Privacy Policy
Last updated: 22 August 2026
1. About this Privacy Policy
At tami, we respect your privacy and are committed to protecting your personal information.
This Privacy Policy explains how we collect, use, store and protect personal information when you:
- visit tami.scot;
- create or use a customer account;
- purchase products from tami;
- contact us;
- subscribe to marketing communications;
- attend or interact with tami-supported events;
- upload photographs through tami cam;
- view or retrieve photographs through tami cam; or
- otherwise interact with tami online.
This notice is intended to comply with applicable UK data-protection legislation, including the UK GDPR and Data Protection Act 2018.
For the purposes of data-protection law, the data controller is:
tami Ltd
Scotland, United Kingdom
Website: https://tami.scot
Email: info@tami.scot
2. What information we collect
The personal information we collect depends upon how you interact with tami.
Identity and contact information
This may include:
- your name;
- email address;
- telephone number;
- billing address;
- delivery address; and
- other contact information you provide.
Account information
Where you create an account, this may include:
- username;
- account details;
- saved addresses;
- order history; and
- account preferences.
Passwords are handled through the website’s authentication system and should not be accessible to tami staff in readable form.
Purchase and transaction information
This may include:
- products purchased;
- order value;
- order status;
- delivery information;
- refunds and returns;
- transaction references; and
- communications concerning your order.
Payment-card information is normally processed directly by our payment provider. tami does not need to store your complete payment-card number.
Communications
We may retain information contained in:
- emails;
- contact forms;
- customer-service enquiries;
- social-media communications; and
- other correspondence with tami.
tami cam information
When you use tami cam, we may process:
- photographs you upload;
- your email address;
- the event associated with the upload;
- date and time information;
- your photograph-use selection;
- consent or permission records;
- changes subsequently made to those permissions;
- technical information associated with an upload;
- authentication or session information used to protect photograph downloads; and
- security and access records.
Technical and website information
This can include:
- IP address;
- browser type;
- device type;
- operating system;
- referring website;
- pages visited;
- approximate geographic information derived from technical data;
- cookie identifiers;
- website interactions; and
- security logs.
We seek to collect only information that is reasonably necessary for the relevant purpose.
3. Why we use your information and our lawful basis
UK data-protection law requires us to have a lawful basis for processing personal information.
Depending upon the circumstances, tami may rely upon:
Contract – where processing is necessary to sell or deliver a product, operate an account or provide a service you have requested.
Legal obligation – where we are required to retain or process information to comply with applicable law, such as accounting or tax requirements.
Legitimate interests – where processing is reasonably necessary to operate, improve or protect tami and does not override your rights and interests.
Examples may include fraud prevention, website security, responding to enquiries and maintaining appropriate business records.
Consent – where you have actively agreed to a particular use, such as certain marketing communications or particular uses of photographs submitted through tami cam.
Where we rely upon consent, you may withdraw it at any time.
Withdrawal does not affect the lawfulness of processing that occurred before consent was withdrawn.
4. Shopping with tami
When you place an order, we use your information to:
- process your order;
- take or facilitate payment;
- arrange delivery;
- send order and delivery communications;
- provide customer service;
- manage returns, cancellations and refunds;
- prevent fraudulent transactions;
- maintain transaction records; and
- meet accounting, tax and other legal requirements.
Information necessary to fulfil your order is principally processed because it is necessary for the performance of our contract with you.
Certain transaction information is retained because tami has legal obligations to maintain appropriate financial records.
Information may be supplied to companies necessary to complete your order, such as payment processors and delivery providers.
5. Payment processing
Payments on tami.scot are processed using WooPayments, a WooCommerce/Automattic payment service.
WooPayments may process information necessary to complete and manage payments, including billing information, payment information, transaction details, device information and information used for fraud prevention.
tami generally receives transaction confirmation and relevant payment and order information rather than needing to store complete payment-card information itself.
WooPayments and associated payment infrastructure may process personal information independently where required for payment processing, fraud prevention, regulatory compliance and financial services.
6. Customer accounts
If you create an account on tami.scot, we process information necessary to provide and administer that account.
Depending upon the facilities available, you may be able to:
- view previous orders;
- update contact information;
- manage delivery addresses; and
- change account preferences.
Authorised tami personnel may access account information where reasonably necessary for customer support, order management, security, website administration or legal compliance.
7. tami cam
tami cam allows people attending participating events to upload photographs and interact with event galleries and related tami experiences.
