Our Commitment to Secure Operations

We regularly check our business practices against recognised standards, including:

• UK GDPR (General Data Protection Regulation)
• UK Data Protection Act (DPA) 2018
• ISO/IEC 27001 (Information Security Management)
• SOC 2 (Service Organization Controls)

Note: we do not hold a ISO/IEC 27001 or SOC 2 standards, but we continually work towards improvements to it published standards.

These frameworks guide how we store, process, transfer, and use personal data and system information.

Security Audits & Monitoring

To stay ahead of risks, we carry out:

• Regular security audits of our infrastructure, policies, and processes
• Routine vulnerability scans on core systems and software
• Continuous monitoring of authentication, access, and application activity
• System monitoring dashboard for real-time visibility into system health and security metrics
• Annual reviews against international security standards

All audits result in documented improvements to strengthen our platform and minimise risk.

Continuous Improvement

Security isn't a one-time task. We continuously improve our systems by:

• Updating our policies and controls
• Evaluating new industry standards and legal changes
• Enhancing encryption and storage procedures
• Reviewing access controls and permissions
• Updating third-party services to align with the latest certifications

Data Protection in Practice

Our approach to security includes:

• Encrypted data transmission (HTTPS + TLS)
• Role-based access controls
• Secure authentication for pubs and users
• EU- & UK-based hosting and data storage
• Secure payment processing via trusted providers

We never sell personal data and only use it for clearly defined purposes that support Tap Tap Pub's services.

Report a Concern

If you believe you've found a security issue or vulnerability, please contact our team at: