Legal
Privacy & cookies policy
Who we are
tapbanc is a trading name of [Company name] Ltd, registered in England & Wales (Company No. [pending]), registered office [address]. We are the data controller for the personal data described here, and we are registered with the Information Commissioner's Office (registration number [pending]). Contact: hello@tapbanc.com.
What we collect, and why
- Demo and interest forms, and demo bookings — name, organisation, contact details, current payment provider and approximate takings. Used to respond to your enquiry and arrange your demo. Lawful basis: taking steps at your request before entering a contract.
- Client records — organisation and contact details, terminal details, and transaction records needed to run your payment service and, where enabled, prepare Gift Aid claims. Lawful basis: performance of our contract with you, and legal obligation for financial and HMRC records.
- Gift Aid declarations — where a donor makes a declaration on a tapbanc terminal, we collect the donor's name, home address details and declaration on behalf of the charity, which is the data controller for that data. We act as its processor and share it only with the charity and HMRC.
- Payment data — card payments are processed by Stripe Payments UK Ltd; Pay by Bank payments are initiated by FCA-authorised open banking providers. We never see or store full card numbers or your banking credentials.
- Emails — if you email us, we keep the correspondence for as long as it stays relevant.
Cookies and similar storage
This website sets no marketing or analytics cookies. We use one item of local storage to remember you dismissed our privacy notice, and one strictly-necessary session cookie on the staff portal for staff sign-in. That's all.
Who we share data with
Service providers who process data for us: Cloudflare (website hosting, DNS and email routing), Resend (transactional email), Stripe (payment processing), and HMRC (Gift Aid claims, on a charity's behalf). We do not sell personal data and we do not run advertising trackers.
Transfers outside the UK
Some of our providers process data outside the UK, including in the United States (Cloudflare, Resend and Stripe all operate global infrastructure). Where data leaves the UK we rely on UK adequacy regulations where they apply, and otherwise on the International Data Transfer Addendum to the EU Standard Contractual Clauses, together with the provider's own technical safeguards. You can ask us for details of the safeguard applying to any specific transfer.
Retention
Enquiries: up to 24 months after our last contact. Client and transaction records: 6 years after the tax year they relate to, as UK financial and Gift Aid rules require. Gift Aid declarations: as HMRC requires the charity to keep them.
Your rights
Under UK GDPR you can ask for access to, correction of, or deletion of your personal data, object to or restrict our processing, and ask for portability. Email hello@tapbanc.com and we'll respond within one month. If you're unhappy with our answer you can complain to the Information Commissioner's Office at ico.org.uk.
Changes
If this policy changes materially, the date above changes with it and significant changes are flagged on this page.