Tinkso (“Tinkso,” “we,” “us”) operates cowork.tinkso.com. We are committed to protecting the privacy of visitors, prospects, and clients. This policy describes how we collect, use, and share personal data, and your rights under applicable law, including the GDPR and UK GDPR.
Who we are
Tinkso is a specialist studio that implements Claude Cowork for mid-market teams in the US and UK. For questions about this policy or to exercise your privacy rights, contact us at privacy@tinkso.com.
Data we collect
- Contact information you submit — name, work email, company, and anything you include in a message when booking a call or emailing us.
- Technical information collected automatically when you visit — IP address, browser type and version, device type, referring URL, pages viewed, and timestamps.
- Cookies and similar technologies — strictly necessary cookies plus, where applicable, analytics cookies set only with your consent.
How we use your data
- To respond to inquiries, schedule scoping calls, and send scoped proposals.
- To operate, secure, and improve cowork.tinkso.com.
- To send occasional follow-ups about engagements you’ve asked about. We do not send unsolicited marketing email.
- To comply with legal obligations and defend legal claims.
Legal bases (EEA / UK visitors)
- Legitimate interests — running and improving our website, responding to business enquiries, and preventing abuse.
- Consent — for optional cookies and for any marketing communications you opt into.
- Contract — to provide services you engage us for.
- Legal obligation — where we’re required to retain records.
Sharing
We do not sell your personal data. We share it only with processors we rely on to operate the site and our business — hosting, analytics (where enabled with consent), email delivery, calendar scheduling, and contract management. All processors are bound by written data-processing agreements. We may disclose data where required by law.
International transfers
Personal data may be transferred to and processed in the United States and other countries outside the EEA and UK. Where required, we rely on Standard Contractual Clauses (SCCs) or other lawful transfer mechanisms.
Retention
Contact data is retained only as long as necessary for the purposes described, or as required by law. Scoping and engagement records are generally retained for up to seven years after the engagement ends. Technical logs are retained for up to 12 months.
Your rights
Subject to applicable law, you have the right to access, correct, delete, restrict, or object to processing of your personal data, and to request portability. EEA/UK residents can lodge a complaint with a supervisory authority. To exercise any right, email privacy@tinkso.com.
Security
Tinkso is SOC 2 Type II audited. We apply administrative, technical, and physical safeguards to protect personal data, including access controls, encryption in transit, and vendor security review. No system is perfectly secure; if we become aware of a personal-data breach, we will notify affected parties as required by law.
Cookies
We use strictly necessary cookies to run the site. Any analytics or measurement cookies are set only with your consent. You can manage cookie preferences through your browser.
Changes to this policy
We may update this policy from time to time. The “Updated” date at the top of the page reflects the most recent change. For material changes, we’ll post notice on this page.
Contact
Tinkso — privacy@tinkso.com. Mailing address available on request.