Tanntois the data controller for personal data collected through this website. This notice covers what we collect, why, who we share it with, and how long we keep it. It doesn’t cover client data we handle when running Pipeline or Sales OS engagements. That sits under a separate data processing agreement with each client.
Last updated 10 May 2026
Tannto is the trading name of Answer First Limited, a company registered in Scotland (Companies House SC868214, VAT GB513679772). Our registered office is The Stables, Duncrub Park House, Dunning, Perth PH2 0QR, United Kingdom. We are registered with the UK Information Commissioner’s Office under reference ZC079545.
For any privacy enquiry, including data subject requests, write to us at debasien@answerfirst.co.uk. We respond within one calendar month, as required by UK GDPR.
We collect the minimum personal data needed to answer enquiries and run the website:
We don’t run marketing pixels, retargeting tags, session-replay tools, or third-party chat widgets. We don’t buy or sell personal data.
This website doesn’t set tracking cookies. Vercel Web Analytics is cookieless. The only browser storage we use is a strictly necessary theme preference held in localStorage. If we ever add anything that requires consent, we’ll display a banner and update this notice.
We share personal data only with the processors below, for the purposes described above:
We may also disclose personal data when legally required, for example a court order or a regulatory request. We don’t transfer personal data to any other recipient without telling you.
Vercel and Resend process data in the United States. Both are certified under the EU–US Data Privacy Framework and its UK Extension, which provides an adequate level of protection for personal data transferred from the UK and the EEA. You can verify their certifications on the Data Privacy Framework list.
The site runs over HTTPS, so contact form submissions are encrypted in transit. Submissions aren’t written to a database; they go straight to a monitored inbox via Resend, with access limited to people who need it. We don’t collect or store payment card data. If we ever have a personal data breach that puts your rights at risk, we’ll notify the Information Commissioner’s Office within 72 hours and, where required, contact affected individuals directly.
Under UK GDPR you have the right to:
To exercise any of these rights, email debasien@answerfirst.co.uk. There’s no charge and we’ll respond within one calendar month. We may ask for proof of identity before releasing personal data.
If you’re unhappy with how we’ve handled your personal data, please contact us first at debasien@answerfirst.co.uk so we can put it right. You can also complain directly to the UK Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.
When we deliver Pipeline or Sales OS engagements, we process personal data on behalf of our client, who is the data controller. That work is governed by a separate data processing agreement between Tannto and the client. The DPA sets out sub-processors, security measures, breach notification, and what happens to data at the end of the engagement.
If you’ve received a message from Tanntoon behalf of one of our clients and want details of how your data is being processed, reply to that message or contact the client directly. We’ll route any request to the right place and help the client respond.
Tanntois a B2B service. We don’t knowingly collect personal data from anyone under 18.
When our practices change, we update this notice. The date at the top reflects the most recent revision. Material changes will be flagged on the site before they take effect.