Privacy policy

Last updated: 24 July 2026

1. Introduction

This Privacy Policy explains how T1 Camera Solutions Ltd, operating the TILTA UK online store, collects, uses, stores and discloses personal data when you visit our website, create an account, place an order, contact us, subscribe to marketing communications or otherwise use our online services.

In this Privacy Policy, “TILTA UK”, “we”, “us” and “our” refer to T1 Camera Solutions Ltd. “You” and “your” refer to visitors, customers and other individuals whose personal data we process.

This Privacy Policy applies to our website, online store and related digital services. It should be read together with our Terms and Conditions and our Cookie Policy.

2. Who We Are

The controller responsible for the processing of personal data described in this Privacy Policy is:

T1 Camera Solutions Ltd
Room 3, Unit 11
Woodlands Business Park
Ystradgynlais
Swansea
SA9 1JW
United Kingdom

Director: Huang Wan

Telephone: +44 7594 394809
Email: info@tilta.com

3. What Personal Data We Collect

“Personal data” means information relating to an identified or identifiable individual. The personal data we collect depends on how you interact with us.

3.1 Contact and Identification Data

This may include:

  • your first and last name;
  • company name;
  • billing and delivery address;
  • email address;
  • telephone number; and
  • business or tax information where required for an invoice or business transaction.

3.2 Account Data

This may include:

  • your customer account identifier;
  • login and authentication information;
  • saved addresses;
  • language, currency and regional preferences;
  • saved products or wish lists; and
  • account communication settings.

Passwords and similar authentication information are generally stored in encrypted or hashed form by the relevant account service provider. We do not ordinarily have access to your password in readable form.

3.3 Order and Transaction Data

This may include:

  • products viewed, added to your basket, ordered, returned or exchanged;
  • order numbers and order history;
  • purchase dates and amounts;
  • delivery methods and tracking information;
  • discounts, promotional codes and gift cards used;
  • refund, cancellation and return information;
  • invoice information; and
  • warranty and repair history.

3.4 Payment Data

When you make a payment, the relevant payment service provider may process information such as:

  • your selected payment method;
  • payment authorisation and confirmation;
  • billing information;
  • payment status;
  • transaction identifiers; and
  • limited payment card details, such as the card type or final digits.

Full payment card details are normally collected and processed directly by the selected payment service provider. We generally do not receive or store complete card numbers or card security codes.

3.5 Customer Service and Communication Data

This may include:

  • emails, messages and other communications sent to us;
  • customer support enquiries;
  • return, warranty and repair requests;
  • photographs, videos or files submitted in connection with a claim;
  • feedback, survey responses and complaints; and
  • records of our communications with you.

3.6 Device and Technical Data

This may include:

  • IP address;
  • device type and device identifiers;
  • browser type and version;
  • operating system;
  • screen resolution;
  • language and time-zone settings;
  • approximate location derived from your IP address;
  • referring website or campaign;
  • network and connection information; and
  • technical logs, security events and error reports.

3.7 Website Usage Data

This may include information about:

  • pages and products you view;
  • links and buttons you select;
  • search terms entered on the website;
  • the date, time and duration of visits;
  • shopping basket and checkout activity;
  • interactions with website features;
  • the source through which you reached our website; and
  • website performance and navigation behaviour.

3.8 Marketing and Preference Data

This may include:

  • newsletter subscription status;
  • marketing consent records;
  • preferred communication channels;
  • responses to marketing communications;
  • advertising and campaign interactions;
  • product interests; and
  • cookie and privacy preferences.

3.9 Reviews and User-Submitted Content

If you submit a product review, photograph, video, comment or other content, we may process:

  • the content you submit;
  • your displayed name;
  • product and order information used to verify a purchase;
  • the rating and review date; and
  • technical information used to detect fraudulent or abusive submissions.

Please do not include sensitive personal data or unnecessary information about another person in publicly visible reviews or other content.

