Privacy notice

Last updated: 9 October 2026

This notice explains what personal data tidemail holds about you, why, and what you can do about it.

Who we are

tidemail helps small Shopify brands with Klaviyo email marketing. We are two people, Tom Conderanne and Matas Beržanskas, based in Madrid, Spain.

• Controller: Tom Conderanne and Matas Beržanskas
• Contact email: tom.conderanne@tidemail.agency
• Website: https://tidemail.agency

We are responsible for your data under the EU General Data Protection Regulation (GDPR).

What data we hold about you

If we have emailed you, or plan to, we hold:

• your name and your role (for example, founder or owner)
• your business email address
• your company and its online store
• the public observation about your store that we mention in our email (for example, how your store invites visitors to sign up for emails)
• where we got your email address
• a record of the emails we sent you and any replies you sent us

We don't collect anything about your private life.

Where it comes from

We get your details from one of two places:

• your brand's own website, where your business email is published, or
• a B2B contact-data provider, such as Origami.

The store observation comes from visiting your public store, as any shopper could. Each email says which source we used.

Why we use it

To send you a short, one-to-one business email about our Klaviyo services, and at most two follow-ups if you don't reply. If you reply, we use your details to continue that conversation. We don't sell or rent your data, and we don't add you to a newsletter.

Our lawful basis

We rely on legitimate interest (GDPR Article 6(1)(f)). Our interest is finding clients for our business. We have weighed it against your interests:

• We use business contact data only, connected to your role at your company.
• The email is about your store's email marketing, which relates directly to your job.
• We send few emails. Each one is written for one store, not sent as a mass mailing.
• Stopping us is easy. Reply "no" once and we never contact you again.

If you disagree, object at any time (see below) and we will stop.

How long we keep it

• Prospect data: 12 months after our last contact with you. Then we delete it.
• Our "do not contact" list: if you object, we keep only your email address and your company's web domain, for as long as we do outreach. This is the only way to make sure we never contact you or your company again. We use it for nothing else.

If you become a client, we keep your details for as long as we work together and as the law requires after.

Your right to object, and your other rights

You can object at any time. For direct marketing this right is absolute (GDPR Article 21(2) and (3)). We stop, and we don't ask why.

You also have the right to:

• access the data we hold about you
• have it corrected if it's wrong
• have it erased
• restrict how we use it
• receive it in a portable format, where this applies

How to use your rights: reply "no" to any of our emails to object, or write to tom.conderanne@tidemail.agency for anything else. We reply within one month. If we need to check who you are first, we will tell you.

If you ask us to erase your data, we still add your email address and domain to the "do not contact" list, so we don't reach you again by mistake.

We don't make automated decisions about you that have legal or similarly significant effects.

International transfers

We are in Spain. You are most likely in the United States, so sending you an email transfers your data to the US. Our email runs on Google Workspace, which may process data in the US and elsewhere. The contact-data provider we use may also be based outside the EU. Where data leaves the European Economic Area, we rely on the safeguards the GDPR allows, such as the EU–US Data Privacy Framework or the European Commission's standard contractual clauses, as applicable to each provider.

Your right to complain to the AEPD

If you think we have handled your data wrongly, you can complain to the Spanish data protection authority, the Agencia Española de Protección de Datos (AEPD), at www.aepd.es.

Website visitors

Our website, https://tidemail.agency, sets no cookies. We use cookieless analytics only, which count visits in aggregate and don't identify you or follow you across other sites.

Changes

If we change this notice, we update the date at the top.