Privacy Policy

Last updated:

Welcome to Tap Review Cards. We are committed to protecting your personal data and your right to privacy. This policy explains how we collect, use, store, and protect your information when you visit tapreviewcards.co.uk or place an order with us. It complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Who We Are

Tap Review Cards is a UK-based business selling NFC and QR tap-to-review cards to help businesses collect online customer reviews. We are the data controller for all personal data collected through this website.

Website: tapreviewcards.co.uk
Email: info@tapreviewcards.co.uk
Country: United Kingdom

What Data We Collect

When you use our website or place an order, we may collect the following:

  • Your name, email address, and phone number
  • Your delivery and billing address
  • Your order details, including any review page URLs you provide
  • Payment details (processed securely — we never store card numbers)
  • Technical data such as your IP address, browser type, and pages visited
  • Marketing preferences if you opt in to our newsletter

How We Use Your Data

We use your information to:

  • Process and fulfil your order, including programming your review card
  • Send you order confirmations and delivery updates
  • Respond to your enquiries and provide customer support
  • Send marketing emails, but only if you've opted in
  • Improve our website and understand how it's being used
  • Comply with our legal and tax obligations

We process your data based on contract performance, legitimate interest, your consent, and legal obligation — as required under UK GDPR.

Who We Share Your Data With

We do not sell your data. We only share it with trusted third parties where necessary, such as:

  • Payment processors (e.g. Stripe or PayPal) to handle transactions securely
  • Delivery couriers (e.g. Royal Mail) to ship your order
  • Email platforms to send you transactional and marketing emails
  • Analytics tools (e.g. Google Analytics) to understand site usage

All third parties are required to keep your data secure and use it only for the stated purpose.

Cookies

We use cookies to make our website work properly and to understand how visitors use it. Essential cookies are always active. Analytics and marketing cookies are only used with your consent, which you can manage via our cookie banner or your browser settings.

How Long We Keep Your Data

We keep order data for 7 years to meet our legal and tax obligations. Account data is kept while your account is active and for 2 years afterwards. Marketing data is kept until you unsubscribe. Enquiry data is kept for 2 years.

Your Rights

Under UK GDPR, you have the right to:

  • Access the personal data we hold about you
  • Correct any inaccurate or incomplete information
  • Request deletion of your data ("right to be forgotten")
  • Object to or restrict how we process your data
  • Receive your data in a portable format
  • Withdraw marketing consent at any time

To exercise any of these rights, email us at info@tapreviewcards.co.uk. We'll respond within 30 days.

You also have the right to complain to the Information Commissioner's Office (ICO) if you're unhappy with how we've handled your data.

Data Security

We take appropriate steps to protect your data, including SSL encryption across our website, secure servers, and limiting access to personal data to staff who need it. Payments are handled by PCI-DSS compliant providers — we never see or store your full card details.

Changes to This Policy

We may update this policy from time to time. When we do, we'll update the date at the top of this page. For significant changes, we'll notify you by email if we hold your contact details.

Contact Us

For any privacy-related questions, requests, or complaints, please get in touch:

Website: tapreviewcards.co.uk

Email: info@tapreviewcards.co.uk

Country: United Kingdom

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's independent data protection authority.