Privacy Policy

1. Who We Are

TapQard is a trading name operated by Allan Fenton, based in Dundee, United Kingdom. We provide bespoke one-page websites, QR code business cards, and related digital services for small businesses.

Data controller: Allan Fenton t/a TapQard
Contact: admin@tapqard.co.uk
Website: tapqard.co.uk

2. What Data We Collect

2.1 Client Data (Business Owners)

When you sign up for a TapQard service, we collect:

• Full name and business name
• Email address and phone number
• Business address
• Payment information (processed securely by Stripe — we do not store card details)
• Business content you provide: logos, photos, bio text, links, booking platform details
• Stripe account details (where payment integration is requested)

2.2 Website Visitor Data

When visitors scan a TapQard QR code or visit a TapQard-hosted site, basic analytics may be collected including QR code scan counts and page visit data (anonymous, via Cloudflare analytics). We do not use advertising trackers or sell visitor data.

2.3 Intake Form Data

When you complete our onboarding form (hosted on Tally.so), the information you submit is stored by Tally and forwarded to us via email.

3. How We Use Your Data

We use your personal data to:

• Deliver the services you have paid for
• Communicate with you about your site, updates, and subscription
• Process payments and manage your subscription via Stripe
• Send you service-related emails (welcome, update confirmations, payment notices)
• Comply with our legal obligations

We do not use your data for marketing purposes without your explicit consent.

4. Legal Basis for Processing

Under UK GDPR, we process your data on the following lawful bases:

• Contract performance — processing necessary to deliver the service you have paid for
• Legitimate interests — maintaining records, preventing fraud, managing our business
• Legal obligation — where required by law

5. How Long We Keep Your Data

• Active client data: retained for the duration of your subscription plus 12 months
• Financial records (Stripe): retained for 7 years in line with HMRC requirements
• Intake form submissions: retained for the duration of your subscription plus 6 months
• Enquiries that did not result in a subscription: deleted after 6 months

6. Who We Share Your Data With

We use the following third-party services to operate TapQard:

• Stripe (stripe.com) — payment processing
• Cloudflare (cloudflare.com) — website hosting and DNS
• Tally.so — intake forms
• Google (Gmail) — email communications
• Anthropic / Cowork — internal business automation tools

We do not sell your data to any third party.

7. Your Rights

Under UK GDPR you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data (subject to legal retention requirements)
• Object to processing or request restriction of processing
• Data portability — receive your data in a structured format
• Withdraw consent at any time (where processing is based on consent)

To exercise any of these rights, contact us at admin@tapqard.co.uk. We will respond within 30 days.

8. Cookies

The TapQard website uses only essential cookies required for the site to function. We do not use advertising or tracking cookies.

Client websites built by TapQard may include third-party services such as booking platforms, Instagram feeds, or Stripe payment widgets. These services may set their own cookies. Where required, a cookie notice is included in the relevant site footer.

9. Data Security

We take reasonable technical and organisational measures to protect your data, including two-factor authentication on all accounts holding client data, password-protected access to admin systems, and encrypted connections (HTTPS) on all TapQard-hosted sites.

In the event of a data breach that poses a risk to your rights and freedoms, we will notify the ICO within 72 hours and affected individuals without undue delay.

10. Complaints

If you have concerns about how we handle your data, please contact us first at admin@tapqard.co.uk.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO): ico.org.uk | Helpline: 0303 123 1113

11. Changes to This Policy

We may update this Privacy Policy from time to time. The current version will always be available at tapqard.co.uk/privacy. We will notify active clients of material changes by email.