Legal
Privacy Notice
This Privacy Notice explains how Texas Atlantic Capital (“TAC”, “we”, “us”) collects, uses, shares and protects personal information when you visit this website or contact us. It is intended to meet our obligations under the EU General Data Protection Regulation (“GDPR”), the UK GDPR, and the California Consumer Privacy Act as amended by the California Privacy Rights Act (together, “CCPA”).
1. Information we collect
This website has no forms, user accounts or comment functions. We collect only what is needed to deliver the website and respond to you.
| Category | Examples | Source |
|---|---|---|
| Device and network information | IP address, browser type, operating system, pages requested, date and time of access | Automatically, through our hosting provider and the services listed in section 3 |
| Identifiers / contact details | Your name and email address | You, if you email us |
| Communications | The content of any email you send us | You |
We do not knowingly collect sensitive personal information (such as government identifiers, financial account details, precise geolocation, health data or biometric data) through this website, and we do not use personal information to make decisions based solely on automated processing that produce legal or similarly significant effects for you.
2. How and why we use it
| Purpose | Information used | GDPR legal basis |
|---|---|---|
| Operating, delivering, securing and troubleshooting the website | Device and network information | Our legitimate interest in providing a secure, working website (Art. 6(1)(f)) |
| Responding to your emails and requests | Contact details, communications | Steps taken at your request (Art. 6(1)(b)) or our legitimate interest in answering enquiries (Art. 6(1)(f)) |
| Complying with the law and defending legal claims | Any of the above, as needed | Legal obligation (Art. 6(1)(c)) or legitimate interest (Art. 6(1)(f)) |
3. Who we share it with
We share personal information only with service providers that help us run this website, under contracts or terms that limit their use of it:
- Our website hosting provider, which processes server logs needed to deliver the site.
- Google LLC / Google Ireland Ltd. — Google Fonts (typefaces). Google receives your IP address and browser information when the fonts load. See the Google Privacy Policy.
We may also disclose information where required by law, to protect our rights or the safety of others, or as part of a merger, acquisition or sale of assets, in which case this notice will continue to apply.
We do not sell your personal information and we do not “share” it for cross-context behavioral advertising, as those terms are defined under California law, and we have not done so in the preceding 12 months.
4. International transfers
We are based in the United States, and our service providers may process data in the United States and other countries outside the EU/EEA and UK. Where personal information is transferred, we rely on an adequacy decision (including the EU–U.S. Data Privacy Framework and its UK extension, where the recipient is certified) or on the European Commission’s Standard Contractual Clauses (and the UK Addendum), together with any additional safeguards that are needed. You can ask us for a copy of the relevant safeguards using the contact details below.
5. How long we keep it
- Server log data — for the periods set by our hosting provider and only as long as needed for security and troubleshooting.
- Emails and communications — as long as needed to handle your enquiry and meet our legal obligations, or until you ask us to delete them where the law allows.
6. Security
We use appropriate technical and organisational measures to protect personal information, including encrypted (HTTPS) connections and restricted access. No method of transmission or storage is completely secure, but we work to protect your information and will notify you and the authorities of a breach where the law requires it.
7. Your rights in the EU/EEA and UK
If the GDPR or UK GDPR applies to you, you have the right to:
- Access the personal information we hold about you and receive a copy;
- Rectify inaccurate or incomplete information;
- Erase your information (“right to be forgotten”);
- Restrict how we process your information;
- Data portability — receive your information in a structured, machine-readable format;
- Object to processing based on our legitimate interests, and to direct marketing at any time;
- Withdraw consent at any time, where we rely on consent, without affecting processing carried out before withdrawal;
- Lodge a complaint with your local data protection supervisory authority (in the UK, the Information Commissioner’s Office). A list of EU authorities is available from the European Data Protection Board.
We respond to requests within one month, which may be extended by two further months for complex or numerous requests; we will tell you if that happens.
8. Your rights in California
If you are a California resident, the CCPA gives you the right to:
- Know what personal information we have collected about you, including the categories, sources, purposes and recipients, and to receive the specific pieces of information;
- Delete personal information we have collected from you, subject to legal exceptions;
- Correct inaccurate personal information;
- Opt out of the sale or sharing of personal information. We do not sell or share personal information, but we honour opt-out preference signals such as Global Privacy Control (GPC);
- Limit the use of sensitive personal information. We do not collect or use sensitive personal information for purposes that would trigger this right;
- Non-discrimination — we will not treat you differently because you exercised your rights.
Categories collected in the last 12 months. Identifiers (IP address, and name and email address if you email us) and internet or other electronic network activity information, from the sources and for the business purposes described in sections 1 and 2, disclosed for business purposes to the service providers listed in section 3. Retention periods are described in section 5.
Authorised agents. You may use an authorised agent to submit a request on your behalf. We may ask the agent for proof of authorisation and ask you to verify your identity directly.
We respond to verifiable requests within 45 days, which may be extended by a further 45 days where reasonably necessary; we will tell you if that happens.
9. How to exercise your rights
Email contact@ta.capital with the subject line “Privacy request” and tell us which right you wish to exercise. To protect your information, we will verify your identity, usually by confirming your request from the email address you used to contact us. Exercising your rights is free of charge unless a request is manifestly unfounded or excessive.
10. Cookies
We do not use advertising or analytics cookies. Google Fonts does not set cookies when fonts load, but Google does receive your IP address.
11. Links to other websites
This website links to the websites of portfolio companies, news outlets and other third parties. We are not responsible for their privacy practices; please read their privacy notices before providing them with personal information.
12. Children
This website is not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, please contact us and we will delete it.
13. Changes to this notice
We may update this notice from time to time. We will post the updated version on this page with a new effective date.
14. Contact us
For any questions about this notice or how we handle personal information, contact us at contact@ta.capital or write to Texas Atlantic Capital, 4141 Southwest Freeway, Suite 340, Houston, TX 77027, USA.