Because photographs can identify people, photographs and associated information may constitute personal information.
When you upload a photograph through tami cam, we may record:
- the photograph;
- your email address;
- the event concerned;
- the time and date of submission;
- your selected photograph-use option;
- records of your permission or consent;
- subsequent changes to those permissions; and
- relevant security and technical information.
Photograph-use choices
Where available for the particular event, tami cam may ask you to select how your photograph can be used.
Gallery + Highlight Reel
The photograph may be displayed in the relevant tami cam gallery and considered for inclusion in event highlight material.
Gallery only
The photograph may be displayed in the relevant tami cam gallery but should not be used in the highlight reel under that permission.
Highlight Reel only
The photograph may be considered for inclusion in event highlight material but should not be displayed in the public gallery under that permission.
We maintain records of the permission selected when the photograph was submitted.
If that selection is subsequently changed following a request from the uploader or other authorised person, tami may retain an audit record of the original selection and subsequent change rather than silently replacing the original record.
This helps us demonstrate and respect the permissions associated with the photograph.
8. Public tami cam galleries
Where you choose an option allowing gallery publication, the photograph may become publicly accessible through tami.scot.
This means other visitors may be able to see the photograph.
You should therefore only submit a photograph for gallery publication where you are comfortable with it being displayed publicly.
Where tami provides a controlled facility for obtaining a framed or original version of an uploaded photograph, additional authentication or access controls may be used.
9. Photograph downloads and security
We take reasonable steps to prevent unauthorised access to protected tami cam photographs.
Where an email address is used to authenticate access to photographs, authentication is intended to allow access only to photographs associated with that same uploader, account or email identity.
tami may maintain security logs relating to authentication and photograph downloads where reasonably necessary to:
- protect users;
- detect abuse;
- investigate unauthorised access;
- maintain service security; and
- resolve disputes.
These records are processed on the basis of our legitimate interest in protecting tami cam and its users.
10. Uploading photographs containing other people
Please only upload photographs that you are entitled to submit.
If another identifiable person appears prominently in a photograph, you should ensure that you have an appropriate basis or permission to submit the photograph for the use you select.
You should not upload photographs that are:
- unlawful;
- seriously intrusive;
- defamatory;
- threatening;
- discriminatory;
- sexually explicit;
- deliberately humiliating; or
- otherwise inappropriate for an event gallery.
tami reserves the right not to publish, or to remove, photographs where reasonably necessary.
11. Photographs of children
Martial-arts events frequently involve children and young people, so we take additional care where photographs may contain children.
A parent, guardian or other appropriately authorised adult should normally make decisions concerning submission and publication where this is required by the circumstances and applicable law.
You should not upload an image of another person’s child where you know that the parent, guardian or event organiser has prohibited photography or publication.
tami may remove or restrict access to an image where a legitimate safeguarding or privacy concern is brought to our attention.
If you are a parent or guardian and believe that an image of a child for whom you are responsible has been uploaded or published inappropriately, contact:
Please identify the event and photograph where possible so that we can investigate promptly.
12. Metadata and location information in photographs
Digital photographs can contain metadata such as:
- date and time;
- device or camera information; and
- in some circumstances, geographic location information.
Where reasonably practicable, tami seeks to minimise unnecessary metadata associated with publicly displayed images.
Uploaders should also avoid intentionally submitting photographs containing sensitive location metadata where this is not necessary.
13. Withdrawing photograph permission
Where our use of a photograph is based upon your consent, you may withdraw that consent.
Contact:
Please provide enough information for us to identify the photograph, such as:
- your email address;
- the relevant event; and
- the approximate date of upload.
Where applicable, we will stop future processing based upon that consent and remove the photograph from tami-controlled uses within a reasonable period.
Withdrawal cannot necessarily undo uses that lawfully occurred before withdrawal.
For example, material already legitimately distributed or published by independent third parties may not always be within tami’s control.
14. Event photography
tami may attend, support or participate in martial-arts events where photography or video is taking place.
Event organisers may operate their own photography policies.
Images supplied directly to tami by event organisers, photographers, federations or other organisations may therefore have been obtained under arrangements separate from tami cam.
Where tami itself determines a new purpose for processing identifiable photographs, we will seek to ensure that an appropriate lawful basis exists.
15. Email marketing
tami uses FluentCRM to manage email marketing, subscriber lists and related customer communications.
