1. Who We Are

TipTo Ltd ("TipTo", "we", "us", or "our") is the data controller responsible for your personal data. We are a company registered in England and Wales.

Contact details:

2. What Data We Collect

We collect only the data you voluntarily provide to us through our website forms:

2.1 Waitlist Sign-Up (Drivers / TipToers)

Data collectedPurposeLegal basis
Email addressTo send you launch updates and product newsConsent (Article 6(1)(a) UK GDPR)

2.2 Partner Business Registration of Interest

Data collectedPurposeLegal basis
Business nameTo identify your business for partnership discussionsConsent (Article 6(1)(a) UK GDPR)
Contact nameTo address correspondence personallyConsent (Article 6(1)(a) UK GDPR)
Email addressTo contact you about partnership opportunitiesConsent (Article 6(1)(a) UK GDPR)
Business typeTo understand your business categoryConsent (Article 6(1)(a) UK GDPR)

2.3 Data We Do Not Collect

Our website does not currently collect:

3. How We Use Your Data

We use your personal data solely for the following purposes:

We will never:

4. How We Store Your Data

4.1 Form Processing

Form submissions on our website are processed through Formspree, Inc., a third-party form handling service headquartered in the United States. When you submit a form, your data is transmitted to Formspree's servers, which then forwards the submission to our email.

Formspree processes data in accordance with applicable data protection laws. For details, see Formspree's Privacy Policy.

4.2 International Data Transfers

Because Formspree is based in the United States, your data may be transferred to and stored outside the United Kingdom. We rely on appropriate safeguards for this transfer, including Formspree's compliance with applicable data protection standards. By submitting your data, you acknowledge this transfer.

4.3 Security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or alteration. Form submissions are transmitted using HTTPS encryption. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

5. Data Retention

We retain your personal data for as long as necessary to fulfil the purposes outlined in this policy, unless a longer retention period is required or permitted by law.

Specifically:

When your data is no longer needed, we will securely delete or anonymise it.

6. Your Rights

Under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, you have the following rights regarding your personal data:

6.1 Right of Access (Article 15)

You have the right to request a copy of the personal data we hold about you. We will provide this within 30 days of your request, free of charge.

6.2 Right to Rectification (Article 16)

You have the right to request that we correct any inaccurate or incomplete personal data we hold about you.

6.3 Right to Erasure (Article 17)

You have the right to request that we delete your personal data. We will comply within 30 days, provided there is no legal obligation requiring us to retain it.

6.4 Right to Restrict Processing (Article 18)

You have the right to request that we restrict the processing of your personal data in certain circumstances, such as when you contest the accuracy of the data.

6.5 Right to Data Portability (Article 20)

You have the right to receive your personal data in a structured, commonly used, and machine-readable format (e.g., CSV), and to have it transmitted to another controller where technically feasible.

6.6 Right to Object (Article 21)

You have the right to object to our processing of your personal data at any time. If you object, we will cease processing unless we have compelling legitimate grounds that override your interests.

6.7 Right to Withdraw Consent

Where we process your data based on consent, you have the right to withdraw that consent at any time. You can do this by:

Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.

6.8 How to Exercise Your Rights

To exercise any of the above rights, please email us at hello@tipto.uk with the subject line "Data Rights Request". We will verify your identity and respond within 30 days. There is no fee for exercising your rights, except in cases of manifestly unfounded or excessive requests.

7. Third-Party Services

Our website uses the following third-party services:

ServicePurposeData sharedPrivacy policy
FormspreeForm submission handlingData you enter in formsView
Google FontsTypography (Playfair Display, DM Sans)None (fonts loaded from Google servers)View
NetlifyWebsite hostingStandard server access logsView

8. Children's Privacy

Our website and services are not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have inadvertently collected data from a child under 18, we will take steps to delete it promptly. If you believe we may have collected data from a child, please contact us at hello@tipto.uk.

9. Cookies

Our website does not currently use cookies or similar tracking technologies. If we introduce cookies in the future, we will:

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. When we make material changes, we will:

We encourage you to review this page periodically for the latest information on our privacy practices.

11. Complaints

If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with the UK's supervisory authority:

Information Commissioner's Office (ICO)
Website: ico.org.uk
Telephone: 0303 123 1113
Address: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

We would appreciate the opportunity to address your concerns before you contact the ICO. Please reach out to us first at hello@tipto.uk.

12. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact us: