Privacy Policy

1. Who we are and what this policy covers

ECB International Technologies Limited, trading as TapReceipt, is based in Dublin, Ireland.

For privacy questions or requests, contact hello@tap-receipt.com.

2. Our role

For transaction and receipt information supplied by a retailer, the retailer generally decides why that information is processed and acts as controller. TapReceipt generally acts as processor and handles that information to provide the receipt service on the retailer’s instructions.

TapReceipt acts as controller for information used for its own website, enquiries, merchant accounts, billing, security, legal compliance and normal business administration.

3. Information we process

Website, enquiry and merchant information. This may include business and contact names, email address, optional telephone number, POS provider, locations, till-roll usage, preferred plan and billing details, enquiry source, messages, service setup information, support history, payment status and related business records.

Transaction and receipt information. TapReceipt processes the information needed to generate, deliver, route, display, update and verify digital receipts. This may include retailer and store identity, location or till information, transaction date and time, receipt or order reference, items purchased, quantities, prices, discounts, taxes or VAT, transaction totals, payment-method category, and refund or update information.

Receipt text is supplied by the retailer and could contain other information entered by that retailer. Direct customer identity and contact details are not intended routine inputs to TapReceipt’s receipt service.

Receipt access and merchant reporting. We may process receipt access and service information to operate the service and provide each retailer with its own historical usage reporting. Reporting may include receipts made available, receipt accesses or taps, Apple Wallet and Google Wallet actions, receipt or sales totals where applicable, and other service-performance measures. Historical reporting may retain merchant, store, location and till identifiers. TapReceipt does not use customer IP addresses or browser information to provide merchant usage reporting.

Operational and security information. We may process reasonable operational, diagnostic and security information needed to operate, protect and support TapReceipt. Website hosting and security providers may process information such as IP address, browser or device type, pages visited and referral source for those purposes.

Payments. The Get Started form does not collect card details. If a merchant proceeds, we send a secure payment link. The payment provider processes card information. TapReceipt may retain payment status, payment references and records needed to administer the merchant account, but does not directly store full payment-card details.

4. Receipt access is anonymous by default

A customer can access a TapReceipt receipt without creating an account or routinely providing a name, email address or telephone number. TapReceipt does not create cross-visit customer purchasing profiles, use receipt information for customer advertising, sell receipt information, use it for unrelated marketing or make automated decisions about customers that have legal or similarly significant effects.

5. Why we use information

We use information to:

• Provide, maintain, support and secure the TapReceipt service
• Generate, deliver, display, update and verify digital receipts
• Provide merchants with service and usage reporting
• Respond to enquiries and assess service suitability
• Set up and administer merchant accounts, subscriptions, payments, support and renewals
• Prevent misuse and investigate security or service issues
• Comply with legal obligations and keep appropriate business records

Where TapReceipt acts as controller, the legal basis may be steps requested before a contract, performance of a contract, our legitimate interests in operating and securing the service and responding to enquiries, consent where required, or compliance with a legal obligation. Where TapReceipt acts as processor, the retailer is responsible for identifying the legal basis for its processing.

6. Retention

Full digital receipts. Full itemised receipt content is retained in TapReceipt’s active systems for 30 days from the original transaction. It is then deleted from active storage.

Receipt verification. Limited information needed to verify that a receipt is genuine may be retained for a longer period agreed with the retailer. That period may reflect warranty, proof-of-purchase or after-sales requirements. Only the limited information required for verification is retained for that purpose.

Merchant reporting. Historical aggregate service and usage reporting may be retained for the merchant account and legitimate service records. It may include merchant, store, location and till identifiers, but is not used to build customer profiles.

Operational and business records. We retain operational, security and diagnostic information only for as long as reasonably required to operate, secure and support the service. Enquiry records are normally kept for up to 12 months unless discussions remain active or a longer period is needed for service, legal or business records. Merchant account, contract, payment and support records may be retained during the relationship and afterwards where required by law or legitimate business-record needs.

Information deleted from active systems may remain temporarily in routine encrypted backup or recovery systems and will age out according to the relevant provider’s normal retention cycle.

7. Sharing and service providers

We use trusted service providers where needed to provide and support the website, TapReceipt service, communications, secure payments and optional wallet functionality. They may process information only for the permitted service purpose and must protect it appropriately.

We may also disclose information where required by law, to protect rights or security, or in connection with a lawful corporate transaction. We do not sell personal data or receipt information.

8. International transfers

Some providers may process information outside the European Economic Area. Where personal data is transferred internationally, we use a lawful transfer mechanism and appropriate safeguards, such as an adequacy decision or approved standard contractual clauses, as applicable.

9. Security

TapReceipt uses appropriate technical and organisational security measures, including encryption in transit and at rest, access controls and secure infrastructure. We limit access to people and providers who need it for authorised purposes. No online service can be guaranteed completely secure.

10. Apple Wallet and Google Wallet

Saving a receipt to Apple Wallet or Google Wallet is optional. If a customer chooses one of those services, the relevant provider will handle information under its own terms and privacy policy. A customer can still view a browser receipt without saving it to a wallet.

11. Rights and requests

Depending on the circumstances, a person may have rights to access, correct, erase or restrict personal data, object to certain processing, withdraw consent where processing relies on consent, or receive eligible data in a portable form.

For receipt information controlled by a retailer, the customer should normally contact that retailer first. If a customer contacts TapReceipt, we will respond appropriately and assist the retailer where required.

To make a request, contact hello@tap-receipt.com. We may need reasonable information to confirm identity and locate the relevant record. A person may also raise a concern with the Data Protection Commission in Ireland.

12. Cookies, changes and contact

Our Cookie Policy explains how the website uses cookies and similar technologies.

We may update this policy and will publish the current version and updated date at this URL.

Privacy contact: hello@tap-receipt.com.