4. How We Obtain Personal Data

We may obtain personal data from the following sources:

  • Directly from you, including when you place an order, create an account, subscribe to marketing, contact customer support, request a return or submit a review.
  • Automatically through our website, including through server logs, cookies, pixels, local storage and similar technologies.
  • From service providers, including payment providers, delivery companies, ecommerce infrastructure providers, fraud prevention services, customer support services and analytics providers.
  • From advertising and business partners, where permitted by law and, where required, with your consent.
  • From publicly available sources, where reasonably necessary for fraud prevention, legal compliance or business customer verification.

5. How and Why We Use Personal Data

We process personal data only where we have a lawful basis under the UK GDPR. The relevant lawful basis depends on the purpose and circumstances of the processing.

5.1 Processing Orders and Providing Our Services

We process personal data to:

  • display and sell products;
  • process and confirm orders;
  • collect and verify payment;
  • prepare invoices;
  • arrange delivery and provide tracking information;
  • process cancellations, returns, exchanges and refunds;
  • manage customer accounts;
  • provide requested customer services; and
  • administer warranty and repair requests.

The lawful basis is Article 6(1)(b) UK GDPR, because the processing is necessary to enter into or perform a contract with you.

5.2 Customer Support and Communications

We process contact, order and communication data to respond to enquiries, provide support, investigate complaints and maintain our customer relationship.

Depending on the nature of the enquiry, the lawful basis is Article 6(1)(b) UK GDPR or our legitimate interests under Article 6(1)(f) UK GDPR in providing effective customer service and managing business communications.

5.3 Compliance With Legal Obligations

We process personal data where necessary to:

  • comply with tax, accounting and company record-keeping obligations;
  • comply with product safety and market surveillance requirements;
  • respond to lawful requests from courts, regulators and public authorities;
  • handle statutory consumer and warranty rights;
  • comply with customs, sanctions and export requirements; and
  • maintain records of legally required consent and privacy choices.

The lawful basis is Article 6(1)(c) UK GDPR in conjunction with the relevant legal obligation.

5.4 Security, Fraud Prevention and Misuse Detection

We process personal data to:

  • protect customer accounts and transactions;
  • detect and prevent fraud, payment abuse and unauthorised access;
  • protect our website and IT systems;
  • investigate suspicious activity;
  • enforce our contractual rights; and
  • protect customers, employees and third parties.

The lawful basis is our legitimate interests under Article 6(1)(f) UK GDPR in protecting our business, website, customers and legal rights. Where processing is required by law, Article 6(1)(c) UK GDPR may also apply.

5.5 Website Operation and Technical Performance

We process technical and usage data to deliver website content, maintain security, diagnose errors, prevent misuse, balance website traffic and ensure that essential shopping functions operate correctly.

The lawful basis is our legitimate interests under Article 6(1)(f) UK GDPR in maintaining a secure and functional online store. Where processing is necessary to provide a service you have expressly requested, Article 6(1)(b) UK GDPR may also apply.

5.6 Analytics and Website Improvement

Where required, and with your consent, we use analytics technologies to understand how visitors use our website, measure website performance, identify technical problems and improve our products, content and customer experience.

The lawful basis is your consent under Article 6(1)(a) UK GDPR. You may change or withdraw your consent through our cookie preference tool.

5.7 Email and Electronic Marketing

Where you have consented, or where another lawful exception applies, we may use your contact and preference data to send newsletters, product updates, offers and other promotional communications.

The lawful basis under the UK GDPR is generally your consent under Article 6(1)(a). In appropriate circumstances, we may rely on our legitimate interests under Article 6(1)(f), including where the electronic marketing soft opt-in requirements are satisfied.

You may unsubscribe from promotional emails at any time by selecting the unsubscribe link in the relevant email or contacting us.

Unsubscribing from marketing does not prevent us from sending service-related messages concerning your account, orders, returns, warranty claims or other transactions.

5.8 Personalised Advertising and Campaign Measurement

With your consent, we may use advertising technologies to measure campaign performance, attribute visits or purchases to advertisements, create advertising audiences and display advertisements that may be more relevant to your interests.

The lawful basis is your consent under Article 6(1)(a) UK GDPR. You may change or withdraw your consent through our cookie preference tool.

5.9 Product Reviews and Customer Content

We process reviews and related information to publish customer feedback, verify purchases, moderate submissions and prevent fraudulent reviews.

The lawful basis is the performance of the service you requested under Article 6(1)(b) UK GDPR and our legitimate interests under Article 6(1)(f) in presenting genuine customer feedback and maintaining the integrity of our review system.

5.10 Establishing, Exercising and Defending Legal Claims

We may process personal data where necessary to establish, exercise or defend legal claims, resolve disputes, recover outstanding payments or enforce our agreements.

The lawful basis is our legitimate interests under Article 6(1)(f) UK GDPR in protecting and enforcing our legal rights.

6. Cookies and Similar Technologies

We use cookies and similar technologies to operate the website, remember preferences, analyse website performance and, with your consent, support advertising and personalisation.

Strictly necessary technologies may be used without consent where they are required to provide the website or a service you have expressly requested.

Non-essential preference, analytics and marketing technologies are used only after you have provided the required consent, unless a legal exemption applies.

You can accept, decline or manage non-essential cookie categories through our cookie consent banner. You may change or withdraw your consent at any time by reopening the cookie preference tool available on our website.

Further information about the categories of cookies and similar technologies we use is available in our Cookie Policy.

7. When We Share Personal Data

We share personal data only where necessary for the purposes described in this Privacy Policy, where required by law or where you have authorised us to do so.

7.1 Ecommerce and Website Infrastructure Providers

We use external providers to host and operate our online store, manage customer accounts, process checkout activity and provide related ecommerce functionality.

These providers generally process personal data on our behalf. In some circumstances, a provider may process certain information for its own purposes as an independent controller, as explained in its own privacy notice.

7.2 Payment Service Providers

We disclose payment and transaction information to the payment provider selected during checkout in order to authorise, process and manage payments, refunds and payment disputes.

Payment providers may act as independent controllers for certain activities, including identity verification, fraud prevention and compliance with financial regulation.

7.3 Warehousing, Fulfilment and Delivery Providers

We disclose necessary contact, order and delivery information to warehouses, fulfilment partners, postal operators, couriers, customs agents and other logistics providers in order to prepare, deliver, track and return products.

7.4 IT, Security and Customer Service Providers

We may use providers for cloud hosting, email delivery, customer support, system maintenance, cybersecurity, fraud detection, website monitoring, error reporting and data backup.

7.5 Analytics and Advertising Providers

Where you have provided the required consent, we may share device, usage, transaction and campaign data with analytics, advertising, affiliate and social media providers for measurement and advertising purposes.

7.6 Professional Advisers and Public Authorities

We may share personal data with accountants, auditors, insurers, banks, lawyers and other professional advisers where reasonably necessary.

We may also disclose information to courts, law enforcement agencies, regulators, tax authorities or other public bodies where required or permitted by law.

7.7 Corporate Transactions

Personal data may be disclosed in connection with a merger, acquisition, financing, restructuring, insolvency, sale of assets or similar business transaction, subject to appropriate confidentiality and data protection safeguards.

7.8 At Your Direction

We may share information with another party where you request or authorise us to do so, for example when selecting a particular payment, delivery or social media service.

8. Our Ecommerce Platform

Our online store is operated using Shopify’s ecommerce platform. Shopify processes personal data relating to your access to and use of the store in order to provide hosting, checkout, security, customer account and ecommerce infrastructure services.

Information submitted through the online store may therefore be transmitted to and processed by Shopify and its subprocessors in countries outside the United Kingdom.

