Privacy Policy

Last updated: 21 August 2025

This privacy notice explains how Black Bubble Solutions Ltd (registered in England, company no. 09553653) (“we”, “us”, “our”) collects, uses, shares and protects your personal information when you use our website and app (together, the “Services”).

Website: https://www.tipd.co
Mobile application: Tipd
Contact: support@tipd.co

If you do not agree with this notice, please do not use the Services.

1) What information we collect

a) Information you provide to us

Depending on how you interact with us, you may provide:

Contact details (name, email address, phone number, mailing/billing address)
Account details (username, password, contact preferences)
Identity and verification details (government-issued ID, proof of address, nationality, gender, job title/industry)
Payment details (debit/credit card number, billing address) — stored and processed by Ryft Pay (see “Payment data” below)
Bank details for pay-outs (account name, sort code, account number)

All information you provide must be true, complete and accurate, and you should notify us of any changes.

b) Sensitive information (where permitted by law or with your consent)

Financial data and credit-worthiness data
Government identifiers (e.g., passport/driving licence numbers)
Personally identifiable information used for identity verification

c) Payment data

If you make a purchase or receive a pay-out, the data needed to process it (e.g., card number and security code) is handled by Ryft Pay.
Ryft Pay privacy notice: https://ryftpay.com/privacy-policy
Identity verification, payment processing and pay-outs are managed by Ryft Pay using official APIs/SDKs. Tipd provides required information to Ryft as needed.

d) Application data (if you use the app and grant permission)

Geolocation (continuous or while using the app)
Mobile device access (e.g., NFC and other device features you permit)
Mobile device data (device ID, model/manufacturer, OS/version, carrier/ISP, IP address, app and device identifiers, features used)

You can change permissions in your device settings. Some features may not work without certain permissions.

e) Information collected automatically

When you visit or use the Services we automatically collect technical data for security, operations, analytics and reporting, such as:

Log & usage data (IP address, browser type, timestamps, pages/files viewed, searches, actions, error/crash data)
Device data (device/application IDs, hardware model, OS, ISP/carrier, system configuration)
Location data (precise or approximate, depending on your settings). You can disable location sharing in your device or browser settings, but some features may be limited.

f) Cookies and similar technologies

We use cookies, pixels and similar tools. See our Cookie Policy for details on the categories we use and how to control them.

2) How we use your information

We process personal information to:

Create and manage accounts; authenticate users
Deliver the Services and requested features
Provide customer support and respond to enquiries
Send important service or policy updates
Fulfil and manage orders, payments, returns and exchanges
Enable user-to-user communication where applicable
Request feedback and improve the Services
Send marketing communications (consistent with your preferences; you can opt out at any time)
Deliver personalised content/advertising (see Cookie Policy)
Protect the Services (fraud monitoring and prevention; security)
Analyse usage trends and measure campaign effectiveness
Comply with AML/KYC obligations required by our payment facilitator (Ryft Pay)
Protect vital interests (e.g., to prevent harm)
Comply with legal obligations and enforce our rights

3) Legal bases we rely on (GDPR/UK GDPR)

We process your information where one or more of the following applies:

Consent (you can withdraw at any time — see “Your rights”)
Performance of a contract (providing the Services you request)
Legitimate interests (e.g., improving Services, marketing to existing users, security/fraud prevention) balanced against your rights
Legal obligations (e.g., AML/KYC, tax, accounting, law-enforcement requests)
Vital interests (to prevent harm)

4) When we share your information

We may share personal information with trusted third parties who perform services on our behalf under contracts that protect your data, including:

Payment processors (e.g., Ryft Pay)
Cloud hosting and storage
Data analytics
Sales, marketing and retargeting tools
Finance & accounting tools
Service desk and support tools
Testing and operational tools
Social networks (when you use sharing features)

We may also share information in connection with:

Business transfers (e.g., merger, acquisition, financing)
Affiliates (subject to this notice)
Other users when you post or interact in public areas of the Services

We do not sell your personal information.

5) Cookies and tracking

We use cookies, pixels and similar technologies to operate the site, remember preferences, measure performance and deliver relevant content/ads. You can manage preferences via our cookie banner/manager and your browser settings. See our Cookie Policy for details.

6) International data transfers

Our servers are located in the United States, and we may process information in the United Kingdom, United States, and other countries. Where required, we use appropriate safeguards (including European Commission Standard Contractual Clauses) for transfers from the EEA/UK/Switzerland. Details can be provided on request.

7) Data retention

We keep personal information only as long as necessary for the purposes in this notice (including legal, tax and accounting requirements). When no longer needed, we will delete or anonymise it. If deletion is not immediately possible (e.g., backups), we will securely store and isolate it until deletion.

8) Security

We apply appropriate technical and organisational measures to protect personal information. However, no method of transmission or storage is 100% secure. Use the Services within a secure environment and contact us if you have any security concerns.

9) Children

We do not knowingly collect data from or market to children under 18. If we learn we have collected such data, we will deactivate the account and delete the data. If you believe a minor has provided data, contact support@tipd.co.

10) Your rights

Depending on your location (e.g., EEA, UK, Switzerland), you may have rights to:

Access and obtain a copy of your personal information
Rectify inaccurate or incomplete data
Erase your data (in certain circumstances)
Restrict or object to processing
Data portability (where applicable)
Opt out of marketing at any time

Withdraw consent: Where we rely on consent, you can withdraw it at any time by contacting us (see “Contact us”) or via available preference tools. This will not affect processing already carried out.

Marketing opt-out: Use the unsubscribe link in our emails or contact us. We may still send essential service messages.

Account:

Update your details in your account settings; or
Contact us using the details below.
On request to delete your account, we will deactivate/delete it from active systems, retaining only what is necessary for legal, security or operational reasons.

You can also submit privacy requests at: https://www.tipd.co/contact.

You may lodge a complaint with your Member State DPA, the UK ICO, or (in Switzerland) the FDPIC.

11) Do-Not-Track

There is no uniform DNT standard. We do not currently respond to DNT signals. If a standard is adopted, we will follow it and update this notice.

12) Changes to this notice

We may update this notice from time to time. The “Last updated” date shows the latest version. For material changes, we may provide additional notice (e.g., on the site or by email).

13) Contact us

Data Protection Officer (DPO): Christopher Anderson
Email: support@tipd.co
Post:
Black Bubble Solutions Ltd (Registered in England 09553653)
3rd Floor, 86–90 Paul Street
London
United Kingdom
EC2A 4NE

14) Review, update or delete your data

Submit a request here: https://www.tipd.co/contact.

‍