Privacy and cookies
Last updated 23 October 2026.
We only collect what you choose to send us, mostly through the invite form, and we use it to reply to you and plan your event. Our website sets no cookies of its own.
Who we are
Sanabode is a wellness café in the making, based in Bristol. For now we pop up with our drinks at events and markets. In this notice, “we” and “us” mean Sanabode.
Under data protection law, the one responsible for your details (the data controller) is KLIRPI Ltd, which trades as Sanabode. KLIRPI Ltd is registered in England and Wales, company number 16584614.
What we collect and why
When you ask us to come to your event
The invite form asks for:
- your name
- your email address
- your phone number, if you choose to give it
- your organisation, if you have one
- the event
- how many people are coming, if you know
- the date, if you know it
- the town or venue
- anything else you’d like to tell us
We use these details to reply to you, to work out whether we can come, and to plan the day with you if we do. The form isn’t the place for anything sensitive, such as someone’s health, so please leave that out.
When you email, call or message us
We’ll have whatever you send us, such as your name, your contact details and your message, and we use it to reply.
When you visit the website
Our website is hosted by Cloudflare. To show you a page, it has to handle some technical details, such as your IP address, the kind of device and browser you use, and the pages you ask for. Cloudflare uses these to deliver the site and to protect it from attacks.
We count visits with Cloudflare Web Analytics. It tells us things like how many people looked at the drinks menu, without cookies and without following you across other websites.
The bot check on the invite form
When you open the invite page, Cloudflare Turnstile starts checking that you’re a person and not a bot, and it finishes the check when you send the form. It looks at signals from your browser to do this, and it may store or read the small amount of information it needs for that check. To stop the form being flooded, we also keep a scrambled code made from your IP address, which can’t be turned back into it, and use it only to count how many messages come from one place. These counts are deleted automatically within two days.
Why the law lets us use your details
- Your enquiry: you’ve asked us about coming to your event, so we use your details to reply and, if you book us, to arrange it. The law calls this taking steps at your request before a contract.
- Messages that aren’t about a booking, keeping the website running and secure, the bot check and counting visits: we rely on our legitimate interests. A small business needs these to answer people and keep a working website, and we use as little as we can.
We don’t rely on your consent for any of this. You can still object, as explained under your rights below.
Who sees your details
- The Sanabode team, who read and answer the enquiries.
- Cloudflare, which hosts the website, delivers each invite form message to our inbox, runs the Turnstile bot check and counts visits.
- Google, because our email is Gmail, so your enquiry and any emails you send us are stored there.
Each company handles your details under its own privacy terms: you can read Cloudflare’s privacy policy and Google’s privacy policy. We never sell your details, and we only share them with anyone else if the law requires us to.
If your details leave the UK
Cloudflare and Google run their services around the world, so your details may be handled outside the UK. When that happens they stay protected, either because the UK has judged that country’s protection to be adequate, or by the standard contract clauses the UK approves for this.
How long we keep them
We keep enquiries for up to 12 months after your event or our last message, then delete them.
If you book us, we may need to keep some details for longer for our accounts, for as long as UK tax law asks us to.
Cloudflare keeps its technical records of visits for as long as its own privacy policy sets out.
Your rights
You can ask us to:
- show you the details we hold about you
- correct anything that’s wrong
- delete your details
- stop using your details, if you object to how we use them
- limit how we use them while something is being checked
- give you a copy of them in a form you can take elsewhere
Some of these depend on the reason we hold your details. To use any of them, email [email protected]. It’s free, and we’ll reply within one month.
If you’re unhappy with how we’ve handled your details, please tell us first so we can put it right. You can also complain to the Information Commissioner’s Office (ICO), the UK’s data protection regulator, at ico.org.uk or on 0303 123 1113.
Cookies
Our website sets no cookies of its own, so there’s no cookie banner to click through.
- The Turnstile bot check on the invite form may store or read what it needs in your browser to tell people from bots. This is only there to keep the form safe from spam, so the law doesn’t ask for consent to it.
- Our visit counts, from Cloudflare Web Analytics, use no cookies and don’t track you across other websites.
- We host our own fonts, so your browser doesn’t contact Google Fonts when you visit.
Links to Instagram take you to Instagram, which has its own privacy policy and cookies.
If this notice changes
We’ll update this page and change the date at the top.
Contact us
For anything about your details, get in touch with the Sanabode team: