1. Who we are

Tribus Digital ("we", "us", "our") is a digital consultancy registered in England and Wales under company number 10216093. Our registered office is Premier House, Bradford Road, Cleckheaton, BD19 3TT.

We are the controller of the personal data described in this policy. This means we decide how and why your data is used.

This policy explains how we handle personal data when you visit tribusdigital.com or apply for a job with us. It is written to meet the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR).

We are registered with the Information Commissioner's Office (ICO) under number ZA585891. Our data protection leads are Adam Spry and Laura Ellis. If you have any questions, contact us at hello@tribusdigital.com.

Tribus Digital may change this policy from time to time by updating this page. This policy is effective from 12th October 2026.

2. What personal data we collect

We collect three kinds of personal data: information about how you use our website, emails you send us, and information you send us when you apply for a job.

Website visitors

• Device and browser information, such as browser type, operating system and screen size

• Approximate location, derived from your IP address (Google Analytics does not log or store full IP addresses)

• Pages you visit, how long you stay, how you arrived and what you click

• Cookie identifiers, but only if you consent to analytics cookies

People who email us

• Your name, email address and anything you include in your message. We use this only to reply to you.

Job applicants

• Your name, email address, phone number and location

• Your CV, cover letter, work history, education and qualifications

• Your right to work in the UK

• Notes and feedback from interviews and assessments

• References, if you reach the later stages of our process

• Equal opportunities information, if you choose to provide it (see section 5)

We do not knowingly collect data from anyone under 16.

3. How we use your data and our lawful basis

UK GDPR requires a lawful basis for each use of your data.

We do not sell your personal data. We do not make decisions about you using solely automated means.

4. Cookies and analytics

We use Google Analytics to understand how people use our website, but only if you accept analytics cookies. You can change your choice at any time.

Our Cookie Policy lists the cookies we use, what each one does, how long it lasts and how to manage them.

5. Job applications

We use your application data only to run our recruitment process and, if you join us, to set up your employment.

You apply by emailing us at hello@tribusdigital.com.

We may ask you to complete an optional equal opportunities form. This can include your ethnicity, sexual orientation, religion, disability or health. This is special category data. Providing it is voluntary, it will not affect your application, and we store it separately from your application. We use it only in anonymised form to monitor the fairness of our hiring.

If you tell us about a disability or health condition so we can make adjustments to interviews, we use that information only for that purpose.

We only contact your referees with your permission, and normally only once we have made you an offer.

If your application succeeds, your data moves to your employee file and our employee privacy notice will apply.

6. Who we share your data with

We share personal data only with service providers who help us run our business, and only as far as they need it. Each one acts on our instructions under a written contract.

• Google - analytics & Cookie data

• Amazon Web Services (AWS) - hosting

• Google Workspace - email hosting

7. How long we keep your data

We keep personal data only as long as we need it, then delete or anonymise it.

We keep unsuccessful applications for 6 months so we can respond to any legal claim about the recruitment decision.

8. How we protect your data

We use technical and organisational measures to protect your data from loss, misuse and unauthorised access. These include:

• Encrypting our website traffic with HTTPS

• Limiting access to application data to the people involved in hiring

• Using multi-factor authentication on our business systems

• Choosing service providers with appropriate security standards

We work to the standards set out in ISO 27001, the international standard for information security. No system is completely secure. If a breach puts your rights at high risk, we will tell you and the ICO as the law requires.

9. Your rights

Under UK GDPR you have the right to:

• Access a copy of the personal data we hold about you

• Rectification of data that is inaccurate or incomplete

• Erasure of your data in certain circumstances

• Restrict how we use your data in certain circumstances

• Object to processing based on our legitimate interests

• Data portability, receiving your data in a reusable format

• Withdraw consent at any time, where we rely on consent

To use any of these rights, email hello@tribusdigital.com. You do not usually have to pay. We will respond within one month, and may ask you to confirm your identity first. Withdrawing consent does not affect processing we carried out before you withdrew it.

10. Complaints, changes and contact

Complaints. If you are unhappy with how we handle your data, please contact us first so we can try to put it right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK data protection regulator, at ico.org.uk/make-a-complaint or on 0303 123 1113.

Changes to this policy. We may update this policy from time to time. The date at the top shows when it last changed. If we make significant changes, we will tell you on our website.

Contact us

Tribus Digital, Premier House, Bradford Road, Cleckheaton, BD19 3TT Email: hello@tribusdigital.com