Your information at Tervra.

Who is responsible.

Tervra Limited is the controller of the information described in this notice. We are registered in England and Wales with company number 17410031, and our registered office is 108 Fonthill Road, London N4 3HT. Write to privacy@tervra.co.uk about anything in this notice.

Tervra Limited is not a bank, is not authorised by the Financial Conduct Authority and does not hold customer money. This notice is about people who contact us or register interest through this website, not about customers of a financial service.

What this notice covers.

This notice covers the website at tervra.co.uk, the forms on it and emails you send to our published addresses.

It does not cover any future account or service. If we offer one, we will explain how it uses personal information before you apply.

Information you send us.

• Early access registration. Your first name, last name, work email address and business name.
• Optional follow-up answers. Your sector, company number, approximate money in and out, current provider, the features that interest you and anything you tell us about how your business handles payments.
• General enquiry. Your name, email address, company if you give it, the reason you choose and your message.
• Partnership enquiry. Your name, email address, organisation, role if you give it, the kind of partnership and your message.
• Emails you send us. Whatever you write to one of our published addresses, including attachments.

With each form we also record when it arrived and the IP address it came from.

The forms are voluntary. We need the required fields to identify your enquiry and reply to it. You can leave optional fields blank or email us instead. Please do not send sensitive personal information or confidential information about other people.

What happens when you send a form.

We store what you send so that we can reply to you and understand what businesses need. We use the time and IP address to keep the forms working and to prevent abuse.

What we send by email depends on the form:

• Your first early access registration. Your registration is confirmed on screen once we have received it. Automatic confirmation emails are not currently available. Our team receives a notification containing what you entered.
• Registering again with the same email address. We record the registration, but no email is sent to you or to our team.
• Follow-up answers. Our team receives a notification containing your answers. We do not email you.
• General and partnership enquiries. Our team receives a notification containing your message. We do not send you an automatic reply.

Registering interest is not an application for an account and does not sign you up to marketing emails. A person at Tervra reads what you send. We do not make decisions about you by automated means, and we do not use your information to build a profile of you.

Why we use it.

We rely on our legitimate interests for each of these purposes:

• Replying to an enquiry or registration you sent.
• Customer discovery: understanding how businesses handle payments, and deciding who to speak to first.
• Assessing and discussing potential partnerships.
• Keeping a record of what we received, what we sent and how we handled requests about your information, as evidence in case of a dispute.
• Keeping the website and forms available, and preventing abuse.

You can object to any of these uses at any time. See your rights below.

We do not use these forms to send you marketing. If we offer marketing emails in future, we will ask for your consent separately, and you will be able to withdraw it at any time.

Who receives it.

These service providers process your information for us:

• Cloudflare delivers this website, passes form submissions to our service and handles each request, including the IP address it comes from. It also hides the email addresses shown on this website from automated address collectors.
• Render hosts the service that receives form submissions and the database that stores them.
• Postmark sends our team the notifications described above. When automatic confirmation emails become available, Postmark will send those too.
• Google provides our email. Emails you send us, and our team notifications, are stored in Google’s service.

We do not sell personal information or share it with anyone for their own marketing. We may disclose information where the law requires it, or where it is needed to establish, exercise or defend a legal claim.

When we contact a business first.

We do not currently contact businesses first. We contact you only to reply to something you sent us, or about the early access you registered for.

A published email address does not give us permission to send marketing to it. Before we contact any business first, we will assess whether it is appropriate and update this notice, saying where contact details come from and how to stop further contact.

Transfers outside the UK.

Render stores our database, and runs the service that receives the forms, in Frankfurt, Germany. UK law recognises the European Economic Area as providing adequate protection for personal information.

Each of our providers is a United States company or part of one, and may process information in the United States and other countries. These transfers are protected as follows:

• Render and Google are certified under the UK Extension to the EU-US Data Privacy Framework, which UK law recognises as providing adequate protection for transfers to certified US companies. For any other transfer, their data processing terms apply standard contractual clauses.
• Cloudflare and Postmark transfer information under the EU standard contractual clauses together with the UK International Data Transfer Addendum, which form part of their data processing terms.

You can check a company’s certification at dataprivacyframework.gov. For more information about these safeguards, or a copy of the relevant terms, write to privacy@tervra.co.uk.

How long we keep it.

We keep each kind of information for the period below and then delete it. You can ask us to delete it sooner.

