Privacy Policy

1. Who we are

TapUpCard is a trading name operated by a sole trader based in the United Kingdom. For UK data protection law, the TapUpCard operator is the controller of the personal information described in this policy.

2. Information we collect

Account and contact information

This may include your name, email address, password in protected form, business name and information you provide when contacting support.

Orders and payments

We collect order details, delivery information, products purchased, payment status and transaction references. Payments are processed by our payment provider. TapUpCard does not receive or store your complete payment-card details.

TapUp Review and TapUp Connect information

We process card identifiers, configuration settings, destination links, tap activity and the information you add to a digital profile. Information placed on a published TapUp Connect profile may be publicly visible to anyone with its link or card.

TapUp AI and Google information

If you choose to connect a supported Google account or Google Business Profile, we may process account identifiers, business profile details, customer reviews, review replies and connection tokens needed to provide the service. AI reply requests may include review text and the settings you select.

Job applicant information

If you apply to work with TapUpCard, we may process the information you choose to provide, such as your name, email address, CV, work history, qualifications, portfolio or work samples, and information contained in your application or correspondence with us.

Technical information

We may receive IP addresses, device and browser information, timestamps, requested pages, security events and cookie or session identifiers through normal website and server operation.

3. How and why we use information

We use personal information for the following purposes and lawful bases:

• Contract: to create and manage accounts, process orders, deliver products, provide card and profile functionality, manage subscriptions and provide customer support.
• Legal obligations: to keep financial and transaction records, respond to lawful requests and meet tax, accounting and consumer-law requirements.
• Legitimate interests: to protect our service, prevent fraud and misuse, troubleshoot problems, understand service performance, improve our products, respond to business enquiries and assess applications for work with TapUpCard.
• Consent: where required for optional connections, marketing communications or non-essential technologies. You may withdraw consent at any time.

4. Public profiles and customer content

You control the information submitted to your TapUp Connect profile. When a profile is published, its content may be viewed and shared publicly. Do not publish sensitive information or information about another person unless you have permission to do so.

You remain responsible for links, images, text and other content you upload or configure.

5. Who we share information with

We share information only where needed to operate TapUpCard, including with:

• website hosting, database, storage and email providers;
• Mollie or another payment provider used at checkout;
• delivery carriers and fulfilment providers;
• Google when you use Google sign-in or connect supported Google services;
• AI service providers used to generate requested reply suggestions;
• professional advisers, insurers, regulators, courts or authorities where reasonably necessary; and
• a buyer or successor if the business is reorganised, transferred or sold, subject to appropriate safeguards.

Providers may only receive the information reasonably required for their role and are expected to protect it appropriately.

6. International transfers

Some service providers may process information outside the United Kingdom. Where UK data protection law requires it, we use an approved transfer mechanism or rely on an applicable adequacy decision and take reasonable steps to ensure appropriate safeguards are in place.

7. Cookies and similar technologies

TapUpCard uses essential cookies and similar technologies for secure sessions, account access, fraud prevention and core website functions. These technologies are necessary for the requested service.

Optional analytics cookies may be used only after you give consent through the cookie banner or preferences panel. TapUpCard uses Google Analytics 4 to understand website usage. You can withdraw or change your choice at any time through Cookie settings.

8. How long we keep information

We keep information only for as long as reasonably needed for the purpose collected, including:

• account, profile and service information while the account is active and for a reasonable period following closure;
• order, payment and accounting records for up to six years where needed for legal, tax or contractual purposes;
• contact and support enquiries normally for up to 24 months after resolution;
• job application information for a reasonable recruitment period and, where appropriate, for a limited period afterwards in case a suitable opportunity arises;
• security and technical records for a limited period appropriate to investigating incidents and protecting the service; and
• connected Google information until it is no longer required, the connection is removed or deletion is requested, subject to necessary backup and legal-retention periods.

Information may be retained longer where required by law, needed to resolve a dispute or necessary to establish, exercise or defend legal claims.

9. Security

We use reasonable technical and organisational safeguards designed to protect personal information. No internet service can guarantee absolute security, so you should use a strong, unique password and tell us promptly if you believe your account has been compromised.

10. Your data protection rights

Depending on the circumstances, UK data protection law may give you the right to:

• request access to your personal information;
• ask us to correct inaccurate or incomplete information;
• ask us to delete information;
• request restriction of processing;
• receive certain information in a portable format;
• withdraw consent where processing relies on consent; and
• object to certain processing.

You have the right to object to processing based on legitimate interests and to object at any time to direct marketing.

To make a request, email info@tapupcard.com. We may need to verify your identity before completing it.

11. Complaints

Please contact us first so we can try to resolve your concern. You may also complain to the UK Information Commissioner’s Office through ico.org.uk or by calling 0303 123 1113.

If you live outside the UK, you may also have the right to contact the data protection authority where you live.

12. Children

TapUpCard is intended for people aged 18 or over and is not designed for children. Please contact us if you believe a child has provided personal information to us.

13. Changes to this policy

We may update this policy when our services or legal obligations change. The latest version will be published on this page with a revised update date.

14. Contact us

For privacy questions or requests, contact: