Privacy Policy

Last updated: 12 September 2026

This Privacy Policy explains how TanTrap collects, uses, shares and protects your personal information when you visit https://tantrap.com (the “Site”), place an order, create an account, or communicate with us. It also explains your rights under UK data protection law.

Please read it carefully. By using our Site and services, you understand the practices described here.

  1. Who we are

TanTrap is a trading name

For the purposes of UK data protection law (the UK GDPR and the Data Protection Act 2018), Laganshire Ltd is the “data controller” responsible for your personal information.

How to contact us about your data:

  • Email: info@tantrap.com
  • Post: PO Box 239, Newtownabbey, BT36 9ER, United Kingdom
  • Phone: +44 (0)28 9600 5053

If you have any questions about this policy or how we handle your data, please contact us using the details above.

  1. The information we collect

Depending on how you use our Site and services, we may collect and process the following types of information:

Identity and contact details — your name, billing and delivery address, email address, and telephone number.

Order and transaction information — the products you buy, order value, order history, delivery details, and records of your purchases.

Payment information — your card details are entered and processed directly by our payment provider (see Section 5). We do not store your full card number; we only receive limited information such as the last four digits and whether a payment succeeded.

Account information — if you create an account, your login details, saved preferences, order history, and loyalty points balance.

Communications — the content of messages you send us and we send you, including emails, WhatsApp messages, support enquiries, and any reviews you submit.

Marketing preferences and consents — your choices about receiving marketing by email or WhatsApp, and records of the consents you have given.

Technical and usage information — your IP address, device and browser type, and information about how you interact with our Site (pages viewed, links clicked, scrolling, and similar), collected through cookies and analytics tools (see Sections 6 and 7).

We do not intentionally collect any “special category” data (such as health information) through the Site.

  1. How we collect your information

We collect information:

  • Directly from you — when you place an order, create an account, enter details at checkout, subscribe to marketing, contact us, or leave a review.
  • Automatically — as you browse the Site, through cookies and similar technologies and through analytics and session-analysis tools.
  • From third parties — for example, our payment provider may confirm the outcome of a transaction, and our delivery partner may provide tracking updates.
  1. How we use your information and our lawful bases

Under UK data protection law, we must have a valid “lawful basis” for using your personal data. We use your information for the following purposes:

To process and fulfil your orders — including taking payment, arranging delivery, providing tracking updates, and managing returns or refunds. Lawful basis: performance of our contract with you.

To manage your account and loyalty rewards — including maintaining your account, awarding and redeeming loyalty points, and giving you access to any customer resources such as downloadable guides. Lawful basis: performance of our contract with you, and our legitimate interests in running a rewards programme.

To communicate with you about your order — including order confirmations, dispatch and delivery/tracking notifications by email and, where you have opted in, by WhatsApp. Lawful basis: performance of our contract with you, and (for WhatsApp) your consent.

To send you marketing — including newsletters, offers, and reminders about items left in your basket, by email and, where you have opted in, by WhatsApp (see Section 4a). Lawful basis: your consent, and/or our legitimate interests in promoting our products to existing and prospective customers, subject to your right to opt out at any time.

To improve our Site and services — including analysing how visitors use the Site, understanding where customers experience difficulty, and improving our product pages and checkout. Lawful basis: your consent (for non-essential analytics cookies) and our legitimate interests in improving our business.

To prevent fraud and keep our Site secure. Lawful basis: our legitimate interests and, where relevant, compliance with a legal obligation.

To comply with our legal and regulatory obligations — including keeping accounting and tax records. Lawful basis: compliance with a legal obligation.

4a. Marketing communications and your choices

We will only send you marketing emails where you have subscribed, or where you are an existing customer and we are permitted to do so under the “soft opt-in” rules — and in every case you can unsubscribe at any time using the link in any marketing email.

We will only send you marketing or promotional WhatsApp messages where you have actively opted in (for example, by ticking the WhatsApp updates box at checkout). WhatsApp messaging is always optional. You can opt out at any time by replying STOP to any message, or by contacting us.

You can change your marketing preferences at any time by contacting us using the details in Section 1.

  1. Who we share your information with

We do not sell your personal data. We share it only with trusted service providers who help us run our business, and only to the extent necessary. These include:

Payment processing — Revolut. When you make a purchase, your payment details are processed securely by Revolut, and information such as the purchase total and billing details is shared with them to process or support the payment. See Revolut’s privacy policy: https://www.revolut.com/en-GB/legal/privacy/

Delivery — Royal Mail. We share your name, delivery address and contact details with Royal Mail so your order can be delivered and tracked. See: https://www.royalmail.com/privacy-notice

Email communications — Brevo. We use Brevo to send transactional and marketing emails. Your name and email address, and information about your orders, may be processed by Brevo for this purpose. See: https://www.brevo.com/legal/privacypolicy/

WhatsApp messaging — Meta / WANotifier. Where you have opted in, we send order updates and marketing via the WhatsApp Business Platform, provided by Meta Platforms and facilitated by our messaging provider (WANotifier). Your name and phone number are processed to deliver these messages. See Meta’s privacy policy: https://www.whatsapp.com/legal/privacy-policy and https://privacy.microsoft.com/privacystatement for WANotifier-related processing where applicable.

