Privacy Policy (UK)
Effective date: 30 September 2026
This Privacy Policy explains how Tanea collects, uses, and safeguards personal data when you visit our website (tanea.io), submit a contact or website review request, or interact with our services.
1. Data Controller
For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, the data controller is:
Angélique Dibor Faye, an individual entrepreneur registered in Senegal, operating the Tanea brand.
RCCM: SN DKR 2026 A 41901
NINEA: 013487097
Email: angelique@tanea.io
Website: https://tanea.io
2. Personal Data Collected
We collect and process only the minimal information necessary for our professional communications:
- Enquiry and Quote Requests: When you complete a contact form on our website, we collect your name, business email address, company website URL, and any message or project details you submit.
- Direct Communications: When you contact us via email, we store your email address and message history to manage our communication.
- Technical Logs: Our web hosting provider (Netlify) collects standard server logs (including IP address, browser user-agent, and access timestamps) strictly for security, DDoS mitigation, and server reliability.
3. Lawful Basis for Processing
Under Article 6 of the UK GDPR, we process personal data under the following lawful bases:
- Contractual or Pre-Contractual Measures (Art. 6(1)(b)): Processing information required to review your website, provide recommendations, or prepare a formal proposal upon your request.
- Legitimate Interests (Art. 6(1)(f)): Responding to general business enquiries and ensuring infrastructure security.
- Consent (Art. 6(1)(a)): For optional web analytics measurement via Google Analytics 4, activated only after you choose to accept.
- Legal Obligation (Art. 6(1)(c)): Maintaining accurate business and accounting records where required by law.
4. Cookies & Analytics (Strict Consent / PECR Compliance)
In strict compliance with the Privacy and Electronic Communications Regulations (PECR) and UK GDPR, we operate a Basic Consent Mode model:
- Blocked by Default: When you arrive on the website, Google Tag Manager and Google Analytics 4 are completely blocked. No cookies are stored, and no network requests are sent to Google servers before your explicit consent.
- Consent Choices: You are presented with clear options to either Accept or Decline analytics measurement. If you click Decline, Google scripts remain blocked throughout your visit.
- Changing Your Choice: You can review, grant, or revoke your consent at any time by clicking the link located in the footer of every page.
5. Third-Party Service Providers
We do not sell, rent, or trade your personal data. We share data only with third-party service providers necessary to operate the website under strict confidentiality and security terms:
- Netlify, Inc. (United States): Web hosting, content delivery network (CDN), and secure server-side form transmission.
- Google Ireland Limited / Google LLC: Web analytics provider (Google Analytics 4 via Tag Manager), loaded strictly upon user consent.
- Email Service Provider: Secure electronic mail routing and storage for direct business communications.
6. Data Retention
Personal data submitted through contact forms or email is retained only for the duration required to handle your enquiry, manage ongoing commercial relationships, or satisfy statutory tax and legal requirements. When no longer needed, data is securely deleted.
7. Your Rights Under UK GDPR
Under UK data protection law, you have specific rights regarding your personal data:
- Right of Access: You can request confirmation of whether we process your personal data and obtain a copy of it.
- Right to Rectification: You can request that inaccurate or incomplete personal data be corrected.
- Right to Erasure: You can request the deletion of your personal data when it is no longer needed for its original purpose.
- Right to Restrict or Object to Processing: You may object to or request restrictions on certain types of processing.
- Right to Data Portability: Where applicable, you may request that your data be provided in a structured, commonly used format.
To exercise any of these rights, please contact us at angelique@tanea.io. Requests will be acknowledged and processed within 30 days.
You also have the right to lodge a complaint with the UK supervisory body:
Information Commissioner’s Office (ICO): Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF | Website: ico.org.uk.
8. Changes to This Policy
We may update this policy occasionally to reflect changes in legal requirements or technical infrastructure. The latest version will always be published on this page with the updated effective date.