Where you subscribe to marketing, we may process information including:
- your name;
- email address;
- subscription status;
- marketing preferences;
- date and source of consent;
- email engagement information where enabled; and
- unsubscribe or suppression records.
Where consent is legally required, marketing emails will only be sent where the necessary permission has been obtained.
You can unsubscribe at any time using the unsubscribe facility contained in relevant emails or by contacting us at info@tami.scot.
We may retain a limited suppression record after you unsubscribe so that we can continue to respect your request and avoid accidentally re-subscribing you.
16. SMS marketing
tami may occasionally send promotional offers and event-related marketing by SMS.
SMS marketing is intended to be used selectively, for example to let subscribers know about a special promotion or limited-time offer taking place during an event.
Email is our primary marketing communication channel and SMS messages are expected to be used less frequently.
We will not send SMS marketing simply because you have provided us with your telephone number when placing an order, creating an account, using tami cam, contacting us or otherwise interacting with tami.
We will only use your telephone number for SMS marketing where the appropriate marketing consent has been obtained.
SMS marketing may include:
- special offers and promotions;
- limited-time event offers;
- product announcements;
- competitions or campaigns; and
- other tami promotional messages that you have agreed to receive.
SMS messages may display “tami” as the sender name.
You can withdraw your consent to SMS marketing at any time using the opt-out method provided with the relevant service or by contacting info@tami.scot.
Withdrawal of consent will not affect the lawfulness of marketing communications sent before consent was withdrawn.
We may retain a limited suppression record where necessary to ensure that an opt-out continues to be respected.
17. SMS service provider
tami uses ClickSend to deliver SMS marketing communications.
Where you have consented to receive SMS marketing, your telephone number and information necessary to deliver and manage those messages may therefore be processed by ClickSend on our behalf.
ClickSend may also process technical information relating to message delivery and status.
Where information is transferred internationally, appropriate protections required under UK data-protection law will apply.
18. Cookies
tami.scot uses cookies and similar technologies.
Some cookies are strictly necessary for the website to operate.
These can include cookies required for:
- shopping baskets;
- checkout;
- customer accounts;
- authentication;
- security;
- fraud prevention;
- remembering privacy choices; and
- maintaining website sessions.
Other technologies may be used for:
- analytics;
- advertising;
- measuring website performance;
- embedded services; and
- other optional functions.
Where consent is legally required, optional cookies or similar technologies will not be used until the appropriate consent has been obtained.
Visitors should be able to manage applicable choices through the website’s cookie controls.
More information about the cookies currently in use is available through the cookie preferences tool on tami.scot.
19. Google Analytics
tami.scot uses Google Analytics to understand how visitors use the website.
Depending upon your cookie choices, Google Analytics may process information such as:
- pages visited;
- time spent on the website;
- browser and device information;
- approximate geographic information;
- referring source;
- interactions with website content; and
- cookie or similar identifiers.
Google Analytics is used to help us improve website performance, understand visitor behaviour and assess the effectiveness of our content and marketing.
Where required, Google Analytics will only operate after the appropriate cookie consent has been obtained.
Google may process information outside the United Kingdom and may use international transfer safeguards where required.
20. Embedded and third-party content
Pages on tami.scot may contain services or content provided by other organisations, such as:
- videos;
- maps;
- social-media content;
- payment facilities;
- chat or messaging facilities; or
- other embedded functionality.
Those providers may process information independently when you interact with their services.
Their processing is governed by their respective privacy policies where they act independently of tami.
21. Who we share information with
tami does not sell your personal information.
We may provide information to trusted organisations where reasonably necessary to operate tami.
These can include providers of:
- website hosting;
- website infrastructure;
- e-commerce systems;
- payment processing;
- delivery and logistics;
- email services;
- customer communications;
- website analytics;
- SMS delivery;
- security and anti-fraud services;
- backups;
- technical support;
- accounting; and
- professional legal or compliance services.
We may also disclose information:
- where required by law;
- in response to a valid legal request;
- to prevent or investigate fraud or serious misuse;
- to protect the rights or safety of tami, our customers or others; or
- in connection with the establishment, exercise or defence of legal claims.
Where an organisation processes information on our behalf, we seek to use appropriate contractual and security arrangements.
