Cloudflare — website and network
Cloudflare provides Pages hosting, content delivery, Pages Functions and D1 storage for website forms. It receives network metadata and the information submitted through those forms. Cloudflare’s network operates internationally; we do not promise EU-only processing for the complete website flow.
References: Cloudflare privacy policy and data processing addendum. The applicable service and contractual scope must be considered for a particular deployment.
Telegram — internal request notifications
The Telegram Bot API sends notifications to an internal team channel. Pilot notifications include enquiry content, contact details, company and team size when supplied, approximate country, source page and submission time. Privacy notifications include request type, optional name, email, reference and time. Security notifications include severity, summary, reference, time and supplied contact details; the detailed report remains in the form database.
These notifications contain personal information. Telegram is a separate communications service, not a guarantee of end-to-end encrypted processing or local-only storage. See Telegram’s privacy policy. Notification access, retention and any applicable transfer arrangements must be considered alongside the form database.
Hosted service infrastructure
Customer-hosted installations use the customer’s infrastructure providers. Hosted pilots and services can also involve a server-hosting provider in addition to the network provider. The provider identity, processing location, access and contractual safeguards for a customer deployment are supplied on request and must be recorded in the service arrangement before customer data are placed there.
Analytics status
Umami is not active in the current public website configuration and is not listed here as a current recipient of website analytics. Enabling it requires a review of this disclosure and the applicable privacy requirements.
Updates and customer questions
Before agreeing to hosted processing, request the deployment-specific subprocessor schedule from [email protected]. Change notices, authorization and objection procedures belong in the signed data processing terms.