This privacy notice explains how UNTAPPED Partnerships Ltd ("we", "us", "our") collects and uses personal data when you use this website. We are the data controller for the information we hold. If you have any questions, email hello@untappedpartnerships.com.

Last updated: 22 April 2026.

What we collect

We collect two categories of personal data:

• Information you give us. When you complete the contact form or email us directly, this typically includes your name, email address, the company you work for, and the message you send.
• Information collected automatically: if you consent to analytics cookies, we log standard analytics data about how you use the site (pages viewed, approximate location by country, device and browser type, referrer).

How we use it

• To respond to enquiries you send through the contact form or by email (legal basis: legitimate interest).
• To understand how the site is used and improve it (legal basis: consent, where analytics cookies have been accepted).
• To comply with our legal obligations (legal basis: legal obligation).

Who we share it with

We use a small number of service providers to run the site. They only process personal data on our instructions and under contract.

• Sanity (sanity.io): our content management system. Does not receive your contact-form submissions.
• Convex (convex.dev): stores contact-form submissions.
• Resend (resend.com): sends us a notification email when you submit the contact form.
• Vercel (vercel.com): hosts this website and processes request logs for reliability and security.
• Google Analytics (Google Ireland Ltd): if you consent, receives IP-anonymised usage data.
• PostHog (posthog.com): if you consent, receives anonymised product-analytics events.

How long we keep it

Contact-form submissions are kept for as long as necessary to respond and continue the conversation, and in any event no longer than 24 months after the last contact. Analytics data is retained according to the default retention of each provider (typically 14 to 26 months).

Your rights

Under UK GDPR you have the right to access, correct, erase, restrict or port personal data we hold about you, to object to processing, and to withdraw consent at any time. Email hello@untappedpartnerships.com to exercise any of these rights. If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office at ico.org.uk.

Security

We take reasonable technical and organisational measures to keep your data secure, including encrypted transport (TLS), access controls on our CMS and database, and short-lived authentication tokens.

Changes

We may update this notice from time to time. The date at the top shows when it was last changed.