Legal
Privacy Policy
This policy describes how Tripartite Genesis Group collects, uses, protects, retains and deletes personal information submitted through this website. It mirrors, in full legal language, the summary shown beneath the enquiry form on the contact page.
- Version
- 1.0
- Effective
- 30 August 2026
This policy states our current practice. It is written for clarity rather than as legal advice, and is reviewed at least annually. Where local data protection law grants you stronger rights than those described here, that law prevails.
Download the Privacy Policy (PDF, v1.0)Who is responsible
Tripartite Genesis Group ("we", "us", "the Group") is the controller of personal information collected through this website.
General privacy correspondence should be sent to hello@tripartitegenesis.com. Requests concerning a specific enquiry may also be sent to the desk address that replied to you.
Information we collect
Enquiry information you choose to submit: your name, your email address, your organisation where you provide one, the enquiry type you select, and the content of your message.
Anti-abuse signals generated by the enquiry form: a hidden field that legitimate visitors never complete, the time elapsed between the form loading and submission, and the time since your previous submission. These signals are evaluated at the moment of submission and are not stored as a profile.
Limited technical information such as browser type, device class, referring page and pages visited, where analytics is enabled. Analytics events record interface interactions only and never include the contents of form fields.
We do not knowingly collect special category data, and we ask that you do not include sensitive personal information, credentials or confidential third-party material in an enquiry message.
How we use it, and desk routing
Enquiry information is used to understand your enquiry, route it to the responsible desk, respond to you, and maintain a record of the correspondence.
The enquiry type you select determines which desk address your message is addressed to: ventures, technology, partnerships, investor relations, media, research, or general enquiries. Routing is a presentational and administrative convenience that determines the recipient address; it does not profile you, does not score you, and does not make any decision about you.
The internal criteria, thresholds and desk assignments used to route and prioritise enquiries are internal operating matters of the Group and are not published, shared with third parties, or exposed to visitors.
We do not sell or rent personal information. We do not use enquiry information for unrelated marketing, and we do not add enquirers to a mailing list without a separate, explicit request from you.
No automated decision-making producing legal or similarly significant effects is carried out on enquiry information.
Legal basis for processing
Where applicable data protection law requires a legal basis, we rely on your consent, given by ticking the consent box before submitting an enquiry, and on our legitimate interest in responding to enquiries properly addressed to us and in protecting the form against automated abuse.
You may withdraw consent at any time by contacting us. Withdrawal does not affect the lawfulness of processing carried out before withdrawal, and we may retain correspondence where a separate obligation or legitimate interest requires it.
Security measures
The website is served exclusively over HTTPS, so information submitted through it is encrypted in transit using current TLS. Security response headers are applied at the edge to reduce the risk of injection and content-injection attacks.
The enquiry form validates your input both in your browser and on our server before any message is prepared. The form then opens a pre-addressed draft in your own email client; your message is transmitted only when you choose to send it, and only through your own email provider to the routed desk address.
Received correspondence is held in the Group's business email systems, which enforce encryption in transit and at rest, individual named accounts, strong authentication including multi-factor authentication, and audit logging.
Access is restricted on a need-to-know basis. Enquiry correspondence is visible only to the desk that owns your enquiry, to any colleague explicitly brought into the conversation to answer it, and to a small number of administrators responsible for the mail systems.
No method of transmission or storage is completely secure. We continue to review our safeguards, and we will notify affected individuals and any competent authority where required by law in the event of a personal data breach.
Retention periods
Active correspondence is retained for as long as necessary to handle the matter it concerns.
Concluded enquiry correspondence is archived for up to 24 months from the last message, so that a returning enquirer receives continuity of context, and is then deleted.
Enquiries that do not progress are deleted once the conversation is closed and no follow-up is anticipated.
Where correspondence forms part of a contract, transaction or an actual or anticipated legal claim, it is retained for the period required by the applicable limitation period or legal obligation, and no longer.
Anti-abuse signals are evaluated at submission and are not retained. Analytics data, where enabled, is retained in aggregated form only.
Your rights
Subject to applicable law, you may request access to the personal information we hold about you, correction of inaccurate information, deletion of your information, restriction of or objection to processing, a portable copy of information you provided to us, and withdrawal of consent.
Exercising these rights is free of charge. We may decline or defer a request that is manifestly unfounded or excessive, or where a legal obligation requires us to retain the information, and we will explain the reason in writing.
You may also complain to the data protection authority competent for your location.
How to request access or deletion
Send a request to hello@tripartitegenesis.com with the subject line "Data request", or reply directly to the desk that handled your enquiry. Both routes are treated identically.
Please state which right you are exercising (access, correction, deletion, restriction, objection, portability, or withdrawal of consent), the email address you used when contacting us, and any detail that helps us locate the correspondence, such as the approximate date or the desk involved.
We acknowledge every request within 3 working days. We complete access and deletion requests within 30 calendar days of acknowledgement. If a request is unusually complex we will tell you within that period and complete it within a further 30 days at most.
To protect you, we may ask you to confirm the request from the email address originally used. We will not disclose information to anyone who cannot demonstrate they are the person concerned.
When a deletion request is completed we confirm in writing, and we delete the correspondence from active systems. Copies in routine encrypted backups are overwritten on the normal backup cycle and are not restored into active use.
Third parties and processors
We use hosting, content delivery, email and, where enabled, analytics providers. These providers process information on our behalf under terms requiring confidentiality, appropriate technical and organisational security measures, and processing only on our instructions.
Where information is transferred outside your jurisdiction, we rely on the recognised safeguards required by applicable law for that transfer.
We disclose personal information to a public authority only where legally compelled, and we will tell you where we are permitted to do so.
Children
This website is directed to professional and institutional audiences and is not intended for children. We do not knowingly collect information from children, and we delete any such information brought to our attention.
Changes to this policy
This policy is versioned. Each substantive change increments the version number and is recorded, with its effective date and a summary, in the version history below. The version and effective date shown at the top of this page always describe the policy currently in force.
Version history
v1.030 August 2026
Initial published policy. Establishes enquiry data categories, desk-routing purpose, retention periods, security measures, and the data access and deletion request procedure.
Contact
Questions about this document can be directed to hello@tripartitegenesis.com.