Privacy notice

Last updated: 27 September 2026

Tribooth uses personal information to answer enquiries, prepare quotations, fulfil orders and provide customer support. This notice also explains how the Tribooth website assistant handles information.

Information we collect

When you send an enquiry, we may collect your name, email address, telephone number, company, requested product or service, intended use, device or camera model, printing requirements, requested timescale and anything else you include in your message. Please do not include special-category or other sensitive personal information in the assistant.

The assistant also processes the questions you type, its answers, technical request information needed for security, and a short-lived random session identifier. Cloudflare Turnstile processes browser and device signals needed to distinguish people from automated traffic; it does not receive the contents of the enquiry form from Tribooth.

How we use the information

We use this information to respond to your request, assess compatibility, prepare a quotation, prevent abuse, maintain service reliability and keep an enquiry record. The assistant may provide general product guidance, but uncertain compatibility, bespoke configurations and prices are referred for human review. We do not treat an enquiry as consent to marketing.

Our usual legal bases are taking steps at your request before entering a contract, performing a contract, and our legitimate interests in answering genuine enquiries, protecting the service and keeping appropriate business records. Where we separately ask for marketing consent, you may withdraw it at any time.

Service providers and international processing

We use Cloudflare to run the enquiry service, database and Turnstile bot protection; OpenAI to generate free-text assistant answers and, when needed, search selected supplier websites; and Resend to deliver enquiry alerts to the Tribooth team. Squarespace hosts the website and continues to handle its own website, commerce and form functions.

Free-text questions sent to OpenAI are submitted with response storage disabled and are not used to train OpenAI's models unless the account owner explicitly opts in. OpenAI may retain API abuse-monitoring logs, which can contain prompts and responses, for up to 30 days by default unless longer retention is legally required. Enquiry alert emails contain the details supplied in the enquiry so the Tribooth team can respond.

These providers may process information outside the United Kingdom. Where required, the provider and Tribooth rely on appropriate contractual or other legal safeguards for international transfers. Their own privacy information explains their processing in more detail:

• Cloudflare Turnstile Privacy Addendum: https://www.cloudflare.com/cloudflare-customer-dpa/#13-turnstile-specific-terms

• OpenAI privacy policy: https://openai.com/policies/privacy-policy/

• Resend privacy policy: https://resend.com/legal/privacy-policy

• Squarespace privacy policy: https://www.squarespace.com/privacy

Retention and security

Tribooth enquiry records are retained for up to 365 days, then deleted automatically, unless they need to be kept longer for an order, dispute, legal obligation or another clearly documented business need. Assistant sessions expire after one hour and abuse-control counters expire after about two hours. Copies in email systems, security logs and provider backups may follow those systems' shorter or longer operational retention periods.

We use access controls, encrypted secrets, origin restrictions, rate limits, bot checks and separation between Tribooth and other business records. No internet service is completely risk-free, so please use the ordinary Contact Us page if you would rather not use the AI assistant.

Your rights

Depending on the circumstances, you may ask for access to, correction of, deletion of, restriction of or portability of your personal information, or object to processing based on legitimate interests. You may also complain to the UK Information Commissioner's Office. To make a request, use Tribooth's Contact Us page: https://tribooth.co.uk/contact-us and give enough detail for us to locate the relevant record.

We may update this notice when the service or its providers change. The date above shows the latest version.