{# --------------------------------------------------------------------------- TODO before publishing / production deploy: 1. Replace [REGISTERED ADDRESS] with Tellus Mater Ltd's registered office. 2. Register with the ICO and pay the data protection fee (ico.org.uk), then add the ICO registration reference where marked below. This policy is a first-step baseline and should be reviewed by a qualified adviser before being relied upon. --------------------------------------------------------------------------- #}

Privacy Policy

Last updated: 12 June 2026

This policy explains how Tellus Mater collects and uses your personal data, and the rights you have over it. It applies to people who request access to Tellus Mater and to account holders who use the service.

1. Who we are

Tellus Mater Ltd ("we", "us", "our") is the data controller responsible for your personal data. We are registered in the United Kingdom.

Registered office: [REGISTERED ADDRESS]
Contact for data protection matters: info@tellusmater.com

2. What personal data we collect

  • When you request access: your name, email address, farm name, and any message you choose to include.
  • If your account is approved: your account details (email address) and the farm information you enter — for example your farm name, field locations and boundaries, areas, and the sustainability and management data you record.
  • Automatically: a strictly-necessary session cookie and a security (CSRF) cookie, and standard server logs such as your IP address and browser type, which we use to keep the service secure.

3. How we use your data, and our lawful basis

Under UK data protection law we must have a lawful basis for using your personal data. Our bases are:

Purpose Data used Lawful basis
Assess and respond to your access request Name, email, farm name, message Legitimate interests (responding to enquiries) and taking steps prior to entering a contract
Create and manage your account and provide the service Email, farm data Performance of a contract
Send service emails (invitations, password resets) Email Performance of a contract
Keep the service secure and working Technical and log data, strictly-necessary cookies Legitimate interests (security and reliability)

4. Cookies

We only use strictly-necessary cookies that are required for the site to work and to keep it secure (a session cookie and a CSRF security cookie). We do not use analytics, advertising, or tracking cookies, so we do not ask for cookie consent.

5. Who we share your data with

We share your data only with service providers who process it on our behalf and on our instructions — currently our UK hosting and email provider. We do not sell your data and we do not share it for marketing. We may disclose data if we are required to by law.

6. Where your data is stored

Your data is stored and processed on servers in the United Kingdom. We do not transfer it outside the UK.

7. How long we keep your data

  • Access requests that are rejected or that expire are deleted within 12 months.
  • Account and farm data is kept while your account is active and for up to 12 months after it is closed, unless we are required to keep it longer by law.

8. Your rights

You have the right to:

  • access the personal data we hold about you;
  • ask us to correct inaccurate data;
  • ask us to delete your data;
  • ask us to restrict or object to how we use it;
  • receive a copy of your data in a portable format; and
  • withdraw consent where we rely on it.

To exercise any of these rights, email info@tellusmater.com. We will respond within one month.

9. Automated decision-making

We do not make decisions about you based solely on automated processing that produce legal effects or similarly significantly affect you.

10. How we protect your data

We use appropriate technical and organisational measures to protect your data, including encryption of data in transit (HTTPS), access controls, and UK-based hosting.

11. Complaints

We would prefer to resolve any concerns directly, so please contact us first at info@tellusmater.com. You also have the right to complain to the UK's data protection regulator, the Information Commissioner's Office (ICO), at ico.org.uk or on 0303 123 1113.

12. Changes to this policy

We may update this policy from time to time. When we do, we will change the "last updated" date at the top of this page.