Analytics — Google and Microsoft. We use Google Analytics to understand Site usage, and Microsoft Clarity for analytics, heatmaps and session recording (see Section 6). See Google’s policy: https://policies.google.com/privacy and Microsoft’s: https://privacy.microsoft.com/privacystatement

Advertising — Google. We use Google Ads and related tools to measure the performance of our advertising. See: https://policies.google.com/privacy

Website hosting and infrastructure. Our Site is hosted by our hosting provider, who processes data on our behalf to keep the Site running.

We may also disclose your information where required to do so by law, or to protect our rights, property, or safety, or those of others.

  1. Analytics and session recording

We use Microsoft Clarity and Google Analytics to understand how visitors use our Site — capturing metrics, heatmaps, and (in the case of Clarity) session recordings of how users interact with our pages, such as clicks, scrolling, and navigation. This helps us find and fix problems and improve our products and service.

Microsoft Clarity masks text you type into fields by default, so we do not see information such as your name, address or payment details as you enter it.

These tools are only active in line with your cookie choices (see Section 7). You can read more in Microsoft’s and Google’s privacy statements, linked in Section 5.

  1. Cookies and similar technologies

We use cookies and similar technologies to make our Site work, to remember your preferences, to analyse usage, and to support our marketing.

We use a cookie consent tool (Complianz) to let you control non-essential cookies. Broadly, the cookies we use fall into these categories:

  • Strictly necessary — required for the Site and checkout to function. These do not require consent.
  • Analytics — help us understand how the Site is used (e.g. Google Analytics, Microsoft Clarity).
  • Marketing/advertising — help us measure and improve our advertising (e.g. Google Ads).

You can accept or reject non-essential cookies, and change your choices at any time, through the cookie settings on our Site. You can also control cookies through your browser settings.

  1. International data transfers

Some of our service providers (including Microsoft, Google and Meta) are based outside the United Kingdom, which means your personal data may be transferred to, and processed in, countries outside the UK.

Where we transfer personal data outside the UK, we take steps to ensure it receives an adequate level of protection — for example by relying on the UK Government’s adequacy regulations, or by putting in place appropriate safeguards such as the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses.

  1. How long we keep your information

We keep your personal data only for as long as necessary for the purposes we collected it for, including to satisfy any legal, accounting or reporting requirements.

  • Order and transaction records: we retain these for at least 6 years to comply with UK tax and accounting obligations.
  • Account information: for as long as your account is active, and for a reasonable period afterwards.
  • Marketing data: until you unsubscribe or withdraw your consent, after which we retain a minimal record of your opt-out so we can respect it.
  • Analytics data: in line with the retention periods set by the relevant analytics provider.
  • Support and other communications: for a reasonable period after your enquiry is resolved.

When we no longer need your personal data, we securely delete or anonymise it.

  1. Your rights

Under UK data protection law, you have the following rights over your personal data:

  • The right to be informed about how we use your data (this policy).
  • The right of access — to request a copy of the personal data we hold about you.
  • The right to rectification — to have inaccurate data corrected.
  • The right to erasure — to ask us to delete your data in certain circumstances.
  • The right to restrict processing in certain circumstances.
  • The right to data portability — to receive your data in a portable format.
  • The right to object to certain processing, including direct marketing.
  • The right to withdraw consent at any time, where we rely on consent.

To exercise any of these rights, please contact us using the details in Section 1. We will respond within the timescales required by law. There is normally no charge.

If you have an account, you can also view, edit or delete much of your personal information directly through your account at any time.

Complaints. If you are unhappy with how we have handled your data, we would like the chance to put it right, so please contact us first. You also have the right to complain to the UK’s supervisory authority, the Information Commissioner’s Office (ICO): https://ico.org.uk — helpline 0303 123 1113.

  1. How we protect your data

We use appropriate technical and organisational measures to protect your personal data, including secure (SSL/HTTPS) connections across our Site, restricted access to personal data, and reputable service providers who maintain their own security standards. However, no method of internet transmission is completely secure, and we cannot guarantee absolute security.

  1. Children

Our Site and products are intended for adults aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided us with personal data, please contact us and we will delete it.

  1. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we do, we will update the “Last updated” date at the top of this page. We encourage you to review this policy periodically.

  1. Contact us

If you have any questions, concerns or requests regarding this Privacy Policy or your personal data, please contact us:

Email: info@tantrap.com Post: PO Box 239, Newtownabbey, BT36 9ER, United Kingdom Phone: +44 (0)28 9600 5053