This policy explains how Tipzi Ltd collects, uses, and protects the personal information of everyone who uses our Platform — employees, employers, and customers alike. Please read it carefully.
01 — Who We Are
Tipzi Ltd ("Tipzi", "we", "us", "our") is a company registered in England and Wales. We operate the platform available at tipzi.co.uk and any associated mobile or web applications (together, the "Platform").
As the operator of this Platform we are the data controller of personal information collected through it. If you have any questions about this policy or our data practices, please contact us at privacy@tipzi.co.uk.
02 — What We Collect
We collect information you give us directly when you register, complete your profile, make or receive a payment, or contact us. This includes your name, email address, phone number, profile photo, job history, and payment information.
We automatically collect certain technical data when you use the Platform, including your IP address, browser type, device identifiers, pages visited, referring URLs, and timestamps. This data is collected via cookies and similar tracking technologies.
When employees connect a Stripe account to receive tips, Stripe handles the payment data directly under their own privacy policy. We receive only summary payout and account-status information.
We may receive information about you from third parties such as Google or other OAuth providers if you choose to sign in using those services.
03 — How We Use Your Data
We use your data to create and manage your account; to facilitate tip payments between customers, employees, and employers; to display your public profile to other users; to send you transactional emails such as receipts, review notifications, and security alerts; and to provide customer support.
We also use aggregated, anonymised data to understand how the Platform is used, identify bugs, and improve our product. We do not sell your personal data to third parties.
Where we send you marketing communications (such as product updates or promotional offers), we rely on your consent or, where permitted, our legitimate interest in keeping you informed about services you have used. You can opt out of marketing emails at any time via the unsubscribe link.
04 — Legal Basis for Processing
Performance of a contract — when processing is necessary to provide the service you signed up for (e.g. processing a tip payment or displaying your profile).
Legitimate interests — to maintain platform security, detect fraud, improve our product, and communicate about relevant updates, where these interests are not overridden by your rights.
Consent — where we ask for and receive your explicit consent, such as for marketing emails or certain cookies.
Legal obligation — where we are required to retain or share data to comply with applicable law.
05 — Sharing & Disclosure
We share data with Stripe to facilitate payments, with Cloudinary for image storage, and with Resend for transactional email. Each of these sub-processors is contractually bound to protect your data in line with UK GDPR requirements.
Your public profile information — including your name, profile photo, job title, ratings, and reviews — is visible to all visitors of the Platform. You control which fields are shown via your profile settings.
We may disclose your data if required by law, court order, or government authority, or to protect the rights, property, or safety of Tipzi, our users, or the public.
In the event of a merger, acquisition, or sale of assets, your data may be transferred to a successor entity. We will give you reasonable notice and, where required, obtain fresh consent.
06 — Data Retention
We retain your account data for as long as your account is active. If you delete your account, we will remove or anonymise your personal data within 30 days, except where we are required to retain it for legal or regulatory reasons (for example, financial transaction records must be kept for six years under UK law).
Aggregated, anonymised analytics data may be retained indefinitely as it cannot be used to identify you.
07 — Your Rights
Under UK GDPR you have the right to: access a copy of your personal data; correct inaccurate data; request deletion of your data (subject to legal retention obligations); object to or restrict certain processing; and receive your data in a portable format.
You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk if you believe we have not handled your data lawfully.
To exercise any of these rights, email us at privacy@tipzi.co.uk. We will respond within 30 days.
08 — Cookies
We use strictly necessary cookies to keep you signed in and maintain your session. We use analytics cookies (with your consent) to understand how users interact with the Platform.
Full details of the cookies we use, including how to manage or withdraw your consent, are set out in our Cookie Policy.
09 — Security
We implement industry-standard technical and organisational measures to protect your data, including HTTPS encryption in transit, hashed credentials, and role-based access controls.
No method of transmission over the internet is 100% secure. We cannot guarantee absolute security, but we will notify you and the ICO promptly in the event of a breach that affects your rights and freedoms.
10 — Changes to This Policy
We may update this policy from time to time. We will post the revised version on this page with an updated "Last updated" date. If the changes are material, we will notify you by email.
Your continued use of the Platform after changes are posted constitutes acceptance of the updated policy.
Contact Us
For privacy-related queries or to exercise your rights, contact us at:
Tipzi Ltdprivacy@tipzi.co.uk