This Privacy Policy explains how TipDirect ("we", "us", "our") handles personal data when you use tipdirect.co.uk and related services. We process data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Controller: TipDirect. Company registration number and registered office address: [to be completed - Muhamed]. Contact: support@tipdirect.co.uk.
1. Who this notice covers
This notice applies to:
- Workers who create TipDirect accounts and receive tips
- Customers (tippers) who send tips via a worker's tip page or QR code
- Visitors to our marketing and informational pages
- People who contact support or submit verification documents
2. Personal data we collect
Workers
- Account details: name or display name, email address
- Authentication data: one-time passcodes, Google sign-in identifiers
- Wallet / payout preferences you choose (for example Revolut, PayPal, Monzo, or Stripe Express)
- Proof-of-work materials you upload for the Verified badge (for example photos or documents)
- QR and branding settings, tip history summaries, and account activity
Tippers
- Tip amount, timing, and the worker profile tipped
- Payment-related information processed by our payment providers (we do not store full card numbers)
- Optional message or name if you choose to leave one
- Technical data such as device type, browser, IP address, and approximate location derived from IP
Website visitors
- Technical logs needed to run and secure the site
- Cookie and similar technology data as described in our Cookie Policy
3. Why we use personal data (purposes and lawful bases)
- Provide the service - create accounts, show tip pages, route tips to worker wallets, operate QR codes and branding (contract / steps needed before a contract for tippers; legitimate interests for core platform security).
- Payments and fees - process tips, the 29p cover fee, and the £1 minimum tip (contract / legal obligation where applicable).
- Verification - review proof-of-work for Verified badges to reduce misuse (legitimate interests; consent where we ask for optional documents beyond what is needed).
- Security and fraud prevention - detect abuse, protect accounts, and keep payment flows safe (legitimate interests / legal obligation).
- Support - respond to emails and contact requests (legitimate interests / contract).
- Legal compliance - keep records we must retain, respond to lawful requests (legal obligation).
- Product improvement - aggregated analytics where we use optional cookies or similar tools only after consent under PECR (consent).
4. Who we share data with
We share personal data only where needed to run TipDirect, including:
- Payment and wallet providers (for example Stripe and the wallet services workers choose)
- Hosting, email delivery, and infrastructure providers acting as processors under contract
- Professional advisers or authorities where required by law
We do not sell personal data. Tips are directed to the worker you choose to tip; the worker may see tip amounts and any optional message you send.
5. International transfers
Some providers may process data outside the UK. Where that happens, we use appropriate safeguards such as the UK International Data Transfer Agreement / Addendum or adequacy decisions where available.
6. Retention
We keep account and tip records for as long as your account remains active and for a reasonable period afterwards to handle disputes, accounting, and legal claims (typically up to six years for transactional records unless a shorter period is appropriate). Verification uploads are kept while a Verified status is relevant and deleted or anonymised when no longer needed. Support emails are retained for a limited period after the enquiry is closed.
7. Your rights
Under UK GDPR you may have the right to:
- Access your personal data
- Rectify inaccurate data
- Erase data in certain circumstances
- Restrict or object to certain processing
- Data portability for information you provided to us
- Withdraw consent where processing is based on consent
- Complain to the Information Commissioner's Office (ICO) at ico.org.uk
To exercise these rights, email support@tipdirect.co.uk. We may need to verify your identity before responding.
8. Children
TipDirect is aimed at adults in the UK workforce and tippers. We do not knowingly collect personal data from children. If you believe a child has provided data, contact us and we will take appropriate steps.
9. Changes
We may update this policy as TipDirect evolves. The "Last updated" date at the top will change when we do. Material changes may also be flagged on the site or by email where appropriate.
10. Contact
Privacy questions: support@tipdirect.co.uk. See also our Contact page, Terms of Service, and Cookie Policy.