Privacy Policy

1 Who we are

Hyde Organics Ltd trading as MyTapWater is the data controller for personal data collected through mytapwater.co.uk and the MyTapWater API.

2 What data we collect

IP address, browser type, device information, pages visited, postcode searches entered, referral source, and cookies as described in our Cookie Policy.

Name, email address, billing information (processed by Lemon Squeezy as Merchant of Record), postcode for report generation.

Business contact details (name, email, company), API key, usage logs (timestamps, postcodes queried, IP addresses, domains, response codes, user agents).

3 How we use your data

• To provide and improve our services.
• To process purchases and deliver reports.
• To administer API and widget access.
• To monitor usage, enforce rate limits and detect misuse.
• To respond to enquiries and provide support.
• To comply with legal obligations.

4 Lawful basis

• Legitimate interests: website analytics, service improvement, security monitoring, API usage tracking.
• Contract: processing purchases, delivering reports, providing API access.
• Legal obligation: where required by law or regulation.

5 Who we share data with

• Lemon Squeezy — payment processing for reports.
• Cloudflare — hosting and security.
• Resend — transactional emails.

We do not sell personal data to third parties.

We may share data where required by law, court order or regulatory authority.

6 Data retention

• Website analytics data: 26 months.
• Purchase records: 6 years (accounting and tax obligations).
• API usage logs: 12 months.
• Support correspondence: 2 years after last contact.

7 Your rights

Under UK GDPR you have the right to access, rectify, erase, restrict processing, object to processing, and data portability. To exercise any right, email hello@mytapwater.co.uk. We will respond within 30 days.

8 International transfers

Your data is processed within the UK and EEA. Cloudflare may process data in data centres outside the UK under appropriate safeguards.

9 Security

We implement reasonable technical and organisational measures to protect personal data, including HTTPS encryption, access controls, and secure credential handling. No system is completely secure and we cannot guarantee absolute security.

10 Children

This site is not directed at children under 16. We do not knowingly collect personal data from children.

11 Changes to this policy

We may update this policy from time to time. Material changes will be noted by updating the date at the top.

12 Contact and complaints

Email: hello@mytapwater.co.uk

You have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk if you believe your data has been handled unlawfully.