Data Privacy Statement.

This data privacy statement applies for the use of the website www.sanitap.org ("the website"). For other websites referenced via links, the data privacy notices and statements published there apply.

Data privacy is extremely important to SaniTap. The collection and processing of your personal data takes place in compliance with the applicable legal data protection provisions, in particular the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This statement describes how and for what purpose your personal data is collected and used, and what options you have in connection with your data.

1. Controller

The controller responsible for the collection, processing, and use of your personal data within the meaning of the UK GDPR is:

SaniTap Ltd
Registered in England and Wales, company number 12602556
Tel: +44 333 77 26 26 9
Email: [email protected]
Managing directors: Andrew Tanswell and Adriaan Mol

2. What we collect and process

2.1 Hosting and access data

This website is hosted on Cloudflare Pages, run by Cloudflare, Inc. When you open a page, Cloudflare's network processes the technical data of the request: the address requested, the date and time, the IP address of your device, your browser type and version, and the referring page. Cloudflare needs this data to deliver the page and to protect the site against attacks, and processes it on our behalf under its data processing addendum.

SaniTap does not keep logs of individual visits. We see only aggregate figures, such as the number of requests, in Cloudflare's dashboard. We do not use this data to identify you or to build profiles.

2.2 Web analytics

This website currently runs no web analytics, visitor tracking, or session-replay tools. We do not use Google Analytics, Microsoft Clarity, Facebook Pixel, LinkedIn Insight Tag, or any equivalent. No cookies are set for analytics or marketing purposes.

If we add web analytics in future, we will use a privacy-friendly, cookieless service that processes no personal data, and this statement will be updated accordingly.

2.3 Contact and enquiry forms

When you send one of our forms, the details you enter (such as your name, email address, phone number, company and message) travel over an encrypted connection to a small program on Cloudflare's network. The program passes them straight to SaniTap's own Microsoft 365 email system as an email to [email protected] and keeps no copy. The email also records the time, your device's IP address and country, your browser and the page you sent it from, so we can spot misuse. Your enquiry is then stored in SaniTap's mailboxes, which Microsoft holds for us in the United Kingdom.

We use these details only to answer your enquiry. If an enquiry does not lead to work with us, we delete it within two years. If it does, it becomes part of our business records. We process them on the basis of our legitimate interest in responding to enquiries (Art. 6(1)(f) UK GDPR).

To keep automated spam out, Cloudflare Turnstile checks that a person is sending each form. The check starts when you begin filling in a form: Turnstile runs a short test in your browser and sends Cloudflare your IP address, the site's address and technical information about your browser and how it behaves on the page. Most visitors see nothing; a few are asked to tick a box. Turnstile does not read what you type into the form. It sets no cookies; it keeps one item, for the check, in your browser's local storage for challenges.cloudflare.com. Cloudflare runs the check for us. It also uses the same information, as a controller in its own right, to improve Turnstile, as its Turnstile Privacy Addendum explains. We rely on our legitimate interest in keeping the forms free of misuse (Art. 6(1)(f) UK GDPR).

2.4 Fonts and hosting

Fonts. The typefaces on this website are served from the website itself, so your browser does not contact Google or any other font service.

Hosting. The website is hosted on Cloudflare Pages by Cloudflare, Inc. (United States), which serves it from its worldwide network, normally from the data centre nearest to you (see 2.1). We have a data processing agreement with Cloudflare.

2.5 Categories of data and purposes

Categories of data processed:

• Contact details you submit via forms (name, email, phone, company)
• Content data you submit (your enquiry, message)
• Access data processed by our host to deliver the site (IP address, browser type, referrer, time of access)
• Technical information from your browser for the spam check on the forms (IP address, browser details)
• None from analytics, no analytics service currently runs on this site

Categories of data subjects: visitors and users of the website ("users").

Purposes of processing: provision of the website and its content; response to contact and commercial enquiries; security and operational integrity; aggregate usage analysis.

3. Your rights as a data subject

In accordance with applicable laws, you have the following rights regarding your personal data. To exercise these rights, please email [email protected], clearly identifying yourself.

3.1 Right of access

You have the right to receive confirmation from us about whether we process personal data concerning you, and to receive free information and a copy of that data, including the purpose, categories, recipients, planned retention, and the existence of rights to rectification, erasure, restriction, and objection.

3.2 Right to rectification

You have the right to request that we immediately rectify incorrect personal data concerning you, and complete incomplete personal data.

3.3 Right to erasure ("right to be forgotten")

You have the right to request the immediate erasure of personal data we hold about you where one of the grounds in the UK GDPR applies, including where the data is no longer necessary, where you withdraw consent, or where you object to the processing.

3.4 Right to restriction of processing

You have the right to request restriction of processing in defined circumstances, such as where you dispute the accuracy of the data, or where you have objected to the processing pending verification.

3.5 Right to data portability

You have the right to receive the personal data you have provided to us in a structured, common, and machine-readable format, and to transfer that data to another controller, where the processing is based on consent or contract and takes place by automated means.

3.6 Right to object

You have the right, on grounds relating to your particular situation, to object at any time to the processing of personal data concerning you that takes place on the basis of legitimate interests (Art. 6(1)(e) or (f) UK GDPR).

3.7 Automated decision-making

You have the right not to be subject to a decision based solely on automated processing, including profiling, that produces legal effects concerning you. No automated decision-making takes place on the basis of personal data collected by SaniTap via this website.

3.8 Right to withdraw consent

Where processing is based on your consent, you have the right at any time to withdraw that consent.

3.9 Right to lodge a complaint

You have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator, if you believe that the processing of personal data concerning you is unlawful: ico.org.uk/make-a-complaint. If you live or work in the EU, you can also complain to the data protection authority there.

4. Data security

The website is served over HTTPS using TLS. Personal data is transmitted in encrypted form. We take technical and organisational security measures appropriate to the nature of the data we hold and adjust them as technology evolves. We cannot guarantee perfect protection against unauthorised access, particularly for data sent via email; however, the volume and sensitivity of personal data this website handles is intentionally minimal.

5. Data transfers outside the UK and the EU/EEA

One of our processors is based outside the UK and the EU/EEA:

• Cloudflare (United States) hosts the website, carries form submissions to our email system and runs the spam check on the forms. We rely on the EU-US Data Privacy Framework and its UK Extension, and on standard contractual clauses with the UK Addendum, as set out in Cloudflare's data processing addendum.

Enquiries you send through our forms are stored in Microsoft 365 in the United Kingdom.

6. Contact us about your data

For any questions about our data privacy practices or this statement, or to exercise your rights as a data subject, please contact us at [email protected].

7. Changes to this statement

SaniTap reserves the right to update this statement to reflect changes in the law, our services, or our processing arrangements. Users are encouraged to review this statement periodically.

Last updated: October 2026 · Download PDF