Shopify generally acts as our processor when providing core store services. It may act as an independent controller for limited processing activities for which it determines the purposes and means, such as certain security, fraud prevention, platform improvement or network-level services.

Further information about Shopify’s processing is available in the Shopify Consumer Privacy Policy.

Privacy requests relating specifically to processing for which Shopify acts independently may also be submitted through the Shopify Privacy Portal.

Requests relating to your order, customer account or our use of your personal data should be directed to us using the contact details in Section 18.

9. Third-Party Websites and Embedded Content

Our website may contain links to websites, applications or services operated independently by third parties.

We are not responsible for the privacy, security or content of independent third-party services. When you leave our website or activate embedded third-party content, the relevant provider’s privacy policy and terms may apply.

Embedded videos, social media tools, maps, reviews or similar content may transmit information to the relevant provider. Where such processing is not strictly necessary, the content or related technologies will be activated only after you provide the required consent.

10. Whether You Must Provide Personal Data

You are not generally required by law to provide personal data to us. However, certain information is necessary to enter into and perform a purchase contract, process payment, deliver products, issue invoices or handle returns and warranty requests.

Where required information is not provided, we may be unable to accept an order, provide the requested service or respond fully to your request.

Information requested for optional marketing, analytics or personalisation purposes is voluntary. Refusing or withdrawing consent for these activities does not prevent you from placing an order.

11. Automated Decision-Making

We do not ordinarily make decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you.

Automated tools may be used to identify potentially fraudulent, abusive or high-risk transactions. Where an automated indication results in an order being reviewed, delayed or rejected, human review may be available where appropriate.

Where the relevant UK GDPR provisions apply, you may have the right to request human intervention, express your point of view and challenge the decision.

12. International Transfers

Some of our service providers, corporate affiliates or their subprocessors may be located outside the United Kingdom. Personal data may therefore be transferred to or accessed from countries whose data protection laws differ from those in the UK.

Where we make a restricted transfer of personal data outside the UK, we use an appropriate transfer mechanism where required, including:

  • UK adequacy regulations;
  • the UK International Data Transfer Agreement;
  • the UK International Data Transfer Addendum to the European Commission’s Standard Contractual Clauses;
  • Binding Corporate Rules;
  • another appropriate safeguard recognised under UK data protection law; or
  • a statutory exception applicable to the particular transfer.

Where required, we may also carry out a transfer risk assessment and implement supplementary contractual, organisational or technical safeguards.

You may contact us for further information about the safeguards applicable to a particular transfer.

13. How Long We Keep Personal Data

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected, including to fulfil contractual obligations, comply with legal requirements, resolve disputes and protect our legal rights.

The applicable retention period depends on factors including:

  • the nature and duration of our relationship with you;
  • whether you maintain a customer account;
  • the status of an order, return, warranty request or dispute;
  • applicable tax, accounting and company record-keeping requirements;
  • applicable limitation periods;
  • fraud prevention and security requirements; and
  • whether you have consented to ongoing processing.

Order, payment, invoice and accounting records may be retained for the applicable statutory retention period.

Customer support, return and warranty records may be retained until the relevant matter is resolved and for an additional period where necessary to establish, exercise or defend legal claims.

Customer account data is generally retained while the account remains active and for a limited period afterwards, unless longer retention is legally required or needed to resolve an outstanding matter.

Marketing data is generally retained until you withdraw consent or object to direct marketing. We may retain a limited suppression record after an opt-out to ensure that your preference continues to be respected.

Consent and privacy preference records may be retained for an appropriate period so that we can demonstrate when and how consent was obtained, changed or withdrawn.

When personal data is no longer required, it will be deleted, anonymised or securely restricted, unless continued retention is required by law.

14. Data Security

We use appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.

These measures may include:

  • encrypted transmission of information;
  • access controls and authentication measures;
  • role-based access restrictions;
  • system monitoring and logging;
  • security updates and vulnerability management;
  • backup and recovery procedures; and
  • contractual confidentiality and data protection requirements for service providers.

