LEGAL · PRIVACY
Privacy notice
What this website collects, why, where it goes, and what you can ask us to do about it.
Who we are
Regtify operates through two companies. Which one is the controller of your personal data depends on where you are:
| If you are in | The controller is | At |
|---|---|---|
| the United Kingdom | REGTIFY (UK) LIMITED (company number 12326692) | 17 Sharpley Court, 8a Pocock Street, London SE1 0BJ, United Kingdom |
| the European Union or elsewhere | REGTIFY LIMITED (registration number HE355806) | Apostolou Andrea 3A, Strovolos, Nicosia 2049, Cyprus |
Both companies are part of the Regnaut group, with offices in London and Nicosia and a branch office in Frankfurt. Either way, the practices described below are the same.
For anything in this notice, write to info@regtify.com.
What this notice covers
This notice covers the regtify.com website: the enquiry form, and the technical data your browser sends when you visit.
It does not cover the Regtify platform. Where clients submit reporting data to the platform, they remain the controller of that data and Regtify acts as processor under the written agreement between us. See the data processing page.
What we collect, and why
Everything below is what this website actually does.
Contact enquiry
| What | Your name, work email address, firm, role (optional), the area you are interested in, and the description of what you need. |
|---|---|
| When | When you complete and send the form at /contact. |
| Where it goes | Stored as a private record in the regtify.com website database and sent by email to info@regtify.com, with your address set as the reply-to so we can answer you. |
| Lawful basis | Our legitimate interest in responding to business enquiries about our services, and, where your enquiry concerns a possible engagement, taking steps at your request before entering into a contract. |
Spam and abuse prevention
| What | Your IP address and a browser challenge token. |
|---|---|
| When | When you submit the form. |
| Where it goes | Sent to Cloudflare, which verifies the challenge and returns a pass or fail. We do not retain the token. |
| Lawful basis | Our legitimate interest in keeping the form usable and free of automated abuse. |
Rate limiting
| What | A keyed hash of your IP address and a count of recent attempts. The hash is produced with a secret unique to this installation, so it cannot be converted back to an address by anyone who does not hold that secret. The address itself is not stored. |
|---|---|
| When | When a submission is attempted from your connection. |
| Where it goes | Held on our own infrastructure for one hour, then discarded automatically. |
| Lawful basis | Our legitimate interest in preventing abuse of the form. |
Web fonts
| What | Nothing beyond the ordinary web request already covered under server logs below. |
|---|---|
| When | When your browser loads the typefaces used on this site. |
| Where it goes | Nowhere. The typefaces are served from this website’s own infrastructure, not from a third-party font service, so loading them discloses nothing to anyone else. |
| Lawful basis | Not applicable — no personal data leaves this site to render the typefaces. |
Analytics
| What | Pages visited, approximate location derived from IP, device and browser type, and how you arrived at the site. |
|---|---|
| When | Only after you accept analytics cookies in the banner. If you do not, no analytics identifiers are set and nothing is collected. |
| Where it goes | Processed by Google through Google Tag Manager and Google Analytics. |
| Lawful basis | Your consent, which you can withdraw at any time. |
Server and delivery logs
| What | IP address, the page requested, browser user agent and a timestamp. |
|---|---|
| When | On every request to the site, as with any web server. |
| Where it goes | Recorded by our hosting provider and by Cloudflare, which delivers the site. |
| Lawful basis | Our legitimate interest in operating the site securely, diagnosing faults and preventing abuse. |
How long we keep it
Enquiry records are kept for 24 months from the date we receive them, and are then deleted automatically. If your enquiry becomes an engagement, the records forming part of that relationship are kept under the agreement between us instead.
Rate-limiting hashes are discarded after one hour. Server and delivery logs are kept for as long as needed for security and diagnostics, and no longer.
Who else sees it
We do not sell personal data, and we do not share it for anyone else’s marketing.
It is handled on our behalf by our hosting provider, by Cloudflare for delivery and abuse prevention, by our email provider, and — only where you have consented — by Google for analytics. Each acts under contract and may use the data only as we instruct.
We may also disclose personal data where we are required to by law, a court, or a regulator.
Where it is held
Enquiry records are held on this website’s infrastructure and in the mailbox they are sent to. Access is limited to authorised personnel in our offices in the United Kingdom, Germany and Cyprus.
Germany and Cyprus are within the EEA. The United Kingdom is covered by an adequacy decision, so personal data may move between them without additional safeguards. If you want more detail about where your data is held, write to us and we will tell you.
Your rights
You have the following rights over your personal data.
| Access | Ask for a copy of the personal data we hold about you. |
|---|---|
| Rectification | Ask us to correct anything inaccurate. |
| Erasure | Ask us to delete your data, where the law allows. |
| Restriction | Ask us to pause processing while a question is resolved. |
| Portability | Ask for the data you gave us in a structured, machine-readable form. |
| Objection | Object to processing we carry out on the basis of legitimate interests, including at any time to direct marketing. |
| Withdraw consent | Where we rely on consent, withdraw it at any time. This does not affect anything done before you withdrew it. |
| Complain | Complain to a supervisory authority — in Cyprus, the Office of the Commissioner for Personal Data Protection; in the United Kingdom, the Information Commissioner's Office. |
To exercise any of them, write to info@regtify.com. We will respond within one month. We may ask you to confirm your identity first, so that we do not disclose your data to someone else.
Cookies
See the cookie notice for what is stored on your device, what is set only with your consent, and how to change your mind.
Changes to this notice
If we change how we handle personal data we will update this page. Where a change is significant, we will say so here.
Last updated: August 2026.