Last updated 29 August 2026
This policy explains what personal data we collect through rephq.co.uk, why we collect it, and what rights you have over it. It is written to be read, not to be survived.
The short version: this website sets no cookies, runs no analytics, and carries no advertising or tracking scripts of any kind. The only personal data we hold from this site is what you choose to send us when you get in touch.
REPHQ LTD is the data controller for personal data collected through this website.
| Registered name | REPHQ LTD |
|---|---|
| Company number | 17256173, registered in England and Wales |
| Registered office | 91 Bates Avenue, Darlington, England, DL3 0TS |
| Contact | requests@rephq.co.uk |
We have not appointed a Data Protection Officer, as we are not required to.
This policy covers the rephq.co.uk website only.
The RepHQ mobile application is a separate service with its own processing, and is governed by a separate privacy notice provided to customers and their users. Our international site, rephqglobal.com, has its own policy at rephqglobal.com/privacy.html.
If you complete our enquiry form or email us, we collect the information you choose to provide: your name, your work email address, the clinical segments you are interested in, and anything you write in the message field.
Why: to reply to you and to work out whether RepHQ suits your team.
Lawful basis: legitimate interests (UK GDPR Article 6(1)(f)). Our legitimate interest is responding to a business enquiry that you initiated. We consider this to have minimal privacy impact, because you decide what to send us and you are contacting us in a professional capacity.
Providing this information is not a statutory or contractual requirement. You are not obliged to provide it — but without an email address we cannot reply.
Our web server keeps standard access logs, which record your IP address, browser type and version, the pages you requested and the date and time. This happens automatically for every website you visit anywhere.
Why: to keep the site running, diagnose faults, and protect against abuse and attack.
Lawful basis: legitimate interests (Article 6(1)(f)) — operating and securing our own website.
This website sets no cookies. It uses no analytics, no advertising or marketing pixels, no session recording, no chat widget, and no consent-management platform. Nothing is written to your browser's local or session storage by these pages.
That is why you are not asked to accept anything when you arrive. If this changes, we will update this policy and introduce a proper consent mechanism before any non-essential cookie is set.
We should be straight about the one third party involved in an ordinary page view. This site loads its typefaces from Google Fonts (fonts.googleapis.com and fonts.gstatic.com). Your browser makes a direct request to Google's servers to fetch them, which necessarily discloses your IP address and browser user-agent to Google. This happens on every page load and we cannot see or control what Google does with it.
No cookie is set by this. Google's own handling is described in the Google Privacy Policy. If you would prefer this not to happen, a browser extension that blocks third-party font requests will prevent it; the site remains readable without them.
We do not sell your personal data, and we do not share it for anyone else's marketing. It is disclosed only to the service providers we rely on to operate:
| Who | What they handle |
|---|---|
| DreamHost (New Dream Network, LLC) | Website hosting and server access logs |
| Supabase | Receives your enquiry from the form and stores it, including the page you sent it from and your browser's user-agent string |
| Resend | Delivers your enquiry to us as an email |
| Google (Google Workspace) | Hosts the mailboxes your enquiry is delivered to, so Google stores it once it reaches us. Google also delivers the typefaces described in section 5. |
We may also disclose personal data where we are legally required to, or to establish, exercise or defend legal claims.
This website is served from Amsterdam, in the Netherlands. Enquiries submitted through the form are stored in Ireland, and the service that turns them into email runs there too. Both are inside the European Economic Area, and the UK and the EEA are covered by mutual adequacy findings, so no additional safeguards are required for personal data moving between them.
Enquiries reaching us by email are delivered into Google Workspace mailboxes and stored there. Google may process and store that mail on its infrastructure outside the UK and the EEA. Google relies on the UK Extension to the EU-US Data Privacy Framework and on standard contractual clauses for those transfers.
Two of the providers named in section 6 — DreamHost and Resend — are incorporated in the United States, so their support staff may access data from outside the UK and the EEA. Those transfers are made under the international transfer terms of each provider’s data processing agreement.
The exception is the Google Fonts request described in section 5, which may reach Google servers outside the UK. Google relies on the UK Extension to the EU-US Data Privacy Framework and on standard contractual clauses for such transfers.
Enquiries: retained for 24 months from our last contact with you, then deleted. If you become a customer, correspondence is kept for the life of the relationship and for six years afterwards, to meet our legal and accounting obligations.
Server access logs: retained for a short period only — typically no more than 90 days — in line with our hosting provider's standard configuration.
Under UK GDPR you have the right to:
To exercise any of these, email requests@rephq.co.uk. We will respond within one month. There is no charge.
Because we do not rely on consent for any processing described here, there is no consent for you to withdraw.
We do not carry out automated decision-making or profiling that produces legal or similarly significant effects, as described in Article 22.
If you are unhappy with how we have handled your personal data, please tell us first — we would rather fix it. You also have the right to complain to the UK supervisory authority at any time:
Information Commissioner's Office
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
0303 123 1113 · ico.org.uk
REPHQ LTD is registered with the Information Commissioner's Office as a data controller under registration reference ZC231873.
If we change how we handle personal data, we will update this page and revise the date at the top. Where a change is significant, we will say what changed rather than quietly replacing the text.