Privacy Policy

Effective Date: 9 June 2026

Tactic ("Tactic," "we," "us," or "our") respects your privacy. This Privacy Policy explains how we collect, use, share, and protect personal information when you visit our website, contact us, or interact with our digital experiences. It applies to visitors worldwide and includes specific provisions for individuals in the United Kingdom, the European Economic Area (EEA), and California.

1. Who We Are and Who Is Responsible for Your Data

Tactic is an XR studio based in San Francisco, California. We create immersive digital experiences, including augmented reality, web-based AR, and related interactive content for brands and audiences.

For the purposes of the UK General Data Protection Regulation (UK GDPR), the EU General Data Protection Regulation (EU GDPR), and similar laws, the data controller responsible for your personal information is:

Tactic
236 West Portal Ave #768
San Francisco, CA 94127, USA
Email: info@wearetactic.com
Website: tactic.studio

A data controller is the party that decides why and how your personal information is processed. If you have any questions about this policy or wish to exercise your rights, you can reach us using the details above or in Section 13.

2. Information We Collect

Information You Provide

When you contact us, fill out a form, request a proposal, subscribe to updates, or otherwise communicate with us, we may collect:

Name
Email address
Company name
Phone number
Project details or the contents of your message

You are not legally required to provide this information, but we need it to respond to your enquiry. Without it, we may be unable to assist you.

Information Collected Automatically

When you use our website, we may automatically collect certain technical information, such as:

IP address
Browser type
Device type
Operating system
Pages visited
Referring website
Date and time of visit
General usage and interaction data

Cookies and Similar Technologies

We use cookies and similar technologies to operate the site, understand how visitors use it, and support functionality. Non-essential cookies (such as analytics) are only set with your consent. You can manage your preferences at any time through the cookie preference centre on our site. See Section 11 for details.

3. How We Use Information and Our Legal Bases

Where the UK GDPR or EU GDPR applies, we must have a lawful basis for each use of your personal information. We use your information for the following purposes, on the bases shown:

Responding to enquiries and communicating with you — to answer the message you sent us and discuss potential work. Basis: our legitimate interests, and/or steps taken at your request before entering a contract.
Providing information about our services — to follow up on your request. Basis: our legitimate interests.
Operating, securing, and maintaining the website — to keep the site working and prevent misuse. Basis: our legitimate interests.
Understanding website traffic and usage (analytics) — to measure and improve performance. Basis: your consent.
Sending marketing or updates, where applicable — to keep you informed about Tactic. Basis: your consent.
Meeting legal, tax, and accounting obligations — to comply with our legal duties. Basis: legal obligation.

Our legitimate interests are running and growing our studio, responding to people who contact us, and keeping our site secure. We balance these against your rights and only rely on this basis where your interests do not override them. You have the right to object to processing based on legitimate interests (see Section 7).

Where we rely on consent (for example, analytics cookies or marketing), you may withdraw it at any time without affecting processing carried out before withdrawal.

4. How We Share Information

We do not sell your personal information. We share it only in the following situations:

Service providers and processors who help us operate our website and business — including categories such as website hosting and form handling, content delivery, analytics, and security. These providers process data on our behalf under contract and only as instructed by us.
Our team, by email. When you submit our contact form, your details are stored in our website's backend and forwarded by email to Tactic for review and response.
Legal and protective disclosures — when required by law, legal process, or government request, or to protect our rights, property, security, or users.
Business transfers — as part of a merger, acquisition, financing, or reorganisation, in which case we will require the recipient to honour this policy.

5. International Data Transfers

Tactic is based in the United States, and some of our service providers may be located in the US or other countries. If you are in the UK or EEA, your personal information may be transferred to and processed in the United States, which may not provide the same level of data protection as your home country.

Where we make such transfers, we put in place appropriate safeguards, such as the UK International Data Transfer Agreement / Addendum, the EU Standard Contractual Clauses, or reliance on a provider's certification under the EU–US Data Privacy Framework (and its UK extension) where available. You can request more information about these safeguards using the contact details in Section 13.

6. Data Retention

We keep personal information only for as long as reasonably necessary for the purposes described in this policy.

For enquiries submitted through our contact form, we retain your details for up to one (1) year from our last meaningful contact with you — for example, where you submit the form, we reply, and there is no further communication, we will delete your information within one year of that final exchange. If your enquiry develops into an ongoing relationship or engagement, we will keep relevant records for the duration of that relationship and for any additional period required to meet legal, tax, and accounting obligations.

Analytics and technical data are retained only as long as needed for the purposes for which they were collected.

7. Your Rights

If you are in the UK or EEA

Under the UK GDPR and EU GDPR, you have the right to:

Access the personal information we hold about you
Rectify inaccurate or incomplete information
Erase your information ("right to be forgotten")
Restrict processing in certain circumstances
Object to processing based on legitimate interests, and to direct marketing at any time
Data portability — receive your data in a structured, commonly used format
Withdraw consent at any time where we rely on it

To exercise any of these rights, contact us using the details in Section 13. We will respond within the timeframes required by law (generally one month). Exercising your rights is free in most cases.

You also have the right to lodge a complaint with a supervisory authority. In the UK this is the Information Commissioner's Office (ICO) at ico.org.uk. In the EEA you may contact your local data protection authority.

General choices (all visitors)

You may choose not to provide certain information, though some features or communication with us may be limited as a result. You can manage cookies through the cookie preference centre on our site and through your browser settings.

8. California Privacy Rights

If you are a California resident, you may have rights under California privacy law, including the right to:

Know and access the personal information we collect about you
Request deletion of certain personal information
Know how your data is used and disclosed
Not be discriminated against for exercising your rights

We do not sell personal information. To make a request, contact us using the information in Section 13. We will verify your request before responding, subject to applicable exceptions.

9. Children's Privacy

Our website is not directed to children, and we do not knowingly collect personal information from children. In the UK and EEA, online services are not intended for children under the age applicable in their country (generally between 13 and 16). In the US, we do not knowingly collect information from children under 13. If you believe a child has provided personal information to us, please contact us so we can take appropriate action.

10. Security

We use reasonable administrative, technical, and organisational measures to protect the information we collect. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

11. Cookies and Consent

When you first visit our site, you are presented with a cookie banner that lets you accept or reject non-essential cookies. You can change your choices at any time through the cookie preference centre, accessible from our site footer.

We use the following categories:

Essential — required for basic website functionality. These are always active and cannot be disabled.
Analytics — help us understand how the site performs and how visitors interact with it. These are only set with your consent.

We operate our cookie banner on an opt-in basis for non-essential cookies. You can also manage cookies through your browser settings.

12. External Links

Our website may contain links to other websites or services not operated by Tactic. We are not responsible for the privacy practices of third-party sites and encourage you to review their policies.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any updated version will be posted on this page with a revised effective date. Significant changes will be made clear where appropriate.

14. Contact Us

If you have questions about this Privacy Policy or wish to make a privacy request, please contact us at:

TACTIC
236 WEST PORTAL AVE #768
SAN FRANCISCO, CA 94127
V: (415) 871-7383
EMAIL: info@wearetactic.com
WEBSITE: tactic.studio