Privacy Policy
How Tantreak Design LLC handles information across our website, assessments, client administration, tenant-isolated CRM workspaces and client-controlled Meta and WhatsApp connections.
Policy details
Read how Tantreak Design handles this policy area and contact us if you need clarification.
Scope and who we are
Tantreak Design LLC, 8 The Green, STE A, Dover, Delaware 19901, USA (“Tantreak”, “we”) operates tantreakdesign.com, the secure connection service at connect.tantreakdesign.com, and business software made available through Tantreak product domains and approved client-branded domains. Current examples include doc.tantreakdesign.com, arch.tantreakdesign.com, hkdental.tantreakdesign.com and livingspacesinterior.tantreakdesign.com. This policy covers our public website, the Brand Audit and other assessments, enquiries and bookings, client administration and the Tantreak CRM messaging platform. Privacy contact: info@tantreakdesign.com. This policy was last updated on 6 October 2026.
Our role and the client’s role
For Tantreak’s own website, account, security, billing and service-administration data, Tantreak decides why and how information is used and acts as the responsible business or data controller. For customer, patient, prospect, appointment, project and conversation data placed in a client workspace, the clinic, architecture practice or other client normally decides the purpose and means of processing. Tantreak processes that workspace data to provide the service under the client’s instructions. Each client must give its own users and contacts any notice required for its activities.
Information we collect
Information you give us: your name, business email, phone number, company, role, website, country, enquiry content, Brand Audit and assessment answers, and booking details. Information collected automatically, subject to your cookie choices: device and browser details, approximate location (country or region, derived from your device time zone or a transient IP lookup), pages viewed, clicks, scrolls and form interactions, referral source, campaign parameters (UTM tags and ad click IDs such as fbclid and gclid) and advertising identifiers. Information we create: your Brand Audit score, priority gaps, lead score and the history of our conversations with you. CRM platform information may include workspace and staff records, customer contact details, appointments, enquiries, projects, tasks, notes, communication preferences and audit events. We do not ask website visitors for payment-card, government ID or health information.
Meta and WhatsApp platform data
When an authorised client administrator uses Meta Embedded Signup, we receive the business portfolio, WhatsApp Business Account, phone-number and configuration identifiers selected by that administrator, together with connection status, display-number details, approved templates, messages and delivery events needed to provide the service. Authorisation credentials are kept in server-side systems and are not displayed to other clients. We do not ask clients to send us their Meta password.
How and why we use information
We use information to deliver your Brand Audit report, respond to enquiries, schedule and prepare for calls, provide and improve our services, authenticate users, create and isolate workspaces, connect client-owned communication channels, deliver and receive authorised messages, follow up with business leads, measure and improve our website and advertising, prevent fraud and abuse, maintain logs and meet legal obligations. The Brand Audit score is generated automatically from your answers; it is guidance only and is not used to make decisions with legal or similarly significant effects on you.
Free Brand Audit and how we contact you
The Brand Audit is free. To unlock your report you give us your name, email and mobile number and agree to our Terms & Conditions and this Privacy Policy. By doing so, you agree that Tantreak Design may contact you by phone call, SMS, WhatsApp or email about your report, a walkthrough call and related Tantreak services. These messages may be sent manually or with automated tools. Message and data rates may apply. You can opt out at any time: reply STOP to any SMS or WhatsApp message, use the unsubscribe link in our emails, or email info@tantreakdesign.com. Opting out does not remove access to your report. We do not sell your phone number or email address, and we do not share them with third parties for their own marketing.
Legal bases (EU, UK and similar laws)
Where the GDPR, UK GDPR or a similar law applies, we rely on: consent for optional analytics, advertising and personalisation cookies; steps you request before a contract and performance of a contract for audits, bookings and services; legitimate interests for following up business enquiries, securing our systems and keeping business records, balanced against your rights; and legal obligation for tax, accounting and regulatory records. You can withdraw consent at any time through the cookie icon or Your Privacy Choices without affecting earlier processing.
Dental and other sensitive information
A dental workspace may contain appointment details or information a person chooses to provide about a concern. Clients must collect only information necessary for their service and apply any health, professional-confidentiality or special-category-data rules that apply to them. Unless a written agreement and configuration expressly state otherwise, the platform is not an electronic medical-record system, must not be used for emergency care and should not contain detailed clinical records, payment-card data, government identifiers or other unnecessary sensitive information.
Messaging, templates and marketing
Clients control their recipients, message purpose, templates and campaigns. They are responsible for having an appropriate legal basis or consent, respecting opt-outs, using the correct WhatsApp message category and following applicable marketing, telecom and consumer-protection rules. Tantreak may suppress further marketing messages after an opt-out while retaining a limited suppression record so the preference continues to be honoured.
Tools and providers we use
Google Tag Manager loads our measurement tags. Google Analytics 4 measures website use. Microsoft Clarity provides heatmaps and session insights. The Meta Pixel and Meta Conversions API, Google Ads and the LinkedIn Insight Tag measure our advertising and build permitted audiences; server-side events use event IDs to avoid double counting. Google Firebase and Google Cloud host the website and our built-in CRM, store leads, Brand Audit results and consent records, and run authentication and server functions. Calendly handles call bookings; information you enter on a Calendly page is processed by Calendly under its own privacy policy and shared with us to arrange the call. Our built-in CRM is operated by Tantreak on Firebase and is used only by authorised Tantreak staff. A server-side country lookup may use a transient IP address for regional reporting.
