Privacy
Version 1.1 · in force from 19 September 2026
Norbert Bercsenyi, trading as Tap-A-Post, is the data controller for everything described here. Written to comply with the UK GDPR and the Data Protection Act 2018, and written to describe what we actually do, which is less than most policies of this kind.
1. What we collect
- From you, the buyer
- Your name, email, delivery address, and your own address if you asked us to post it to you to hand over.
- About the recipient
- A first name. Sometimes an age and a town. Nothing else: see section 2.
- Your recording
- The audio you record on this site. Nothing transcribes it and nothing analyses it.
- Payment
- Handled by Stripe. We receive a confirmation and a reference, never your card number.
- Taps
- That a seal was tapped, when, and the browser's own description of itself. No IP address is stored, and no location of any kind.
There are no analytics scripts on this site and no third-party trackers. The page a child taps loads nothing from anyone but us.
2. Personal data about children
This is the most sensitive thing we handle, so here it is plainly.
You are an adult giving us information about a child (usually a first name, sometimes an age and a town) and often a recording of your own voice speaking to them.
- We ask for a first name only. No surname, no date of birth, no school, no photograph, no contact detail for the child. The form refuses a surname and the page that renders their name refuses one again.
- A town is never shown on the page the child taps. It appears in the printed letter and nowhere else.
- There are no accounts for children. You are the customer.
- We do not market to children and we do not profile them.
- The words in a child's letter are fixed text a human wrote, merged with your answers. Nothing in a child's letter is generated by a machine.
- By ordering you confirm you are the child's parent or guardian, or are sending with permission.
If you are a parent or guardian and want data about a child removed, write to hello@tapapost.co.uk. We will delete it, apart from the accounting record we are legally required to keep, and that record has no name in it.
3. Why we process it, and our lawful basis
- Making and posting your order
- Performance of a contract
- Keeping the content behind the seal playable
- Performance of a contract
- Order, reminder and dispatch email
- Performance of a contract
- Answering your questions
- Contract / legitimate interests
- Accounting and tax records
- Legal obligation
- Preventing fraud and keeping the site up
- Legitimate interests
- Email about new products
- Consent, and only if you ticked the box
Where we rely on consent you can withdraw it at any time. Where we rely on legitimate interests we have weighed them against your rights and will explain that assessment if you ask.
4. How long we keep it
- Your recording, and the content behind the seal
- 5 years from the day we post it, then deleted
- Order and personalisation details
- 6 years from the end of the tax year, for HMRC
- An order you started and never paid for
- 7 days, then it and its recording are deleted
- Marketing consent
- Until you withdraw it
- Technical logs
- 12 months
- Tap records
- 12 months
You can ask us to delete a recording sooner. If you do, the seal stops playing it. We will say so before we act, because it is not reversible.
5. Who we share it with
We do not sell personal data, and we do not share it for advertising. Only these:
- Stripe
- Taking payment. We never receive your card number.
- Cloudflare
- Storing recordings (R2) and serving the site.
- Render
- Running the application.
- Resend
- Sending order email.
- Royal Mail
- Delivery. Name and address only.
Where a provider handles data outside the UK we rely on UK adequacy regulations or the International Data Transfer Addendum.
We may also disclose data where the law requires it.
6. Your rights
You have the right to see, correct, erase, restrict, object to and port your personal data, and to withdraw consent. Write to hello@tapapost.co.uk and we will answer within one month.
Erasure is one action here, not a project. Ask, and the recordings leave our storage, the answers and addresses go, and the tag stops answering. What remains is an accounting record with no name in it, which we are required to keep.
You can complain to the Information Commissioner's Office at ico.org.uk or 0303 123 1113.
7. Security
Recordings live in access-controlled object storage behind unguessable addresses and are served over HTTPS. Card details never touch our servers. A sealed recording's address is left out of the page entirely rather than hidden with styling. Administrative access is the owner's alone.
We are a small business and we will not overstate this. No system is completely secure. If a breach puts your rights at risk we will tell the ICO within 72 hours and tell you directly where we are required to.
8. Marketing
We send marketing email only if you asked for it, and every one has an unsubscribe link. Order email (the confirmation, the reminder to record, the note that says it is posted) is not marketing and will still be sent.
9. Changes
We post updates here with a new date, and tell you directly if a change is significant. This version is 1.1, in force from 19 September 2026.