Privacy Policy
Last updated: 27 September 2026This privacy policy explains how Tunet Ltd ("Safety AZ", "we", "us"), a private limited company registered in England and Wales under company number 13472660, with its registered office at 117 Waldeck Street, Reading, England, RG1 2RF, collects and uses personal data when you visit this website or contact us about our products. For data processed inside the Safety AZ platforms on behalf of your employer or service provider, see the section "Data inside the Safety AZ platforms" below.
1. Who is the controller
For data collected through this website (demo requests, server logs, cookies and analytics), Tunet Ltd is the data controller. You can reach us at salut@safety-az.com or by post at our registered office.
2. What we collect on this website
- Demo requests. When you send the form to book a demo or request a briefing we collect your full name, work email address, company and the platforms you are interested in, and, if you fill them in, how many people you need to keep compliant and your message. We also record that you ticked the box agreeing to be contacted, the language you were viewing the site in, and the date and time of your request. The form contains a hidden field that people cannot see; submissions with that field filled in (usually from spam robots) are discarded without being stored or sent.
- Technical data. Each time your browser requests a page, our hosting provider receives your IP address, your browser details and the address of the page, and records them in our server logs. Your browser may also send us an automatic security report when a page tries to load something our security policy does not allow; we log the address of the page and of the blocked item, without their query strings. When you send a demo request, the logs also record your email address and, if your request could not be stored or emailed to our team, the details you entered, so that we can follow up by hand. To stop the demo form and these reports being flooded, we briefly count the requests sent from each IP address in our server's memory; the IP address is not stored with your request.
- Preferences. If you choose a language from the language menu, a cookie remembers your choice.
- Usage data. Aggregated analytics about how the site is used (pages visited, approximate location, device type, the campaign tags — utm_ parameters — of the link that brought you here, and whether you sent a demo request, but not what you entered), collected through Google Analytics cookies only if you accept analytics cookies in the cookie banner. Until you do, Google may receive only basic cookieless signals from the analytics tag. See our cookie policy.
3. Why we process it and on what legal basis
| Purpose | Data | Legal basis (UK GDPR and EU GDPR) |
|---|---|---|
| Responding to your demo request and arranging a walkthrough | Name, work email, company, company size, platforms, message, language | Art. 6(1)(f) — legitimate interest in answering business enquiries; Art. 6(1)(b) where you are yourself the prospective customer |
| Sending you Safety AZ updates by email | Email, language | Art. 6(1)(a) — the consent you give by ticking the box in the form, withdrawable at any time |
| Delivering the website securely and protecting the demo form from spam and abuse | IP address, browser details, server logs | Art. 6(1)(f) — legitimate interest in a secure, working site |
| Remembering your language | Preference cookie | Art. 6(1)(f) — legitimate interest in a usable site |
| Recording your cookie choices | Consent cookie and consent record | Art. 6(1)(c) — legal obligation to be able to show consent |
| Understanding site usage | Analytics data | Art. 6(1)(a) — consent via the cookie banner |
4. Data inside the Safety AZ platforms
The Safety AZ platforms (Management AZ, Employee AZ, the provider and authority platforms) process workforce compliance records — including occupational health data, which is special-category data under Article 9 GDPR — on behalf of the organization that holds the subscription. For that data, your employer or service provider is the controller and we act as a processor under a data processing agreement. If you want to exercise your rights over records held in a Safety AZ platform, contact the organization that manages your account; we will assist them as required by Article 28 GDPR.
5. Who we share data with
We do not sell personal data. We share it only with the service providers below, who help us run this website and our business. Those that process data on our behalf do so under contracts that restrict what they may do with it.
- Google Cloud hosts this website, its server logs and the databases that hold demo requests, in its europe-west1 region (Belgium).
- Twilio SendGrid delivers the email that passes your demo request to our team.
- DigitalOcean serves the website's images, stylesheets and scripts from its Spaces content-delivery network.
- Google Fonts and jsDelivr deliver the website's fonts and flag icons.
- CookieYes provides the cookie banner and keeps a record of your cookie choices.
- Google Analytics measures how the site is used; it uses cookies only if you accept analytics cookies.
DigitalOcean, Google Fonts, jsDelivr and CookieYes send their files straight to your browser, so they receive your IP address and browser details whenever a page loads them.
6. International transfers
We are based in the UK, and this website and its databases are hosted in the European Union (Belgium). Some of the providers above, such as Twilio SendGrid, Google Analytics and the content-delivery networks that serve fonts, icons and files, may process data in other countries, including the United States. Where personal data leaves the UK or the EEA, we rely on UK adequacy regulations or European Commission adequacy decisions, or on the European Commission's Standard Contractual Clauses together with the UK International Data Transfer Addendum.
7. How long we keep it
- Demo requests (in our databases and our team's inbox): up to 24 months after our last contact with you, then deleted.
- Marketing consent records: for as long as your consent remains active, plus the period needed to evidence it.
- Server logs: 30 days.
- Spam-protection counters (your IP address): up to ten minutes, in server memory only.
- Analytics data: for the retention period set in our Google Analytics property, 14 months at most.
- Cookies: for the durations listed in our cookie policy.
8. Your rights
Under the UK GDPR, and the EU GDPR where it applies to you, you can ask us for access to, rectification or erasure of your personal data, restriction of processing, portability, and you can object to processing based on legitimate interest, and at any time to direct marketing. You can withdraw consent at any time: to stop Safety AZ updates, reply to any of our emails or write to us; to change your cookie choices, use the "Cookie settings" link at the bottom of every page. To exercise any right, email salut@safety-az.com. You also have the right to lodge a complaint with a data protection supervisory authority. In the UK that is the Information Commissioner's Office (ICO), ico.org.uk. If you are in the EU or EEA, you can also complain to the data protection authority in your country.
9. Changes to this policy
We will post any changes on this page and update the "Last updated" date above. If a change materially affects how we use your data, we will notify you where we reasonably can.