TAPinto Privacy Policy - FINAL
PRIVACY POLICY
Effective Date: 5th August 2025
Last Updated: 5th August 2025
\---
1\. INTRODUCTION
Tapintome Ltd ("TAPinto," "we," "us," or "our") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you use our platform at tapinto.me and related services.
We are the data controller for your personal information and are registered in England and Wales (Company No. 14881481, VAT: GB440751903).
\---
2\. INFORMATION WE COLLECT
2.1 Information You Provide Directly
\- Account Information: Name, email address, phone number, business details, billing information
\- "ME" Profile Data: Professional information, contact details, calendar preferences, social media links, custom sections, achievements, current goals
\- Business Directory Information: Company details, services offered, location, business descriptions, sectors, client information
\- Rewards Club Data: Membership tier, preferences, transaction history, referral information
\- Payment Information: Billing details (processed securely through Stripe)
\- Communications: Messages, support requests, feedback, correspondence, community posts
2.2 Information Collected Automatically
\- Usage Data: Pages viewed, features used, time spent on platform, click patterns, search queries
\- Device Information: IP address, browser type, operating system, device identifiers, screen resolution
\- Location Data: General location based on IP address (not precise geolocation unless explicitly consented)
\- Cookies and Tracking: See our Cookie Policy for detailed information
\- Performance Data: Platform performance metrics, error logs, loading times
2.3 Information from Third Parties
\- Business Information: Publicly available business data for directory enhancement and verification
\- Social Media: Profile information if you connect social media accounts to your "ME" Profile
\- Payment Processors: Transaction confirmations, payment status updates, refund information
\- Partner Integrations: Data from connected services like calendar applications, CRM systems
\---
3\. HOW WE USE YOUR INFORMATION
3.1 Service Provision
\- Creating and maintaining your account and "ME" Profile
\- Processing payments and managing Rewards Club memberships
\- Providing customer support and responding to enquiries
\- Delivering requested services including directory listings, secure communities, and FX Portal
\- Facilitating networking connections and business introductions
3.2 Platform Improvement
\- Analysing usage patterns to improve user experience
\- Developing new features including AI-powered profile creation
\- Conducting research and analytics on platform performance
\- Testing platform security and functionality
\- Personalising your experience based on preferences and usage
3.3 Communication
\- Sending service-related notifications and updates
\- Marketing communications including newsletters and promotional content (with your consent)
\- Important account and security information
\- Rewards Club benefits and exclusive offers
\- Community updates and networking opportunities
3.4 Legal and Security
\- Complying with legal obligations and regulations including UK GDPR
\- Protecting against fraud, abuse, and security threats
\- Enforcing our Terms and Conditions
\- Resolving disputes and legal claims
\- Maintaining accurate financial records
\---
4\. LEGAL BASIS FOR PROCESSING
We process your personal data based on:
\- Contract Performance: Providing services you've requested including "ME" Profiles, directory listings, and Rewards Club benefits
\- Legitimate Interests: Platform improvement, security, fraud prevention, and business operations
\- Consent: Marketing communications, optional features, social media integrations, and cookies
\- Legal Obligation: Compliance with applicable laws, tax requirements, and financial regulations
\---
5\. DATA SHARING AND DISCLOSURE
5.1 We Do Not Sell Your Data
We never sell, rent, or trade your personal information to third parties for their marketing purposes.
5.2 Service Providers
We may share data with trusted service providers who assist with:
\- Payment processing (Stripe for secure transactions)
\- Cloud hosting and storage (AWS infrastructure)
\- Email communications and marketing tools
\- Analytics and performance monitoring
\- Customer support systems
\- Security and fraud prevention services
5.3 Business Directory and "ME" Profiles
\- Information you choose to include in our Business Directory is publicly visible to help other users find and connect with your business
\- Your "ME" Profile visibility depends on your privacy settings and account tier
\- You control what information is shared and with whom
5.4 Secure Communities
\- Data within Secure Communities is only visible to community members
\- Enhanced privacy controls apply to Secure Communities
\- You maintain ownership and control of your data within these spaces
5.5 Rewards Club Partners
\- We may share necessary information with partner businesses to provide discounts and benefits
\- This sharing is limited to what's required to deliver the specific benefit
\- Partners are contractually bound to protect your information
5.6 Legal Requirements
We may disclose information when required by:
\- Law enforcement or regulatory authorities
\- Court orders or legal processes
\- Protection of our rights, users, or public safety
\- Prevention of fraud or illegal activities
\---
6\. DATA STORAGE AND SECURITY
6.1 Security Measures
\- Industry-standard encryption for data transmission and storage
\- Regular security assessments and penetration testing
\- Multi-factor authentication and access controls
\- Secure cloud infrastructure with AWS
\- Regular security training for all staff
\- Incident response procedures and monitoring
