Effective 28 Sept 2026
This notice explains how Azilo Technologies Limited, trading as Tayl (“Tayl”, “we”, “us”), a company registered in Scotland (company number SC463451), uses personal information when you visit tayl.net, contact us, buy our service, or use Tayl at tayl.pro, taylapp.net or in our mobile apps. Contact us at hello@tayl.net or Suite 6A, Newhailes Business Park, Newhailes Road, Musselburgh, East Lothian, EH21 6RH.
Your employer or organisation (our “Customer”) controls the training records, content, chat messages and other workplace information it puts in Tayl, and we process that information on its instructions. It should tell you how it uses this information. Contact it first about its decisions on training, reports, chat moderation and oversight, and how long records are kept. We will help it respond where our agreement and the law require.
We control your personal Tayl account, which you can use with more than one workplace, and the information we use for our website, sales, billing, security and support.
Account details: name, email address, organisation, job title, manager, groups or sites, sign-in details, and any profile photo, language or time zone you add.
Training records: assignments, progress, quiz and SCORM answers, scores, completions, certificates, reading time, course feedback and manager notes.
Signed documents: the document, your drawn signature, the time of signing, and the IP address and device used, which appear on the signed record.
Chat, where your organisation uses it: messages, photos, reactions, reports, and records of moderation and oversight.
HR or rota information, if your organisation connects its system: for example your name, email, employee ID, start date, role and location.
Sign-in, device and technical information: sign-in sessions, IP address, device, browser and app version, logs and error reports, and, in our mobile apps, push notification tokens and crash reports.
Billing and support: plan and transaction records, payment references and messages you send to support. Our payment provider handles card details; we never receive full card numbers.
Website and sales: details you give us through tayl.net forms, chat and meeting bookings, and how you use our website.
We get this information from you, your organisation, or the devices and services you use to access Tayl. If someone refers you to us, we receive your name, email and company from them, and will tell you this when we first contact you.
Your organisation’s admins and managers can see your account and training information according to their permissions, including assignments, progress, results, completions, signed documents, and sign-in and device activity. Chat access is explained in section 4.
We will tell you when information is required. Without it, we may not be able to provide an account, take a payment or provide a feature.
Providing the service, billing and support a Customer asks for: our contract with the Customer, or our legitimate interests in running it where you are a User.
Keeping Tayl secure, detecting misuse and monitoring errors and performance: our legitimate interests.
Support, including when our staff access an organisation’s account to help or to maintain the service: our legitimate interests. This access is logged, and chat access is limited as described in section 4.
Improving Tayl-supplied courses using ratings and feedback combined across organisations, leaving out small groups: our legitimate interests.
Answering enquiries, following up unfinished sign-ups and sending relevant business emails: our legitimate interests, or consent where the law requires it. You can opt out at any time.
Tax, accounting and other legal duties: legal obligation.
Optional analytics and marketing cookies: consent.
We do not make decisions about you based solely on automated processing that have legal or similarly significant effects. For workplace information, your organisation decides the purposes and lawful basis.
If your organisation uses Chat, your messages, photos and reactions are stored so people in the chat can see its history. Your organisation decides how Chat is used and should tell you about its policy.
Messages and photos are kept for as long as your organisation’s account exists. You cannot delete your own messages.
If you report a message, your organisation’s admins see that message and your explanation.
Your organisation’s admins can delete messages. Other people then see “Deleted message”, but the original is kept so it can be reviewed.
If your organisation turns on oversight, an organisation admin can read a particular chat, including earlier messages, for a recorded purpose such as a complaint, a disciplinary or safety investigation, or a legal request. Access is read-only, lasts 24 hours and every view is logged. When it ends, a notice in the chat shows which dates were reviewed. An admin can delay the notice for up to 30 days at a time, giving a reason.
Our staff cannot read chat messages or photos, except under a written, approved and recorded procedure where needed to comply with the law, respond to a security incident or act on a data protection request.
Chat notifications show the sender’s name and a preview of the message, and are delivered through Apple, Google or your browser’s push service. Your device settings control whether previews show on your lock screen. Sent notifications cannot be recalled.
If you delete your Tayl account, other people see “Deleted user”, and your messages and photos that have not been reported are erased seven years later.
We do not sell personal data. We share it only with our service providers, where the law requires, or as part of a sale or reorganisation of our business with appropriate protections. Our providers cover hosting, file storage, email, notifications, monitoring, support, payments, customer relationship management and our website, and may use personal data only to provide their services to us. Our Data Processing Addendum includes the subprocessor and service provider list, with what each provider does and where.
If your organisation connects an HR or rota system, or course authors embed content from services such as YouTube or Vimeo, information is shared under your organisation’s own arrangements with those providers.
Some providers are based in, or access data from, countries outside the UK, including the United States. For these transfers we rely on UK adequacy regulations (including the UK Extension to the EU–US Data Privacy Framework) or the ICO’s International Data Transfer Agreement or Addendum, with any required risk assessment. Contact hello@tayl.net for details about a particular provider.
We keep information only as long as needed for the purposes above, our contract with the Customer and the law.
Workplace records: your organisation decides how long it needs them. We keep them while its account exists, including on the free plan or while restricted, until it closes the account or asks us to delete them. Accounts with no paid plan and no sign-ins for three years may be closed after notice.
Your Tayl account: you can ask us to delete it at any time (see section 7). We delete your sign-in account and profile, normally within a week. Your employers keep your training records, signed documents, certificates and relevant chat messages for seven years, so they can show that training took place, unless a longer period is justified and recorded.
Billing records: six years after the end of the financial year they relate to.
Logs: API and webhook logs for 90 days; audit and access logs while the organisation’s account exists; security logs for as long as needed to investigate incidents.
Temporary files: data exports for 7 days; HR sync records for 30 days.
Support and sales: for as long as needed to deal with the enquiry or business relationship.
Backups: overwritten within 35 days. If we restore a backup, we reapply any later deletions before the data is used.
We protect information with access controls, encryption and the other measures in our Information Security Policy, which Customers can request. No online service can guarantee absolute security.
Depending on the circumstances, you can ask to access, correct, delete, restrict or transfer your personal data, or object to how we use it. You can withdraw consent where we rely on it, and object to direct marketing at any time. To delete your Tayl account, choose Delete my account in your profile on Tayl V3, or email hello@tayl.net if you use Tayl V2. For information your employer controls, contact your employer first. For information we control, email hello@tayl.net.
If you have a complaint about how we handle your personal data, contact us at hello@tayl.net or our postal address. We will acknowledge it within 30 days, investigate, and tell you the outcome without undue delay. You can also complain to the Information Commissioner’s Office at ico.org.uk.
The Tayl apps use essential cookies to keep you signed in and secure. Videos that course authors embed from YouTube or Vimeo may set those providers’ cookies. Our website tayl.net uses optional analytics, marketing, chat and referral cookies only if you agree, and you can change your choice at any time in cookie settings.
Tayl is for organisations and their staff, and is not designed for children to sign up to on their own. Organisations may invite staff aged 16 or over. If you are under 18, your employer should explain how it uses Tayl in a way you can understand.
We may update this notice. We will show the effective date and tell you about material changes by email or in-app notice. Contact hello@tayl.net with questions.