Privacy Policy

This privacy notice was last updated 3 May 2025

Tribal, the trading name for NexSphere Business Solutions Limited, part of the Seetec Group, is committed to data security and the lawful, fair, and transparent processing of personal data. This privacy notice sets out how we manage and protect your personal data in compliance with applicable data protection law, including the UK/EU General Data Protection Regulation (EU) 2016/679, Data Protection Act 2018 and the Privacy Electronic Communications Regulations (PECR), 2011.

This Privacy Notice explains how and why we collect, store, use and share (process) personal data, how to contact us and the supervisory authorities should you need further information or wish to report a concern about the way in which we process your data.

When we refer to personal data, we mean any information that can be used either on its own, or when combined with other information that we have access to, can identify you.

Tribal will never sell your personal data to third parties.

Company Details: NexSphere Business Solutions Ltd,
Registered office: 75/77 Main Road, Hockley, Essex, SS5 4RG,
Registration Number: 06745958

For the purposes of GDPR, Tribal may act in the capacity of a Controller/Joint controller or Processor when processing personal data.

If you have any questions about this privacy notice or any data protection related matters relevant to Tribal, please [email protected]

Click on the links below to find out more (Add links to each of the below sections on the website version)

1. Visitors to our website
2. Cookies
3. Enquiries
4. Clients
5. Suppliers
6. Data Sharing
7. Data Retention
8. Your Rights
9. Get in Touch

When visiting our websites, you will be able to select and save your cookie preference when accessing the Home Page. We use essential cookies, which are necessary for the operation and security of our websites, and optional performance and advertising cookies. Our optional cookies, if selected, will allow us to collect the following:

• Information about how you use our website, and if applicable, which websites you were redirected from.
• Technical information about your device or browser when you use our website, including geolocation data to determine what country you are accessing our website from, device ID, browser type and version and time zone setting.

How we collect your personal data

• We collect data about you from your device and via third-party website analytics services such as Google Analytics and cookies (see section on Cookies below) when you visit our website. We do not make, and do not allow our Google Analytics settings to make any attempt to find out the identities of those visiting our website.

What we use your personal data for and the lawful basis

• To help us improve our website
• To keep our website updated, secure and relevant

We process the personal data of visitors to our website based on our legitimate interest as a controller.

A cookie is a string of information that a website stores on a visitor’s computer, and that the visitor’s browser provides to the website each time the visitor returns. Tribal uses cookies to help us identify and track visitors, regarding their usage on our website. Certain features of our websites may not function properly without the aid of cookies. For further information please view our cookie policy.

• We collect your contact details, content (and copies) of your communications with us, by email, web forms and through telephone contact.
• Information about how you use our website, and if applicable, which websites you were redirected from. For more information, please see the Visitors to our website page.

What we use your personal data for and the lawful basis

• To respond to information requests
• To add your details to our subscription lists where you have provided your consent for us to do so.

We process the personal data provided through enquiries based on our legitimate interest as the controller, or where you have given consent.

The following information is based on Tribal acting as a data processor in the performance of its duties under contract with a client. Tribal processes personal data relating to our clients and their end users in accordance with our contracts. This information may be subject to our client’s own privacy policies, in which case our Privacy Notice will not apply.

What personal data do we collect?

In the performance of our contractual obligations, we will collect the following personal data of our client’s employees:

• Contact name, email, job title, telephone number, work address

How we collect your personal data

We collect personal data in the following ways:

• Where you have provided your details via email, website forms, or telephone contact and have subsequently entered a contract with us.
• Within documentation shared from a client or a third-party that has been requested or commissioned by the client to share such documentation with us.
• From other business areas within the Tribal -NexSphere Business Solutions/Seetec Group.

What we use your personal data for and the lawful basis

The use of personal data will be for the fulfilment of a contract and the provision of services provided by Tribal.

This will include:

• Communication, phone calls, emails, arranging meetings, etc.
• Sharing personal data, or relevant documentation which may contain personal data, which belongs to individuals working on the contract, with collaborating organisations or other parties as instructed by the client.
• Providing our professional opinion to you or those relevant to the contract
• Record-keeping for the necessary administration of our organisational processes and to meet our legal and contractual obligations.

Exercising our legal rights, including to detect and prevent fraud and to protect our intellectual property

What Personal Data do we collect?

The type of personal data we collect from our suppliers will depend on the product or service provided. In most cases this will include some or all the information listed:

• Name, Job Title, organisation/company details, contact information-telephone number and email address
• Information that you provide to us as part of our procurement and due diligence processes.
• Bank details, VAT number and status, UTR, published accounts, ethical procurement policy –to enable us to make payments for goods and services received.
• Payment details and remittances – to evidence payments for services received
• Credit Reference Reports – to inform risk judgements about continuity of supply from our suppliers.
• Invoices and credit notes – recording transactions between us

How we collect your personal data

• When you have approached us to become a supplier – or to join our preferred supplier list.
• When you or the organisation you work for has submitted a proposal to become a supplier and/or entered a contract of work with us.
• From other business areas within NexSphere Business Solutions Ltd/Seetec Group, where there is a legitimate interest to do so.

What we use your personal data for and the lawful basis

• Review your suitability to provide your services to us as part of our procurement and due diligence processes. (legitimate interest)
• To agree a contract or purchase order with you (performance of a contract)
• Conduct business operations with you (performance of a contract)
• Process the payment of invoices (performance of a contract)

Depending on your relationship with Tribal we may share your information with all or some of the following:

• Other business areas within the Tribal/NexSphere Business Solutions/Seetec group where we have a legitimate interest to do so.
• Cloud and external providers of software systems, IT solutions and business support services used by the group.
• Professional advisers, such as lawyers, auditors and insurers for the purposes of providing consultancy, legal, insurance and accounting services.
• Auditors – to audit our systems and processes for the purposes of ensuring efficiency or regulatory or contractual compliance.
• UK law enforcement agencies and third-party security companies for the purposes of ensuring that we comply with the law and have adequate security measures in place.
• We will disclose personal information to third parties if we are under a duty to disclose or share personal information to comply with a legal or regulatory obligation including any safeguarding concerns.
• Tribal (NexSphere Business Solutions Ltd) have a legitimate interest to use your personal data to assist in combating fraud and we may share client information with credit reference agencies, to make sure you have the means of paying for our services.

We may be required to disclose or share your personal data, to meet a legal obligation such as with law enforcement agencies, regulatory bodies or public authorities for example to prevent or detect crime. We will only disclose your personal data to these third parties to the extent we are required to do so by law.

• We will only keep your personal data for as long as necessary. To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal/statutory requirements.
• At the end of that retention period, your data will either be deleted or anonymised (so that it can no longer be associated with you) for research or statistical purposes.
• In some circumstances you may be entitled to ask us to delete your data: see ‘Your rights’ below for further information.

You have the right:

• to ask us not to use your personal data for direct marketing.
• to ask us not to process your personal data where it is processed based on legitimate interests if there are no compelling reasons for that processing.
• to request from us access to personal information held about you (see below).
• to ask for the information we hold about you to be rectified if it is inaccurate or incomplete
• to ask that we stop any consent-based processing of your personal data after you withdraw that consent.
• to ask, in certain circumstances, to delete the personal data we hold about you.
• to ask, in certain circumstances, for the processing of that information to be restricted; and to ask, in certain circumstances, for your data to be moved to another controller