Data Privacy Statement.

This data privacy statement applies for the use of the website www.sanitap.org ("the website"). For other websites referenced via links, the data privacy notices and statements published there apply.

Data privacy is extremely important to SaniTap. The collection and processing of your personal data takes place in compliance with the applicable legal data protection provisions, in particular the General Data Protection Regulation (GDPR). This statement describes how and for what purpose your personal data is collected and used, and what options you have in connection with your data.

1. Controller

The controller responsible for the collection, processing, and use of your personal data within the meaning of the GDPR is:

SaniTap Ltd
Tel: +44 333 77 26 26 9
Email: info@sanitap.org
Managing directors: Andrew Tanswell and Adriaan Mol

2. What we collect and process

2.1 Hosting and access data

This website is hosted on Cloudflare Pages, run by Cloudflare, Inc. When you open a page, Cloudflare's network processes the technical data of the request: the address requested, the date and time, the IP address of your device, your browser type and version, and the referring page. Cloudflare needs this data to deliver the page and to protect the site against attacks, and processes it on our behalf under its data processing addendum.

SaniTap does not keep logs of individual visits. We see only aggregate figures, such as the number of requests, in Cloudflare's dashboard. We do not use this data to identify you or to build profiles.

2.2 Web analytics

This website currently runs no web analytics, visitor tracking, or session-replay tools. We do not use Google Analytics, Microsoft Clarity, Facebook Pixel, LinkedIn Insight Tag, or any equivalent. No cookies are set for analytics or marketing purposes.

If we add web analytics in future, we will use a privacy-friendly, cookieless service that processes no personal data, and this statement will be updated accordingly.

2.3 Contact and enquiry forms

When you send one of our forms, the details you enter (such as your name, email address, phone number, company and message) travel over an encrypted connection to a small program on Cloudflare's network. The program passes them straight to SaniTap's own Microsoft 365 email system as an email to info@sanitap.org and keeps no copy. Your enquiry is then stored in SaniTap's mailboxes, which Microsoft holds for us in the United Kingdom.

We use these details only to answer your enquiry, and keep them for as long as we need them for that and for our ordinary business records. We process them on the basis of our legitimate interest in responding to enquiries (Art. 6(1)(f) GDPR).

2.4 Third-party fonts and hosting

Web fonts. This website loads typography (Bebas Neue, Outfit, DM Mono) from Google Fonts. When fonts are loaded, your browser establishes a connection to Google's font CDN, which receives your IP address as part of the request. Google does not match these requests with other data and does not place cookies via the Fonts service. See Google's privacy policy.

Hosting. The website is hosted on Cloudflare Pages by Cloudflare, Inc. (United States), which serves it from its worldwide network, normally from the data centre nearest to you (see 2.1). We have a data processing agreement with Cloudflare.

2.5 Categories of data and purposes

Categories of data processed:

• Contact details you submit via forms (name, email, phone, company)
• Content data you submit (your enquiry, message)
• Access data processed by our host to deliver the site (IP address, browser type, referrer, time of access)
• None from analytics, no analytics service currently runs on this site

Categories of data subjects: visitors and users of the website ("users").

Purposes of processing: provision of the website and its content; response to contact and commercial enquiries; security and operational integrity; aggregate usage analysis.

3. Your rights as a data subject

In accordance with applicable laws, you have the following rights regarding your personal data. To exercise these rights, please send a request via email or post, clearly identifying yourself.

3.1 Right of access

You have the right to receive confirmation from us about whether we process personal data concerning you, and to receive free information and a copy of that data, including the purpose, categories, recipients, planned retention, and the existence of rights to rectification, erasure, restriction, and objection.

3.2 Right to rectification

You have the right to request that we immediately rectify incorrect personal data concerning you, and complete incomplete personal data.

3.3 Right to erasure ("right to be forgotten")

You have the right to request the immediate erasure of personal data we hold about you where one of the GDPR's grounds applies, including where the data is no longer necessary, where you withdraw consent, or where you object to the processing.

3.4 Right to restriction of processing

You have the right to request restriction of processing in defined circumstances, such as where you dispute the accuracy of the data, or where you have objected to the processing pending verification.

3.5 Right to data portability

You have the right to receive the personal data you have provided to us in a structured, common, and machine-readable format, and to transfer that data to another controller, where the processing is based on consent or contract and takes place by automated means.

3.6 Right to object

You have the right, on grounds relating to your particular situation, to object at any time to the processing of personal data concerning you that takes place on the basis of legitimate interests (Art. 6(1)(e) or (f) GDPR).

3.7 Automated decision-making

You have the right not to be subject to a decision based solely on automated processing, including profiling, that produces legal effects concerning you. No automated decision-making takes place on the basis of personal data collected by SaniTap via this website.

3.8 Right to withdraw consent

Where processing is based on your consent, you have the right at any time to withdraw that consent.

3.9 Right to lodge a complaint

You have the right to lodge a complaint with a supervisory authority, particularly in the EU member state of your place of residence, your place of work, or the location of a suspected violation, if you believe that the processing of personal data concerning you is unlawful.

4. Data security

The website is served over HTTPS using TLS. Personal data is transmitted in encrypted form. We take technical and organisational security measures appropriate to the nature of the data we hold and adjust them as technology evolves. We cannot guarantee perfect protection against unauthorised access, particularly for data sent via email; however, the volume and sensitivity of personal data this website handles is intentionally minimal.

5. Data transfers outside the EU/EEA

One of our processors is based outside the UK and the EU/EEA:

• Cloudflare (United States) hosts the website and carries form submissions to our email system. We rely on the EU–US Data Privacy Framework and its UK Extension, and on standard contractual clauses with the UK Addendum, as set out in Cloudflare's data processing addendum.

Enquiries you send through our forms are stored in Microsoft 365 in the United Kingdom.

6. Data Protection Officer

For any questions about our data privacy practices or this statement, or to exercise your rights as a data subject, please contact us at info@sanitap.org or by post to SaniTap Ltd.

7. Changes to this statement

SaniTap reserves the right to update this statement to reflect changes in the law, our services, or our processing arrangements. Users are encouraged to review this statement periodically.

Last updated: October 2026 · Download PDF