Last updated: 26 May 2026.
This policy describes how IPAP Tech Ltd (“we”, “us”, “IPAP”) handles personal data collected through ipap.tech and any direct correspondence with us. It is written in plain English on purpose — if anything is unclear, write to info@ipap.tech and we’ll explain.
Who we are
IPAP Tech Ltd is the data controller for personal data processed through this site. The point of contact for any privacy question is info@ipap.tech.
What we collect — and why
When you fill in the contact form, we collect the information you provide: name, email, optional phone, company, role, the subject and body of your message, and your preferred reply method. We use this to respond to you. The form is submitted to a third-party form processor (un-static.com) which forwards the submission to us by email. We do not use this information for marketing.
When you visit any page, our analytics provider (Google Analytics 4) records standard usage information: page paths, referrer, approximate location, device type, and a hashed identifier so that repeated visits can be counted as one visitor rather than many. IP addresses are processed for this purpose but not stored by us. We use this to understand which pages are read and which are not.
When the site is served to your browser, the hosting provider (GitHub Pages, fronted by Cloudflare) records request metadata in operational logs (IP address, request time, URL, user agent) for the standard short retention periods their infrastructure requires. We do not have direct access to these logs except in the form of aggregate availability metrics.
We do not collect:
- Special-category data (health, religious beliefs, biometric data, and so on).
- Anything you have not voluntarily provided.
- Form submissions or analytics from any source other than ipap.tech.
Cookies
Google Analytics sets cookies (_ga, _ga_<container>) used to distinguish visitors and sessions. These are first-party cookies set on your browser. No advertising or cross-site-tracking cookies are set by this site.
If you prefer no analytics, most browsers offer a Do Not Track or built-in tracking-prevention setting; Google also provides an opt-out at tools.google.com/dlpage/gaoptout.
Third parties who process data on our behalf
| Processor | Purpose | Data shared |
|---|---|---|
| un-static.com | Contact-form submission & delivery | The fields you submit in the form |
| Google (Analytics) | Aggregate site analytics | Page views, device info, hashed identifier |
| Cloudflare | CDN, TLS, basic protection | Request metadata (IP, user-agent, URL) |
| GitHub (Pages) | Static site hosting | Request metadata |
Each of these providers has its own privacy policy and infrastructure-level data retention. We have selected providers with mature privacy practices and have no contractual access to their internal logs.
How long we keep things
- Form submissions: retained as email correspondence while the conversation is active, plus a reasonable archive period (typically up to 24 months) for follow-up. You can ask us to delete the record at any time — see below.
- Analytics: retained per the Google Analytics default user-data retention window (14 months from last activity).
- Hosting logs: controlled by the providers above and not by us.
Your rights
Under UK and EU data protection law you have the right to:
- Ask what data we hold about you and request a copy.
- Ask us to correct anything inaccurate.
- Ask us to delete data we no longer need to keep.
- Object to processing for specific purposes (e.g. analytics).
- Lodge a complaint with the supervisory authority in your jurisdiction (in the UK, the Information Commissioner’s Office: ico.org.uk).
To exercise any of these rights, write to info@ipap.tech. We respond within one month, usually faster.
International transfers
Some of our processors (Google, Cloudflare, GitHub) are based in the United States and may process data outside the UK and the European Economic Area. Where this happens, we rely on the standard legal mechanisms those providers have in place (such as Standard Contractual Clauses) to protect the data.
Children
This site is not directed at children under 16 and we do not knowingly collect data from them.
Changes to this policy
If we change this policy materially, we’ll update the “Last updated” date above. For substantial changes, we’ll also note the change at the top of this page for a period of time. We don’t maintain a mailing list for policy updates — if that matters to you, bookmark this page.
Contact
Questions, requests, or anything you’d like clarified: info@ipap.tech.