• Your early access registration and your answers: 730 days after the last meaningful activity on it. That is when you registered or registered again, when you sent follow-up answers, or when we last had a substantive exchange with you about your registration, such as a reply to you or a call. Automatic retries, our own administrative changes and messages you did not ask for do not count.
• The copies of your registration and answers we use to notify our team: 90 days after the latest one of the same kind, or after our latest substantive exchange with you about your registration, if that is later. If we no longer hold your registration, they are kept for 730 days instead, because they are then our only record of your answers.
• General enquiries: 365 days after your latest enquiry, or after our latest substantive contact with you about it, if that is later.
• Partnership and investor enquiries: 730 days, on the same basis. If a discussion leads to an agreement, the records that agreement needs are kept under it.
• The IP address a submission came from: 30 days after we receive it. Later activity does not extend this. The only exception is a hold, described below.
• Emails in our mailboxes, including our team notifications: the same period as the record they relate to. Correspondence about a request you make about your information is kept for 730 days after we close the request. We check our mailboxes once a month and delete emails whose period has ended, so an email can remain for up to a month after its period ends. A deleted email then stays in the mailbox’s Bin for up to 30 days. Removing it from the Bin does not by itself remove every copy that Google holds, and Google Vault, an archiving tool in Google Workspace, can preserve messages separately where a retention rule applies to our account.
• Our audit log records that a submission was received, an email was sent or a request was handled, and when, without its content. Each entry carries a reference derived from your email address, and records of emails we sent show a partly hidden address. We can link these entries to you if we know your email address, so they are still personal information. The log cannot be edited, so entries are not deleted individually. We have set a retention period of seven years for the log. Submissions received before 27 September 2026, when we moved their content out of that log, were also recorded there with their content and IP address. Access to those entries is restricted and they are not used to contact anyone. We are working on removing them and will update this notice when we have. If you ask, we will tell you whether any relate to you.
• If you ask us not to contact you: We retain a hashed version of your email address to recognise it and prevent further contact. We keep it for as long as it is needed for that purpose and review it every 24 months. A review never removes your request.
• Records of deletion and objection requests: a note of each request, without your email address, kept separately from our database so that restoring a backup cannot undo it. We keep it for as long as a backup made before the request could be restored, plus 30 days, or, for a request not to be contacted, for as long as we keep the hashed address.
• Our providers’ records: Postmark keeps the emails it sends for us, with their delivery records, for 45 days. Render keeps our service’s logs, which can include the IP address of a request, for 7 days. Cloudflare keeps records of requests to this website, including IP addresses, for as long as it needs them to deliver and protect the website, under its data processing terms.
• Backups: our database can be restored to any point in the previous 3 days. Information we delete can remain in that backup data, and in backup copies Render keeps for its own operations, after we have deleted it. We use backups only to restore the database. After a restore, we reapply recorded erasure and objection requests and check restored records against our retention rules before returning them to ordinary use.

We keep information beyond these periods only where it is needed for a legal claim. In that case we keep all of your records together, including the IP addresses of your submissions, record why, and review the decision at least every 92 days. If you become a Tervra customer, your registration becomes part of your customer record and is kept under the terms of that service.

How it is protected.

Access to what you send is limited to the people at Tervra who need it. Your submissions are kept in records that we delete when their period ends. The website is served only over HTTPS, with a strict content security policy. Our security approach describes our controls in more detail.

Your browser.

This website uses no analytics or advertising, sets no cookies and stores nothing in your browser. What you type into a form stays in the open page until you send it. See cookies and storage.

Your rights.

Depending on the circumstances, you have the right to:

• Access. Ask for a copy of the personal information we hold about you.
• Correction. Ask us to correct anything that is wrong or incomplete.
• Deletion. Ask us to delete it. We will delete your registration, your submissions, including their IP addresses, and the related emails in our mailboxes. Copies held by Postmark are deleted at the end of its 45-day period, and backup data as described above. Our audit log is kept as described above, and we will tell you what it holds about you. If you also ask us not to contact you, we keep the hashed address described above.
• Restriction. Ask us to stop using it while a question about it is resolved.
• Objection. Object to any use based on our legitimate interests. We will stop unless we have compelling legitimate grounds that override your interests, rights and freedoms, or need the information for a legal claim. If you object to direct marketing, we will always stop.

To make a request, email privacy@tervra.co.uk. There is no form to complete. We may need to confirm that the request comes from you, usually by replying to the email address we hold. We will respond within one month of receiving your request. If a request is complex, or you make several, we may extend this by up to two further months, and we will tell you why within the first month.

You can also complain to the Information Commissioner’s Office, or call it on 0303 123 1113. We would rather you raised it with us first so that we can put it right.

Changes to this notice.

When this notice changes, we will update this page and the date below. Where a change materially affects information you have already given us, we will tell you directly.

Last updated 28 September 2026.