How personal information is used when you contact Tityra or request an MX Audit.
This website is operated by Digital Domain Technologies Ltd, trading as CogNovaMX, company number 03651124.
33 Merchant Way, York, United Kingdom, YO23 3TSFor privacy enquiries, contact info@tityra.com.
Audit requests ask for your name, work email, company, website URL, audit package and scope / type, your relationship to the website and your authorisation declaration. Organisation type and notes are optional. The request record includes a request identifier, the time of the declaration and the notice version.
General enquiries collect your name, email and enquiry details, plus a phone number if you choose to provide one. Please do not send passwords or sensitive personal information.
An audit collects content from the agreed websites, including text, HTML, links, metadata, rendered content and scan findings. This content may contain personal information such as authors' names.
Audit request details, contact information and request progress are stored in our private CRM using MongoDB Atlas. Collected website content, scan data and reports are stored in our Microsoft 365 enquiry mailbox. Access is restricted to our team.
We do not send audit content to any external AI or analysis service.
The website uses an IP address temporarily to limit abusive form submissions. Cloudflare Turnstile may process technical browser and network information for verification.
We use audit requests to respond to you, check the scope and your authority, and carry out the audit. A request does not start an automatic scan. Each report is reviewed by a member of our team before delivery. An authorisation declaration does not itself prove authority; domain-mismatched and other suspicious requests require manual checks before a report is disclosed.
We also use findings from audits to produce aggregated analysis and research about how automated systems access and interpret websites. We publish or share that analysis only in a form that does not identify you, your organisation or your website, and it does not include your contact details. You can object to this use by contacting info@tityra.com.
We use general enquiry information to respond to your message and communicate with you.
We do not sell personal information. We use the following service providers to run this website and receive requests. We provide request and audit information to service providers for these services, rather than for their own marketing purposes.
Cloudflare also uses Turnstile's technical verification signals to improve its bot detection, acting as a controller for that purpose. Its Turnstile Privacy Addendum explains this processing.
We delete audit requests, collected website content, raw scan data and reports within 90 days of report delivery. If a request ends without a report (for example, it is declined, withdrawn or not completed), we delete it within 90 days of that outcome.
If you buy a paid audit or Expert Review, we keep contracts, invoices and payment records for six years from the end of the last company financial year they relate to, or longer where UK accounting and tax rules require it. Reports and audit data are still deleted within 90 days of delivery unless we agree a longer period with you in writing, for example for repeat audits.
Aggregated analysis that does not identify you or your website is not subject to this deletion period.
Our hosting provider's server logs, which may include IP addresses and technical request details, are kept for up to 30 days.
We delete general enquiry messages and contact details within 12 months of the enquiry being closed. This lets us respond to follow-up questions and keep a record of our response. If an enquiry leads to an audit or a paid service, the relevant audit or accounting retention period above applies to those records.
Some of our service providers may process information outside the UK.
Where information is processed outside the UK, we rely on the applicable transfer protections in our providers' data processing terms. These include UK adequacy regulations (including the UK Extension to the EU-U.S. Data Privacy Framework for covered transfers) and standard contractual clauses with the UK International Data Transfer Addendum for other restricted transfers.
Contact info@tityra.com for information about the safeguards or a copy of the relevant terms.
We rely on the following lawful bases under the UK GDPR, depending on why we use your personal information.
Depending on the applicable law and lawful basis, you may have rights to access, correct or erase personal information, restrict processing, object to processing or receive a portable copy. Contact info@tityra.com to make a request.
You can object to processing based on legitimate interests. Where processing relies on consent, you can withdraw that consent. Optional analytics preferences can be changed through the cookie information page.
You can also raise a concern with the UK Information Commissioner's Office.
Tell us what you want to review, ask about a package, or discuss access to private materials.
Review the access, structure and context of your content. Reports are reviewed by a member of our team before delivery. We will confirm the scope and next steps by email.
Automated analysis, reviewed by a member of our team before delivery.
Send links or arrange access to your materials.
We confirm the coverage with you by email.
Each report is reviewed by a member of our team before delivery. We will email you about the next steps.
Share your contact details and the content you want audited.We will confirm the scope and next steps by email.
Google Analytics, delivered through Google Tag Manager, uses optional cookies to help us understand visits, audit package interest and form progress. Analytics stays off until you accept.
We save your choice in this browser’s local storage for six months, and you can change it at any time. Read our cookie information.