Privacy Policy
Last updated: 15 March 2026
1. Who We Are
Tanzen Energy Limited (“we”, “our”, “us”) is the data controller for personal information collected through tanzenenergy.com and in the course of providing our graphene underfloor heating installation, renewable energy systems, battery storage and flooring services.
We are based in Manchester House, Grosvenor Hill, Cardigan, Ceredigion, SA43 1HY. You can contact us about data protection matters at hello@tanzenenergy.com or by phone on 07356 065255.
Tanzen Energy Limited is registered with the Information Commissioner’s Office (ICO). Our registration number is [ICO REGISTRATION NUMBER PENDING].
2. What Information We Collect
2.1 Information You Give Us
- Name, email address, phone number and property address (via contact and enquiry forms)
- Property details shared during site surveys and consultations
- Payment and billing information when you pay deposits or invoices (payment card details are processed and stored by Stripe — we do not see or store your full card number)
- Messages sent via our live chat (powered by Crisp)
- Any other information you voluntarily provide in correspondence
2.2 Information Collected Automatically
- Website usage data via Plausible Analytics (privacy-focused, cookieless, no personal data collected, fully GDPR compliant without consent)
- Website usage data via Google Analytics 4 (anonymised IP, session data, page views, conversion events — requires cookie consent)
- Session recordings via Hotjar (post-launch, requires consent — records anonymised mouse movements and interactions to improve our website)
- Technical data from Cloudflare (IP address, browser type — processed for security and performance)
- Cookie preferences recorded by CookieYes
2.3 Information from Third Parties
- Payment confirmation and subscription status from Stripe
- Email delivery status from Resend (our transactional email provider)
3. How We Use Your Information
To provide our services (contractual necessity)
- Carrying out site surveys and preparing quotations
- Scheduling and carrying out installation works
- Managing your installation project from deposit to completion
- Processing payments via Stripe
- Sending transactional emails (confirmations, receipts, booking updates) via Resend
- Responding to your enquiries via email, phone or Crisp live chat
To improve our website and services (legitimate interest)
- Analysing website usage via Plausible Analytics and Google Analytics 4
- Reviewing session recordings via Hotjar to improve user experience
- Monitoring website performance and security via Cloudflare
To comply with legal obligations
- Maintaining financial records as required by HMRC
- Responding to lawful requests from regulatory authorities
With your consent
- Sending marketing emails (only if you have opted in — you can unsubscribe at any time)
- Setting non-essential cookies (managed via CookieYes)
4. Who We Share Your Data With
We share personal data only with the following categories of service provider, each of whom processes data on our behalf or as necessary to deliver our services:
| Provider | Purpose | Data Shared |
|---|---|---|
| Stripe | Payment processing | Payment and subscription data |
| Resend | Transactional email delivery | Name, email address |
| Crisp | Live chat | Name, email, chat messages |
| Sanity | Content management (CMS) | No personal data (content only) |
| Plausible Analytics | Privacy-focused web analytics | No personal data (cookieless) |
| Google Analytics 4 | Web analytics | Anonymised IP, session data |
| Hotjar | Session recordings | Anonymised interaction data |
| Cloudflare | DNS, CDN, security | IP address, browser data |
| CookieYes | Cookie consent management | Consent preferences |
| Vercel | Website hosting | Server logs (IP, browser) |
We do not sell your personal data to any third party. We do not share your data with any party not listed above unless required by law.
5. International Data Transfers
Some of our service providers (including Stripe, Vercel, and Google) may process data outside the United Kingdom. Where this occurs, we ensure appropriate safeguards are in place, including UK GDPR-compliant Standard Contractual Clauses or adequacy decisions recognised by the UK Government.
6. How Long We Keep Your Data
- Installation customers: 6 years from completion of works (to comply with HMRC requirements and to support warranty claims)
- Quotation enquiries that do not proceed: 2 years from last contact
- Enquiry and contact form data: 2 years from last contact unless you become a customer
- Live chat transcripts (Crisp): 12 months
- Analytics data: Plausible retains aggregated data only (no personal data). Google Analytics 4 data is retained for 14 months.
- Financial records: 6 years as required by HMRC
7. Your Rights Under UK GDPR
You have the following rights in relation to your personal data:
- Right of access — request a copy of the personal data we hold about you
- Right to rectification — ask us to correct inaccurate or incomplete data
- Right to erasure — ask us to delete your data where there is no compelling reason for continued processing
- Right to restrict processing — ask us to limit how we use your data
- Right to data portability — request your data in a structured, machine-readable format
- Right to object — object to processing based on legitimate interests
- Right to withdraw consent — where processing is based on consent, you can withdraw it at any time
To exercise any of these rights, contact us at hello@tanzenenergy.com. We will respond within one month. There is no fee for making a request, unless the request is manifestly unfounded or excessive.
8. Cookies
For full details of the cookies used on tanzenenergy.com, please see our separate Cookie Policy. You can manage your cookie preferences at any time via the CookieYes consent banner.
9. Children’s Privacy
Our services are not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.
10. Security
We take appropriate technical and organisational measures to protect your personal data, including:
- HTTPS encryption on all pages (enforced via Cloudflare and HSTS)
- Stripe PCI-DSS Level 1 compliance for payment processing
- Access controls on our CMS and internal tools
- Regular review of data processing practices
No method of electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
11. Links to Other Websites
Our website may contain links to third-party websites, including coreceltic.com. We are not responsible for the privacy practices of other sites and encourage you to read their privacy policies.
12. Changes to This Policy
We may update this privacy policy from time to time. The latest version will always be available on our website with the date of last update shown at the top.
13. Complaints
If you are unhappy with how we have handled your personal data, please contact us first at hello@tanzenenergy.com or by phone on 07356 065255. If you remain dissatisfied, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO):
Information Commissioner’s Office
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Website: ico.org.uk
Telephone: 0303 123 1113
14. Contact
Tanzen Energy Limited
Manchester House, Grosvenor Hill, Cardigan, Ceredigion, SA43 1HY
Phone: 07356 065255
Email: hello@tanzenenergy.com