What we collect, and what we don't.

What we collect

If you send us an enquiry, we collect your name, email address, organisation if you give one, the message you write and which of our systems you selected. That is all the contact form asks for.

If you use the assistant in the corner of the site, we store what you type and what it replies, along with the page you started on, so a colleague can pick the conversation up. We do not record your IP address or fingerprint your browser. If you ask to speak to a person, we also keep the name and email you give us.

If you have a TAPP Connect login, we hold your name, email address, a hashed password (never the password itself) and the client account you belong to, along with the updates, comments, tasks, tickets and files in that account.

Our hosting and analytics providers log ordinary technical information such as IP address, browser and the pages requested. We do not run advertising or cross-site tracking on this site.

Why we collect it

To reply to you, to run the projects we are engaged for, and to keep the client area secure. We do not sell personal data, and we do not share it with anyone except the suppliers listed below who process it on our behalf.

We only send marketing email to people who have asked for it, and every such email has an unsubscribe link.

Who processes it for us

Vercel hosts the site. Neon hosts the database. Resend delivers transactional email. Cloudflare R2 stores files uploaded to the client area. Anthropic processes the messages you send the assistant so it can reply. Each is bound by its own data-processing terms, and each stores data outside Barbados, principally in the United States and the European Union.

How long we keep it

Enquiries are kept for two years so we can pick up a conversation where it left off, then deleted. Assistant conversations are kept for twelve months. Client-area data is kept for the life of the engagement and for seven years afterwards where records are needed for tax and contractual purposes. Ask us to delete anything sooner and we will, unless we are legally required to keep it.

Your choices

You can ask us for a copy of what we hold about you, ask us to correct it, or ask us to delete it. Write to the address below and we will respond within 30 days.

Barbados' Data Protection Act 2019 gives you these rights, and we extend the same rights to everyone who contacts us regardless of where they are.

Cookies and local storage

The public site sets no marketing or analytics cookies. TAPP Connect sets one essential cookie to keep you signed in; it is removed when you sign out.

Your accessibility settings are saved in your own browser's local storage and never sent to us. An open assistant conversation is kept in session storage so it survives moving between pages, and is cleared when you close the tab.