Last updated: 29 October 2026
Who we are
Tendril Social ("we", "us") provides social media content programmes for small UK brands. We are the controller of the personal data described in this policy. If you have any questions, email tendrilsocial@hotmail.com.
What we collect
- Contact details you give us when you email us or book a call, such as your name, email address, phone number, business name and job title.
- Brand and project information you share in your brief, on calls or in feedback, such as what you sell, your audience, tone of voice, drafts, images, video and performance data from your social accounts.
- Public profile information from your brand's social media accounts, which we review as part of an audit.
- Billing details, such as invoice addresses and payment records. We do not store card details.
- Technical data when you visit this website, such as your IP address, browser type and the pages you request. This is collected by our hosting and font providers in standard server logs.
We do not knowingly collect personal data from children. Our content checks are designed to keep children's faces, names and school details out of the material we help produce.
How we use it and our lawful basis
- To reply to enquiries and run free audits, because we have a legitimate interest in responding to people who contact us.
- To deliver a programme you have bought, including strategy, scripts, reviews and reports, because it is necessary for our contract with you.
- To invoice you and keep accounting records, because we have a legal obligation to do so.
- To keep this website working and secure, because we have a legitimate interest in running a reliable site.
- To send occasional updates about our services, only where you have agreed or where you are an existing client and have not opted out. You can unsubscribe at any time.
Our use of AI tools
We use our own AI-assisted system to draft strategies, calendars and scripts. Brand and project information you share may be processed by the AI service providers that power this system. We only send what is needed for the work, we do not use your material to train our own models, and we choose providers whose business terms say they do not use customer data to train their models. A person reviews everything before it reaches you. Please do not include sensitive personal data about yourself or others in the material you send us unless we have agreed it is needed.
Who we share it with
We do not sell your personal data. We share it only with service providers who help us run the business, including:
- Netlify, which hosts this website
- Google Fonts, which provides the fonts on this website and receives your IP address when the page loads
- Calendly, which we use to book calls (its own privacy policy applies when you use it)
- Microsoft, which provides our email
- AI service providers used by our content system
- Accounting, payment and file-sharing tools we use to deliver and bill for our work
We may also share information with professional advisers, or where the law requires it.
International transfers
Some of our providers are based in, or store data in, the United States or other countries outside the UK. Where this happens, we rely on safeguards recognised under UK data protection law, such as the UK International Data Transfer Addendum, standard contractual clauses or the UK-US data bridge.
Cookies
This website does not set its own cookies or use analytics or advertising trackers. Third-party services you choose to use from this site, such as Calendly, may set their own cookies under their own policies.
How long we keep it
- Enquiries that do not lead to work: up to 12 months after our last contact.
- Client project material: for the length of the programme and up to 2 years after it ends, unless you ask us to delete it sooner.
- Invoices and accounting records: 6 years, as required by UK tax law.
Your rights
Under UK data protection law you have the right to ask us for a copy of your personal data, to correct it, to delete it, to restrict or object to how we use it, and to receive it in a portable format. Where we rely on your consent, you can withdraw it at any time. To use any of these rights, email tendrilsocial@hotmail.com. We will reply within one month.
If you are unhappy with how we have handled your data, please tell us first so we can try to put it right. You also have the right to complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
Keeping your data safe
We use reputable providers, strong passwords and two-factor authentication where available, and we limit access to client material to the people working on it.
Changes to this policy
We may update this policy from time to time. The date at the top shows when it last changed.