Loading
How Answer First Limited, trading as Tannto, uses personal data through its website and commercial work.
Last updated: 26 July 2026
Answer First Limited, trading as Tannto, is the controller of personal data covered by this notice unless another organisation is identified as the controller.
Answer First Limited is registered in Scotland under company number SC868214. Its registered office is:
The Stables Duncrub Park House Dunning Perth Scotland PH2 0QR United Kingdom
Tannto’s data-protection contact is Debasien Magyar Schenk. You can contact him at debasien@answerfirst.co.uk.
Answer First Limited is registered with the Information Commissioner’s Office under registration number ZC079545.
This notice covers personal data Tannto uses when you:
Tannto may also process personal data for a client. Where the client determines why and how the data is used, the client is the controller and Tannto acts as its processor under a written agreement. The client’s privacy notice then explains the processing. The applicable roles are set out before an engagement begins.
Private Client Origination is performed for a regulated client firm under a written agreement. That firm determines the prospective-client standard, the permitted events and the approved approach, and its own privacy notice explains the processing it controls.
This can include IP address, browser and device information, pages requested, timestamps, referring page and basic security or error logs. Vercel Web Analytics also provides aggregate page views, referrers, country and device type without a persistent visitor identifier.
This can include your name, work email, telephone number, role, organisation, website, service interest, application answers, correspondence and meeting details.
Please do not send credentials, lead lists, personal financial information, confidential transaction documents, special-category personal data or information you are not authorised to share through the website.
This can include contact details, role, organisation, contract and billing administration, instructions, approvals, meeting records, access history and correspondence needed to manage the relationship.
This can include:
Tannto does not intentionally collect special-category personal data for ordinary B2B market research or outreach. If such data is found incidentally and is not required for a lawful purpose, it is removed or access is restricted.
Tannto may obtain personal data:
Public availability does not remove data-protection obligations. Tannto still considers the purpose, lawful basis, necessity, proportionality, transparency, accuracy, retention and rights that apply.
| Purpose | Personal data | Lawful basis |
|---|---|---|
| Respond to an enquiry or assess an application | Contact, organisation, application and correspondence data | Legitimate interests in assessing a potential commercial relationship; steps requested before entering a contract where applicable |
| Arrange and conduct meetings | Contact, scheduling and meeting data | Legitimate interests in communicating about the requested meeting; steps requested before entering a contract where applicable |
| Deliver and administer a client engagement | Contact, instruction, approval, access, contract and service data | Performance of a contract; legitimate interests in managing the engagement and protecting the parties' records; legal obligation where applicable |
| Manage suppliers and professional relationships | Contact, contract, correspondence and billing data | Performance of a contract; legitimate interests in operating the business; legal obligation where applicable |
| Research relevant B2B companies and professional contacts | Professional contact, employer, role, company and sourced business-event data | Legitimate interests, following a purpose, necessity and balancing assessment |
| Send permitted and relevant B2B communications | Professional contact, employer, role, relevance, communication and preference data | Legitimate interests where the Privacy and Electronic Communications Regulations permit the communication without consent; consent where required |
| Maintain objections and suppressions | Contact identifier, date, source and preference | Legal obligation where applicable; legitimate interests in respecting the request and preventing further contact |
| Protect the website, systems and legal rights | Device, security, access and correspondence data | Legitimate interests in security, fraud prevention, record keeping and legal claims; legal obligation where applicable |
| Meet accounting, tax and regulatory duties | Contact, contract, transaction and billing data | Legal obligation; legitimate interests in maintaining accurate business records |
Where Tannto relies on legitimate interests for B2B research or outreach, the interest is to identify and communicate with organisations and professional contacts likely to have a relevant commercial need. Tannto assesses whether the processing is necessary and balances that interest against the person’s rights, expectations and likely impact.
Where consent is the lawful basis, you can withdraw it at any time. Withdrawal does not affect processing that was lawful before it was withdrawn.
UK rules distinguish corporate subscribers from individual subscribers. Limited companies, limited liability partnerships, Scottish partnerships and some other bodies are generally corporate subscribers. Sole traders and some partnerships are treated as individual subscribers and have additional protections for electronic marketing.
Tannto applies the rule relevant to the subscriber and communication channel. Where consent is required, Tannto does not send the communication without valid consent or another permitted condition under the applicable rules.
Every direct marketing message must identify the sender and provide a valid way to object or opt out.
You can object at any time to the use of your personal data for direct marketing. This right is absolute.
Email debasien@answerfirst.co.uk or use the opt-out route in the message. Tannto will stop using your personal data for direct marketing and may retain the minimum information needed on a suppression list so that your preference is respected in future.
Tannto may use software, rules and artificial intelligence to support research, classification, drafting, prioritisation and record updates. Consequential external communications and decisions have an approval point where required by the workflow.
Tannto does not use solely automated decision-making covered by Article 22 of the UK GDPR to make a decision about you that has a legal or similarly significant effect under the processing described in this notice.
Tannto may share personal data with:
Service providers may process personal data only for the contracted purpose and subject to appropriate confidentiality, security and data-protection terms.
Tannto does not sell personal data.
Some service providers may process personal data outside the United Kingdom. Where this happens, Tannto uses a transfer mechanism permitted by UK data-protection law, such as UK adequacy regulations, the International Data Transfer Agreement, the UK Addendum to approved standard contractual clauses, or another lawful safeguard.
You can ask for more information about the safeguard used for a relevant transfer.
Tannto keeps personal data only for as long as it is needed for the purpose collected, including legal, accounting, security and dispute requirements.
Current retention periods include:
Data may be retained for longer where a legal hold, dispute, regulatory request or other legal obligation applies. It may be deleted earlier where it is no longer needed and no lawful reason requires retention.
Tannto uses technical and organisational measures proportionate to the nature of the data and the risks involved. The website runs over HTTPS, and meeting bookings are handled through Cal.com’s hosted booking flow. Tannto does not collect or store payment-card data through the website.
No internet transmission or storage system can be guaranteed completely secure. If a personal-data breach creates a legal duty to notify you or the Information Commissioner’s Office, Tannto will do so within the applicable period.
Vercel Web Analytics is cookieless. The core website does not store a theme preference or use advertising cookies. Pages containing the Cal.com booking interface connect to Cal.com, which may process device and booking data and use its own cookies or similar technologies. Further information is in the Cookie Notice.
The current website does not use session-replay tools or third-party chat widgets. Advertising or other tracking technology must remain disabled unless the website provides the information and consent mechanism required by law.
Depending on the circumstances, you may have the right to:
To exercise a right, email debasien@answerfirst.co.uk. Tannto may ask for information reasonably needed to confirm your identity and locate the data. Requests are normally handled without charge and within one calendar month, subject to the extensions and exceptions permitted by law.
Please contact Tannto first so the concern can be examined and addressed.
You also have the right to complain to the Information Commissioner’s Office. Information about making a complaint is available at ico.org.uk.
Tannto is a B2B service and does not knowingly collect personal data from anyone under 18 through this website.
Tannto may update this notice when its website, services, providers or legal duties change. The current version will be published on this page with its last-updated date. Material changes will be communicated where the law requires it.
Email debasien@answerfirst.co.uk with “Data protection” in the subject line.