Privacy notice
Last updated: 13 November 2026. This notice covers the Treato website and enquiry form, not a contracted monitoring service.
Who is responsible
BrandInsights Limited operates Treato and is responsible for the business enquiry information collected on this website. You can contact us about privacy through the Treato enquiry form by selecting “Privacy request”.
What we collect
If you submit an enquiry, we collect your name, email address, company, optional website and markets, selected product, message, submission time and a reference number. We also process technical request information to protect the form from abuse.
Do not provide medical records, patient identifiers, health information, passwords or other sensitive information. The website is intended for business contacts, not patients seeking care.
Why we use it
We use the information to receive, review and respond to your request, discuss relevant Treato services and maintain the security of the site. Where applicable, we rely on steps requested before entering a contract or our legitimate interests in handling business correspondence and protecting the service. We do not use the form as an opt-in to unrelated marketing.
Storage and service providers
The website and private R2 enquiry store run on Cloudflare. Your enquiry is also emailed to the designated Treato team members so they can respond. Their email providers process these notification copies. Stored enquiries are accessible through authorised account administration, not through a public website directory. Cloudflare processes technical information as part of delivering and securing its service; its infrastructure may process data in multiple countries. We do not promise a particular data residency through this website.
Retention
Records in the website enquiry store are scheduled for deletion 90 days after submission. Short-lived anti-abuse records expire within an hour. Notification emails and subsequent business correspondence are separate copies and are not deleted by the website storage timer. They may be retained as needed to handle your enquiry, an ongoing business relationship or legal requirements. You can contact us about deletion using the privacy-request option.
Cookies and analytics
This website does not set advertising or analytics cookies and does not load third-party marketing pixels. Our enquiry protection does not require a browser cookie. Hosting and security services still process technical request data.
Your choices and rights
Depending on the law that applies, you may have rights to access, correct or delete your personal information, object to or restrict processing, or request portability. Send a privacy request using the form and include your enquiry reference if available. We may need to verify your identity before acting. You may also raise a concern with your local data protection authority.
Changes
We will update this notice when the website’s processing changes. Commercial monitoring services, integrations and customer data handling require their own agreed terms and data protection arrangements.