22. Third-party service providers
tami currently uses or may use the following principal service providers:
| Purpose | Provider |
|---|---|
| Website hosting | Hostinger |
| E-commerce platform | WooCommerce |
| Payment processing | WooPayments |
| Email marketing / CRM | FluentCRM |
| Website analytics | Google Analytics |
| SMS marketing | ClickSend |
The services used by tami may change over time as the website and business develop.
23. Website hosting
tami.scot is hosted by Hostinger.
Hostinger may process technical information necessary to host, secure and operate the website, including server logs, IP addresses, backups and other technical data.
We use hosting services on the basis that they are necessary for the secure and reliable operation of tami.scot.
24. International transfers
Some technology providers may process information outside the United Kingdom.
Where personal information is transferred to another country, we will take appropriate measures required by UK data-protection law.
Depending upon the destination and provider, this may include:
- a UK adequacy regulation;
- approved contractual safeguards; or
- another legally recognised transfer mechanism.
25. How long we keep information
We do not intend to keep personal information indefinitely simply because we can.
Retention depends upon the type of information and why we hold it.
| Information | General retention approach |
|---|---|
| Orders and financial records | Retained for the period required by UK tax and accounting law. |
| Customer accounts | While the account remains active, plus an appropriate period where records remain necessary. |
| Customer enquiries | For a reasonable period following resolution. |
| Marketing consent records | While relevant and for an appropriate period afterwards to demonstrate consent or withdrawal. |
| Marketing suppression records | As necessary to ensure we continue to respect an unsubscribe or opt-out request. |
| Security and access logs | For a proportionate security period. |
| tami cam upload records | For the relevant event or service period and an appropriate subsequent administrative period. |
| tami cam consent or permission records | As reasonably necessary to demonstrate the permissions governing use. |
| tami cam photographs | According to their permitted purpose, event requirements and applicable retention arrangements. |
| Backups | According to our backup rotation and retention schedule. |
Information may be retained for longer where reasonably necessary because of:
- legal obligations;
- fraud prevention;
- safeguarding;
- a complaint;
- a dispute;
- litigation; or
- regulatory requirements.
When personal information is no longer required, it should be securely deleted or anonymised as appropriate.
26. Security
We take appropriate technical and organisational measures designed to protect personal information from:
- unauthorised access;
- unauthorised disclosure;
- alteration;
- accidental loss;
- misuse; and
- destruction.
Measures may include:
- access controls;
- account authentication;
- administrative access restrictions;
- server-side access controls;
- secure website connections;
- software updates;
- security logging;
- backups; and
- appropriate staff and administrator access restrictions.
Access to personal information should be limited to people who reasonably require it for their role.
No online service can guarantee absolute security, but we continually seek to maintain safeguards appropriate to the information being processed.
27. Data breaches
If we become aware of a personal-data breach, we will investigate it and take appropriate action.
Where legally required, we will notify the Information Commissioner’s Office and/or affected individuals within the applicable statutory timescales.
28. Your data-protection rights
Depending upon the circumstances, UK data-protection law may give you the right to:
- access personal information we hold about you;
- correct inaccurate or incomplete information;
- request erasure of certain information;
- request restriction of certain processing;
- object to certain processing;
- receive certain information in a portable format;
- withdraw consent where processing is based upon consent; and
- complain about how your information is being processed.
These rights are not absolute and legal exceptions can apply.
To exercise a right, contact:
We may need to verify your identity before disclosing, changing or deleting personal information.
We will not ordinarily charge a fee for exercising your data-protection rights.
29. Automated decision-making
tami does not currently intend to make decisions that produce legal or similarly significant effects upon individuals solely through automated processing.
If this changes, this Privacy Policy will be updated as appropriate.
30. Complaints
If you are concerned about the way tami has processed your personal information, please contact us first so that we can investigate.
You also have the right to complain to the UK’s independent data-protection regulator:
Information Commissioner’s Office (ICO)
https://ico.org.uk/
31. Changes to this Privacy Policy
tami may update this Privacy Policy as our website, products and services develop or where legal requirements change.
The current version will be published on tami.scot with its latest revision date.
Where a change materially affects how we process existing personal information, we will take reasonable steps to inform affected individuals where appropriate.
32. Contact tami about privacy
Questions, requests or concerns about privacy should be sent to:
tami Ltd
5 South Charlotte Street
Edinburgh
EH2 4AN, Scotland.
Email: info@tami.scot
Website: https://tami.scot
For tami cam photograph removal or permission enquiries, please include the relevant event and sufficient information to identify the photograph.