No method of internet transmission or electronic storage can be guaranteed to be completely secure. You should protect your account credentials and contact us promptly if you suspect unauthorised access to your account.

Please do not send payment card details, passwords or other highly sensitive information through unsecured email or public communication channels.

15. Children’s Personal Data

Our online store is intended for adults and is not directed at children.

We do not knowingly request or collect personal data directly from children who are not legally able to enter into a purchase contract or provide valid consent under applicable law.

If you are a parent or legal guardian and believe that a child has provided personal data to us without appropriate authorisation, please contact us. We will review the request and delete or restrict the information where required by law.

16. Your Data Protection Rights

Subject to the conditions and exceptions of applicable data protection law, you may have the following rights:

16.1 Right of Access

You may request confirmation as to whether we process personal data about you and obtain access to that data, together with certain information about the processing.

16.2 Right to Rectification

You may request correction of inaccurate personal data and completion of incomplete personal data.

16.3 Right to Erasure

You may request deletion of personal data where the applicable legal requirements are met.

The right to erasure does not apply where continued processing is necessary, for example to comply with a legal obligation or to establish, exercise or defend legal claims.

16.4 Right to Restriction of Processing

You may request that we restrict the processing of your personal data in certain circumstances, including while the accuracy of the data or the lawfulness of processing is being reviewed.

16.5 Right to Data Portability

Where processing is based on consent or a contract and is carried out by automated means, you may have the right to receive personal data you provided to us in a structured, commonly used and machine-readable format and to transmit it to another controller.

16.6 Right to Object

Where we process personal data on the basis of our legitimate interests, you may object to the processing on grounds relating to your particular situation.

We will stop the processing unless we demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing is necessary to establish, exercise or defend legal claims.

16.7 Right to Object to Direct Marketing

You have the right to object at any time to the processing of your personal data for direct marketing purposes, including related profiling.

Once you object, we will no longer process your personal data for those direct marketing purposes.

16.8 Right to Withdraw Consent

Where processing is based on consent, you may withdraw your consent at any time.

Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

16.9 Rights Relating to Automated Decisions

Where applicable, you may have rights relating to decisions based solely on automated processing that produce legal or similarly significant effects.

16.10 Right to Complain

You have the right to complain to the Information Commissioner’s Office if you are concerned about how we use your personal data.

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
United Kingdom

Telephone: 0303 123 1113
Website: ico.org.uk/make-a-complaint

We encourage you to contact us first so that we have an opportunity to address your concerns.

17. Exercising Your Rights

To exercise a data protection right, contact us using the details in Section 18 and clearly describe your request.

We may ask for information reasonably necessary to confirm your identity and locate the relevant records. This is intended to protect personal data from unauthorised access or disclosure.

You may authorise another person to submit a request on your behalf. We may require evidence of that person’s authority and may ask you to confirm your identity directly.

We will respond within the period required by applicable law. This is generally within one month after receiving a valid request, although the period may be extended where legally permitted for complex or numerous requests.

Requests are generally processed free of charge. Where a request is manifestly unfounded or excessive, particularly because it is repetitive, we may charge a reasonable fee or refuse to act where permitted by law.

18. Contact Us

For questions about this Privacy Policy, our processing of personal data or the exercise of your data protection rights, please contact:

T1 Camera Solutions Ltd
Room 3, Unit 11
Woodlands Business Park
Ystradgynlais
Swansea
SA9 1JW
United Kingdom

Telephone: +44 7594 394809
Email: info@tilta.com

Please include “Privacy Request” in the subject line where possible.

19. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, technologies, data processing activities or legal requirements.

The latest version will be published on this page and identified by the “Last updated” date at the top.

Where required by law, we will provide additional notice or request renewed consent before a material change takes effect.

Free Shipping Over 99 €
30-Day Return And Exchange Service
Fast Delivery
Maximum 2-year warranty