Privacy notice

Last updated: 15/10/2026

This notice explains what personal information T-A-N collects about you, why, who we share it with, how long we keep it, and your rights. It covers our studios, our kiosks, your online account at my.t-a-n.co.uk and our website t-a-n.co.uk.

Who we are

T-A-N is a trading name of T.A.N Group Limited, a company registered in England and Wales (company number [number]), Parkside House, 15 Headley Road, Reading, RG5 4JB. We decide how your information is used, which makes us the "controller" under UK data protection law. Our ICO registration number is [number].

For anything about your information, email us at info@t-a-n.co.uk.

What we collect

When you join (on your phone or at a kiosk):

• your name, date of birth, mobile number, email address, postcode and gender;
• a PIN for the kiosk, and a password for your online account (we store both scrambled, so nobody can read them);
• your answers to our health and skin questions, and whether you confirmed you have seen your GP;
• whether you want news and offers by email or by text;
• which version of our terms you accepted, and when.

When we check your ID:

• on your phone, our partner Stripe asks for a photo of your ID and a selfie, and compares the two. Stripe keeps the images. We receive the result, and the name and date of birth on your ID;
• at a studio, a member of staff looks at your photo ID. We record that they checked it, who checked it, and the name and date of birth on it. We don't copy the ID.

When you use T-A-N:

• your sunbed sessions: which studio and room, when and for how long;
• what you buy, your account credit, vouchers you use and any monthly plan;
• card payments. Stripe handles your card; we only see the card type and its last four digits;
• the device and studio you used, the date and time, and your IP address when you use your online account. We keep this in a log of important actions, to keep accounts secure and to resolve problems;
• messages and notes about your account, for example if you contact us.

In our studios: CCTV records the studios, and staff may take a photograph in the studio, to check age and identity, for safety, and to stop accounts being shared.

If you were a customer of our previous system: we kept the records from it (your name, contact details, sessions and any credit), so that you can reclaim your history and credit when you join again.

Why we use it, and our legal reasons

What we do	Our legal reason
Run your account, let you use sunbeds, take payments and run monthly plans	To carry out our agreement with you
Check you are 18 or over before you use a sunbed	The law: the Sunbeds (Regulation) Act 2010 forbids sunbed use by under-18s
Ask health and skin questions, so you only tan when it is safe for you	Your explicit consent, which you give when you answer them. Health information is a special category of data; without it we can't let you use a sunbed
Compare your selfie with your ID (done by Stripe)	Your explicit consent, which you give in Stripe's check. You can ask a member of staff to check your ID in person instead
Send you emails about your account (confirming your email, setting a password, receipts, plan changes)	To carry out our agreement with you
Send you news and offers by email or text	Your consent. You can withdraw it any time in your account, or with the unsubscribe link in each email
Keep a log of important actions, prevent fraud and account sharing, run CCTV and take in-store photographs	Our legitimate interest in keeping customers, staff and accounts safe
Keep payment and sales records	The law: tax and accounting rules

Some decisions are made automatically: Stripe decides whether your ID and selfie match. If it can't confirm you, a member of our staff reviews it before anything happens to your account, and you can ask for your ID to be checked in person.

Who we share it with

We never sell your information. We share it only with companies that help us run T-A-N, and only what they need:

• Stripe (payments, monthly plans and the ID check);
• Mailchimp (news and offers by email, only if you said yes);
• Mailchimp Transactional (Mandrill) (sending account emails);
• Laravel (our servers, on its Laravel VPS hosting) [check where the server is];
• Cloudflare (storing encrypted backups of our database);
• Laravel Nightwatch (spotting errors in our system; an error report can include details of the request that caused it).

We may also share information when the law requires it, for example with the police.

Stripe, Mailchimp, Laravel and Cloudflare may handle information outside the UK, including in the USA. When they do, it is protected by the UK's approved safeguards: the UK–US data bridge, or the UK's standard data transfer agreements.

How long we keep it

• Your account: while it is open. If you close it, we delete your personal details within [30 days], except the records below.
• Accounts nobody uses: if an account isn't used for [3 years], we delete it.
• Payment and sales records: 6 years, because the law requires it.
• Health answers: while your account is open. When you answer them again, we keep the earlier answers [until your account closes].
• ID check: Stripe keeps your ID images under its own rules. We keep the result while your account is open.
• Records from our previous system: until [date]. If you haven't joined again and claimed them by then, we delete them.
• The log of important actions: [6 years].
• CCTV: [30 days], unless we need a recording to deal with an incident.
• Marketing: until you say you no longer want it.

Cookies

Our website t-a-n.co.uk sets no cookies. Your online account and our kiosks use only the cookies they need to work, such as the one that keeps you signed in. We don't use advertising or tracking cookies.

Your rights

You have the right to:

• get a copy of the information we hold about you;
• have anything wrong corrected (you can change most details in your account);
• have your information deleted, unless the law requires us to keep it;
• ask us to limit how we use it, or object to how we use it;
• get the information you gave us in a format you can take elsewhere;
• withdraw your consent at any time, for marketing or for the ID check. This doesn't affect anything we did before. Without health answers or an ID check, though, we can't let you use a sunbed.

To use any of these rights, email info@t-a-n.co.uk. We will reply within one month.

If you're unhappy with how we've handled your information, please tell us first. You can also complain to the Information Commissioner's Office: ico.org.uk, 0303 123 1113.

Under 18s

T-A-N is only for people aged 18 and over. If we find we have information about someone under 18, we close the account and delete it.

Changes to this notice

If we change this notice, we will publish the new version here and tell you by email if the change matters to you.