company websites to identify businesses that may find TitanX relevant. Our private research records contain company details, exhibition references, source URLs, check dates and, where published on the company website, general business contact addresses. Research does not create a public listing or subscribe a company to marketing.
Our purpose is to assess relevant business opportunities and maintain accurate contact and objection records. Where these records contain personal information, we assess our legitimate interests, necessity and the effect on the individual before contact. The current research pilot does not send invitations. Public availability alone does not make an address eligible for marketing.
We remove unsuccessful prospect research after 180 days unless it has been matched to an account, when the relevant account retention rules apply. We retain a minimal protected address hash and objection reason to prevent future contact after an objection. Email info@titanxglobal.com to ask about the source of a record, correct it, object to its use or request deletion. Research records are held in Supabase and restricted to authorised TitanX administration.
How long information is kept
We apply the following schedule through scheduled cleanup and restricted staff reviews. A review checks whether information is still needed, whether a request or dispute is unresolved, and whether a legal obligation requires retention. It is not an instruction to delete every record of that age.
| Information | Period and treatment |
|---|---|
| Active Free and Featured profiles and catalogues | Kept while the account remains open. Cancelling or expiring Featured does not delete the saved catalogue. |
| Unconfirmed accounts and abandoned unpaid checkout information | Reviewed after 30 days. Eligible information is removed after 90 days without activity. Active accounts, paid purchases and unresolved claims are protected. |
| Drafts deliberately deleted by their owner and closed accounts | A 30 day recovery period, followed by erasure or anonymisation of unnecessary content. Required payment evidence and unresolved disputes are handled separately. |
| Buyer enquiries, support correspondence and sales follow up notes | Reviewed after 12 months and removed when no longer needed. Valid earlier deletion requests are considered separately. |
| Completed technical and audit records | Reviewed after 12 months. Older detail is minimised while necessary security and reconciliation evidence is retained. |
| Required accounting and payment evidence | Six years after the end of the last company financial year concerned, or longer where an applicable exception or legal hold requires it. This does not extend the retention of all profile or message content. |
| Suppression and consent evidence | Only the minimum needed to honour choices and demonstrate their handling, with an annual review. |
Our shorter technical cleanup rules still apply. Unfinished company image uploads become eligible after ten minutes and unused completed company uploads after one day, while images referenced by saved drafts or retained submissions are preserved. Unused product covers become eligible after 30 days. Unattached checkout preview files become eligible after 30 days only when Stripe confirms expiry without payment. Scheduled execution and dependency checks can introduce a delay after eligibility.
Annual renewal reminders use our email provider. Delivery events are retained for 90 days. Recipient addresses and message content are removed from completed reminder records 90 days after the renewal date. A protected address hash may be retained to prevent repeated sending after a bounce or complaint.
Browser drafts and saved previews have no automatic expiry. Delete them using the site control where offered or clear this site’s browser data. This does not erase server records. Hiding a listing, cancelling subscription renewal, closing an account and requesting erasure are separate actions.
Account erasure is handled through the privacy request process. We check saved profiles, images, messages and provider records separately, preserve justified records, and record any exceptions. Recovery copies remain restricted. Database archives rotate through a limited set of copies. Deleted image copies are reviewed after the recovery period, with older database backups, open requests and holds taken into account. Recorded deletions must be reapplied before restored information is made available. Contact us rather than assuming that clearing browser data removes server records.
Your choices and rights
Depending on the circumstances, you may ask to access, correct, erase or restrict use of your information, receive portable data, or object to processing based on legitimate interests. You can withdraw consent where processing relies on it, without affecting earlier lawful processing. These rights have legal limits; we will explain if a request cannot be fully met. We verify identity proportionately and do not ask for your password. We record the scope and outcome of your request in a restricted case record. Our internal response target is 28 days; we explain any applicable extension or justified retention. Account closure and erasure do not themselves cancel subscription renewal.
Email info@titanxglobal.com. You may also complain to the UK Information Commissioner’s Office at ico.org.uk/make-a-complaint.
The service is intended for adult business users. We do not intend to collect children’s information or make decisions with legal or similarly significant effects solely through automated profiling.
Featured offer measurement
With analytics and personalised activity consent, we record which Featured invitation was displayed, explored or led to checkout. These records stay within restricted TitanX reporting and use your business record, not enquiry contents. We do not send business identifiers or contact details to Google Analytics. Event records are retained for up to 90 days and optional attribution is removed when personalised activity consent is withdrawn. Confirmed payment and refund records are retained under our existing financial records policy, independently of optional analytics.
We remember that a publication offer has been shown so it does not repeatedly interrupt your account. Dismissed activity invitations are remembered on this device. One unfinished product may be saved on this device to resume after checkout. It is removed after a successful save or discarded when next opened more than 24 hours later.
Updates to this notice
We will update this notice as the service develops and give appropriate notice of significant changes. This version includes the retention schedule approved on 28 September 2026. The availability of paid membership is shown separately on the pricing page.