How tracking works where you are
Optional tracking depends on your location and the page you visit. In the United States and Australia, analytics and advertising cookies are on by default and you can switch them off at any time with the cookie icon or on Your Privacy Choices. In Singapore and the United Arab Emirates, the same applies and we show a short notice on your first visit. In the European Union, United Kingdom, Switzerland and all other countries, optional cookies stay off until you choose Accept. Pages with a region in the address, such as /us/ or /eu/, follow that region’s rules, and the stricter rule applies when your location and the page differ. We determine your location from your device time zone without contacting another service.
Service providers and international transfers
We use service providers for hosting, authentication, storage, communication, email, analytics, booking, security and support. Tantreak is based in the United States and our team also works from India, so information may be processed in the United States, India, the United Kingdom, the European Economic Area or other locations. For transfers of personal data from the EEA, UK or Switzerland, we rely on the EU–US Data Privacy Framework and its UK and Swiss extensions where the provider is certified, and on Standard Contractual Clauses or another approved safeguard otherwise. Providers may only use the information to perform services for us, except where their own terms make them an independent controller, such as Meta, Google and LinkedIn for advertising measurement.
Sale, sharing and advertising choices
We do not sell personal information for money, and we do not sell CRM workspace content or Meta Platform Data. When advertising cookies are on, online identifiers and website activity are disclosed to Meta, Google and LinkedIn for advertising measurement and audiences, which some US state laws treat as a “sale” or “sharing” for targeted advertising. You can opt out at any time on Your Privacy Choices (tantreakdesign.com/privacy-choices), through the cookie icon, or by enabling Global Privacy Control in your browser, which we honour automatically. We do not knowingly sell or share the personal information of anyone under 16.
Retention, disconnection and deletion
We keep enquiry, Brand Audit and lead records for up to five years after our last interaction with you, and client records for the length of the engagement plus up to seven years where tax, accounting or legal-claim rules require. Cookie choices last 180 days; consent records are kept for as long as needed to show which choice applied. Google Analytics data is kept for 14 months. Third-party cookie lifetimes are listed in our Cookie Policy. A client administrator can disconnect a WhatsApp number, but disconnection does not automatically erase records the client must retain. Verified deletion requests are handled through our Data Deletion page. Deletion may be delayed or limited where retention is required for security, legal claims, financial records, backups or another lawful obligation.
Security and tenant separation
The platform uses tenant-scoped workspaces, role-based access, server-only integration credentials, phone-number routing and audit records intended to prevent one client from accessing another client’s data. We apply reasonable technical and organisational safeguards, but no internet service can promise absolute security. Clients must protect administrator accounts, use authorised staff access and promptly report suspected misuse.
Your rights in the United States
Depending on your state (including California, Colorado, Connecticut, Virginia, Texas and other states with consumer privacy laws), you may have the right to know what personal information we collect and how we use and disclose it; to access, correct and delete it; to receive a portable copy; to opt out of its sale, sharing or use for targeted advertising; to limit the use of sensitive personal information (we do not use it for inferring characteristics); and to not be discriminated against for using these rights. Use Your Privacy Choices to opt out, or email info@tantreakdesign.com with “Privacy Request” in the subject. We respond within 45 days, verify requests other than opt-outs, accept requests from authorised agents and let you appeal a refusal by replying with “Appeal”. In the last 12 months, the categories we collected are identifiers, contact and professional information, internet and website activity, approximate location and inferences (Brand Audit results), from you, your device and our advertising partners, for the purposes described in this policy.
Your rights in the EU, UK and Switzerland
You have the right to access, correct, delete, restrict or object to our processing of your personal data, to data portability, to object at any time to direct marketing, and to withdraw consent. You can also complain to your local data protection authority, for example the Data Protection Commission in Ireland or the Information Commissioner’s Office in the UK. We aim to respond within one month.
Your rights in Australia, Singapore, the UAE, India and elsewhere
Under Australia’s Privacy Act you can ask to access or correct your information and complain to us and then to the Office of the Australian Information Commissioner. Under Singapore’s PDPA you can withdraw consent, request access or correction and contact the Personal Data Protection Commission. Under the UAE Personal Data Protection Law you can request access, correction, erasure or restriction and object to processing. Under India’s Digital Personal Data Protection framework you can request information, correction and erasure, withdraw consent, nominate a person to act for you and raise a grievance with us before approaching the Data Protection Board. Wherever you live, email info@tantreakdesign.com and we will help.
Children
Tantreak’s website and business services are not directed to children under 16, and we do not knowingly collect their information. A client that handles information about a child must establish the appropriate authority, notices and safeguards required by applicable law and professional obligations.
Changes to this policy
We will update this policy when our practices or the law change and show the new date at the top. If a change materially affects how we use information we already hold, we will tell you on this website or by email before it takes effect.
Contact and complaints
Email info@tantreakdesign.com with “Privacy Request” in the subject line, write to Tantreak Design LLC, 8 The Green, STE A, Dover, Delaware 19901, USA, or use the Data Deletion page. We may need to verify identity and authority before acting. If the request concerns a clinic or studio workspace, contact that business first because it usually controls the record. You may also complain to the privacy or data-protection regulator in your jurisdiction.
Ready to turn attention into a lead-ready growth system?
Tell us where your business is stuck. We will help you choose the right next step across brand, website, content, or Brand4ward.