Last updated: 27 September 2026
TMGUARD LTD (“TMGuard”, “we”, “us”, “our”) is committed to protecting your privacy. This policy explains how we collect, use, and protect personal data when you use our website (tmguard.uk) and trade mark monitoring service.
For technical security controls, see our Security page.
Data Controller: TMGUARD LTD, Company No. 17055456, registered in England and Wales. Contact: privacy@tmguard.uk
Contents
Data you provide directly:
Data we collect automatically:
Data from public sources:
| Processing | Lawful Basis | Explanation |
|---|---|---|
| Account management | Contract | Necessary to provide the service you signed up for |
| Payment processing | Contract | Necessary to process your subscription |
| Trade mark monitoring and alerts | Contract | Core service delivery |
| Email parsing (Inbox Intelligence) | Contract | Feature you opted into by forwarding emails |
| Companies House enrichment | Legitimate interests | Provides valuable context on potential conflicts |
| IPO register analysis | Legitimate interests | Public register data used to provide monitoring |
| Analytics (GA4, LinkedIn Insight Tag, Microsoft Clarity, PostHog) | Consent | Only with your cookie consent |
| Account lifecycle analytics (PostHog, server side) | Legitimate interests | Trial and subscription steps of your account, keyed by a hashed account identifier; your email address is not sent |
| Direct marketing (postal) | Legitimate interests | See our Legitimate Interests Assessment (available on request) |
| Security and fraud prevention | Legitimate interests | Rate limiting, auth logging, abuse prevention |
| Suppression list | Legal obligation | Required to honour opt-out requests |
TMGuard processes data from the UK Intellectual Property Office trade mark register and the Companies House company register. Both are public government databases.
If we contact you based on public register data (for example, to inform you that your newly registered company name conflicts with an existing trade mark), we do so under legitimate interests. Our Legitimate Interests Assessment is available on request by emailing privacy@tmguard.uk.
What public data we hold:
This data is already publicly available. We process it to identify potential trade mark conflicts and provide monitoring services.
TMGuard uses artificial intelligence (powered by Anthropic's Claude) for:
What we send to our AI provider:
What we do NOT send to our AI provider:
Our AI provider, Anthropic, processes this data in the United States under its Data Processing Agreement, with standard contractual clauses and the UK Addendum, and does not use TMGuard's data to train its models.
| Recipient | Purpose | Data Shared |
|---|---|---|
| Stripe | Payment processing | Email, subscription details |
| Anthropic | AI analysis | Trade mark data, opposition decisions, forwarded emails (including the sender’s address and full text), assistant questions |
| Resend | Email delivery | Email address, alert content |
| Vercel | Hosting and server functions | Standard web hosting data |
| Neon | Database | All service data (encrypted at rest) |
| Cloudflare | File storage (R2) | IPO journal files, uploaded documents |
| Analytics (GA4) | Anonymous usage data (only with consent) | |
| Analytics (Insight Tag) | Page views, conversion tracking (only with consent) | |
| Microsoft | Analytics (Clarity) | Session recordings of public pages, never the dashboard or account pages (only with consent) |
| PostHog | Product analytics | Page views and chosen events (only with consent); account lifecycle events keyed by a hashed account identifier |
We do not sell your data. We do not share your data with advertisers.
Where your data is stored and processed:
| Data Type | Retention Period |
|---|---|
| Account data (active subscription) | Duration of subscription |
| Account data (after the subscription ends) | Anonymised 30 days after the subscription ends |
| Trade mark monitoring data | Kept after the subscription ends, anonymised after 30 days |
| Forwarded emails and attachments | Deleted 30 days after the subscription ends |
| Order records (after the account is deleted or anonymised) | Kept without anything that identifies you, deleted six years after the order date |
| Feedback tokens | Deleted after 30 days |
| Auth attempt logs | Deleted after 90 days |
| Rate limit records | Deleted when the limit expires |
| Public API access log (hashed IP, user agent) | Deleted after 90 days |
| Companies House cache | Refreshed every 30 days |
| Analytics data | Per Google’s retention settings |
| Companies House registration data (for outreach) | Currently kept; a retention period is being set |
Four of the services we use hold records of their own. This is what each of them keeps after your account is deleted.
| Processor | What it holds | Retention after deletion |
|---|---|---|
| Stripe | Payment records: payments, invoices and the customer record. | Kept, because the law requires us to keep accounting records: six years under HMRC rules. Stripe holds them under its own retention as well. |
| Resend | Logs of the emails we sent you and of the emails you forwarded to TMGuard. | Delivery logs for a period Resend sets; we do not control it. |
| Anthropic | The text we sent for AI analysis, including forwarded emails and assistant questions. | Within 30 days, unless Anthropic must keep them for legal reasons or a policy breach. |
| PostHog | Account lifecycle events, keyed by a hashed account identifier. | Deleted when your account is deleted, through PostHog’s deletion service. Browsing analytics collected with your cookie consent are not linked to your account. |
See our Cookie policy for full details.
Essential cookies (always active):
Analytics cookies (only with your consent):
You can change your cookie preferences at any time on our Cookie policy page.
Under UK GDPR, you have the right to:
Data export and account deletion are self-service. Signed in, go to your account to download a copy of your data as a JSON file, or to delete your account. Deletion is scheduled with a 30-day grace period. Signing in again within that window cancels it; after it, your account and the data it holds are permanently removed, including renewal reminders and any beta application under your email address. The record of any order you paid for is kept without anything that identifies you and deleted six years after the order date. What our processors keep is set out under data held by our processors after deletion.
Newsletter and report download sign-ups are separate from your account, so deleting the account does not end them. The email confirming your deletion request includes a link to unsubscribe.
To exercise any other right (rectification, restriction, objection), email privacy@tmguard.uk. We will respond within 30 days.
To opt out of marketing communications: click unsubscribe in any email, reply “STOP” to any postal communication, or email unsubscribe@tmguard.uk.
We may update this policy from time to time. If we make material changes, we will notify active subscribers by email. The “Last updated” date at the top of this page will always reflect the latest version.
27 September 2026: what happens when you delete your account is now set out in section 10: order records are kept without anything that identifies you and deleted six years after the order date, renewal reminders and beta applications under your address are deleted, and what each of our processors keeps after deletion is listed in section 8.
27 September 2026: how long we keep an account's data after its subscription ends is now stated in section 8: 30 days, then anonymised, and 90 days for a subscription that ends on or after 27 October 2026.
26 September 2026: statements that were not true were corrected: what our AI provider receives (forwarded emails include the sender's address and full text), where data is stored (not all in Europe), the retention periods, which were not implemented as written, and the analytics we use (Microsoft Clarity and PostHog were not named). “Public task” was removed as a lawful basis. A full revision of this policy follows.
TMGUARD LTD
Company No. 17055456
Email: privacy@tmguard.uk
Website: tmguard.uk
If you are not satisfied with our response to a privacy concern, you can contact the Information Commissioner's Office:
ico.org.uk | 0303 123 1113 | casework@ico.org.uk
TMGUARD® is a registered UK trade mark (No. UK00004345511) of Adrian Cherciu, used under license by TMGUARD LTD, registered in Classes 9 and 42, effective 25 February 2026. All other trade marks referenced on this site are the property of their respective owners.
See also: Terms of service · Cookie policy · Service boundary