Privacy Policy

The Tap Back is the trading name of Nayla Abarca Baldassarre, SW17 8EA, United Kingdom. The proprietor acts as the data controller for customer information. For privacy questions or requests, email hello@thetapback.com.

If you email us, we receive your email address and the information you include, such as your name, business details, Google Business Profile link, enquiry or complaint. If an order is arranged, contact, delivery and order information is needed to fulfil it. Payment is processed by Stripe, which receives the payment information you enter on its own secure form; card details are not stored on this website.

Do not send passwords or payment-card details. Providing a Google Business Profile link does not grant us access to your account. Any account access for Insights must be separately authorised and its data use explained.

Answering pre-order enquiries and fulfilling an agreed order may rely on steps at your request before a contract or performance of a contract. Required accounting or other statutory records may rely on legal obligation. Handling general enquiries, complaints and security may rely on legitimate interests, subject to a documented assessment of necessity and your rights. The precise uses and lawful bases need to be confirmed against actual operations.

No newsletter sign-up or marketing subscription is currently offered by the website. Any future electronic marketing must follow applicable privacy and marketing rules and offer an appropriate opt-out.

The website loads fonts from Google Fonts, which receives network information such as your IP address when your browser requests them. Hosting services may also process request metadata for delivery, security or diagnostics. The website includes an error-reporting path; its recipients and actual data collection need verification.

We may need service providers for email, delivery or payment to handle relevant information when those services are used. Exact providers, recipients, safeguards and any transfers outside the UK must be confirmed, not assumed. Instagram links and the Google review service take you to third-party services with their own privacy notices.

Customer information should be retained only as long as needed for its stated purpose and any legal obligations. Exact retention periods or criteria have not yet been supplied and must be added. Appropriate security measures must be maintained; this draft makes no unverified security or encryption guarantee.

Depending on the circumstances, you can request access, correction, erasure, restriction or portability of your information and object to certain processing. Where processing relies on consent, you can withdraw it without affecting earlier lawful processing. Rights are not absolute; contact us to make a request. We generally respond within one month, with any lawful extension explained.

You may complain to the Information Commissioner’s Office (ICO) at ico.org.uk, including if you are unhappy with how we handle your information. You do not have to complain to us first.

See Cookie Policy for the current position and outstanding checks. This notice must be updated when the actual ordering, payment, tracking or supplier arrangements change. It remains a draft, not a verified statement of complete data practices.