6.2 Data Retention
\- Account Data: Retained while your account is active and for a reasonable period after closure
\- Transaction Records: Retained for 7 years for legal and accounting requirements
\- Marketing Data: Until you withdraw consent or request deletion
\- Inactive Accounts: Deleted after 2 years of inactivity with prior notice
\- "ME" Profile Data: Retained according to your account status and privacy preferences
6.3 International Transfers
\- Your data is primarily stored within the UK and EU
\- Any international transfers comply with UK GDPR adequacy requirements
\- Appropriate safeguards are in place for all data transfers
\- You will be informed of any significant changes to data location
\---
7\. YOUR RIGHTS UNDER UK GDPR
You have the following rights regarding your personal data:
7.1 Right of Access
\- Request copies of your personal data
\- Understand how your data is being processed
\- Receive information in a commonly used, machine-readable format
\- Access your complete "ME" Profile and account history
7.2 Right to Rectification
\- Correct inaccurate or incomplete information
\- Update your profile and account details
\- Modify your business directory information
\- Change your communication preferences
7.3 Right to Erasure ("Right to be Forgotten")
\- Request deletion of your personal data
\- Close your account and remove associated data
\- Remove your business from our directory
\- Withdraw consent for processing
7.4 Right to Restrict Processing
\- Restrict processing in certain circumstances
\- Temporarily suspend data processing while disputes are resolved
\- Limit how your data is used while maintaining your account
7.5 Right to Object
\- Object to processing based on legitimate interests
\- Opt out of marketing communications at any time
\- Object to automated decision-making and profiling
\- Withdraw consent for optional features
7.6 Right to Data Portability
\- Receive your data in a structured, machine-readable format
\- Transfer your "ME" Profile data to another service provider
\- Export your business directory information
\- Download your complete account data
7.7 Rights Related to Automated Decision Making
\- We do not make solely automated decisions that significantly affect you
\- Any AI-powered features are designed to assist, not replace, human decision-making
\- You can request human review of any automated processes
\---
8\. COOKIES AND TRACKING TECHNOLOGIES
We use cookies and similar technologies to enhance your experience. Please see our Cookie Policy for detailed information about:
\- Types of cookies we use (essential, functional, analytics, marketing)
\- How to manage cookie preferences
\- Third-party tracking and analytics
\- Your consent options and controls
\---
9\. SPECIAL CATEGORIES OF DATA
9.1 Sensitive Personal Data
We do not routinely collect sensitive personal data. However, if you voluntarily provide such information (e.g., in your "ME" Profile or community posts), we will:
\- Process it only with your explicit consent
\- Apply additional security measures
\- Allow you to remove it at any time
\- Use it only for the specific purpose you intended
9.2 Veterans and Mental Health Support
For our veterans' community and mental health initiatives, any sensitive information is:
\- Processed with explicit consent and for legitimate support purposes
\- Subject to enhanced security and confidentiality measures
\- Shared only with qualified professionals when necessary for support
\- Retained only as long as necessary for support purposes
\---
10\. CHILDREN'S PRIVACY
Our services are not intended for children under 16\. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately at legal@tapinto.me.
\---
11\. CHANGES TO THIS POLICY
We may update this Privacy Policy to reflect changes in our practices, legal requirements, or service offerings. We will:
\- Notify you of significant changes via email or platform notification
\- Post the updated policy with a new effective date
\- Provide a summary of key changes
\- Maintain previous versions for your reference
\- Give you the opportunity to review and accept material changes
\---
12\. INTERNATIONAL USERS
While TAPinto is based in the UK, we welcome international users. Please note:
\- UK GDPR provides the baseline for our data protection practices
\- Additional local privacy laws may apply to your data
\- We will comply with applicable international data protection requirements
\- Contact us if you have specific questions about your local privacy rights
\---
13\. CONTACT INFORMATION AND EXERCISING YOUR RIGHTS
Data Protection Enquiries
Email: legal@tapinto.me
Subject Line: "Privacy/Data Protection Enquiry"
Address: Suite 7 & 8 Silverbirch House, Mylord Crescent, Camperdown Industrial Estate, Newcastle upon Tyne, NE12 5UJ
How to Exercise Your Rights
To exercise any of your data protection rights:
1\. Contact us using the details above
2\. Clearly state which right you wish to exercise
3\. Provide sufficient information to verify your identity
4\. We will respond within one month (or sooner where possible)
Data Protection Officer
For specific data protection concerns, contact our Data Protection Officer at the above address.
Complaints
You have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data protection rights have been violated.
ICO Website: ico.org.uk
ICO Helpline: 0303 123 1113
ICO Address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
\---
Tapintome Ltd | Company No. 14881481 | VAT: GB440751903
Registered Office: Suite 7 & 8 Silverbirch House, Mylord Crescent, Camperdown Industrial Estate, Newcastle upon Tyne, NE12 5UJ
\---
© 2025 Tapintome Ltd. All rights reserved.
This Privacy Policy is effective as of the date stated above and supersedes all previous versions.