Privacy policy

Who is responsible

REGULUS FRAMEWORK LTD, 124-128 City Road, London, EC1V 2NX, is the controller of your Tillloop seller account information. Contact support@tillloop.com about your information or your rights. This notice covers account creation, sign in, security, email confirmation, password recovery and account deletion.

Registered in England and Wales. Company No. 16998528. Registered office: 124-128 City Road, London, EC1V 2NX.

Information we use and why

You give us your name, email and password when you create an account. We store a password hash rather than a readable password. We use account identifiers, sessions, confirmation and reset records to identify you and protect access. Security and request records may include request times, network addresses, device information and the outcome of an account action.

We use the information needed to create and operate your account to perform our agreement with you. Without it, we cannot provide a working account. We use proportionate security and abuse prevention records for our legitimate interests in protecting sellers and the service. We retain information required by law to meet the applicable legal obligation.

Account emails confirm your address or help you recover access. They are not marketing consent. We do not sell your account information or use these account details for automated decisions producing legal or similarly significant effects.

When you create a shop, we save its name against your seller account. When you agree to set up payments, we record the agreement and its wording version, share your confirmed email and shop name with Stripe, and save Stripe account references, setup status and fee collection records. Stripe collects identity, business and bank details through its own hosted pages. We use the records needed to provide payments, collect the agreed costs, resolve disputes and meet legal obligations.

Providers and where information is processed

Our providers process information needed to run your account: Neon for the database, Google Cloud for hosting, and AWS for account emails and background work. We may also disclose necessary information to advisers or authorities where the law requires it or to establish or defend legal claims.

Contact support@tillloop.com for details of where our providers process your information and the safeguards for any international transfers.

Stripe provides payment account setup, verification, payments and payouts. Stripe explains its own processing of the identity, business and bank details it collects in its Privacy policy at stripe.com/privacy. Necessary account and financial references may remain after your Tillloop login is erased so existing payouts, fees and disputes can be completed.

How long we keep account information

We keep the information needed to operate your account while it remains open. A session lasts at most 30 days. Confirmation links work for 24 hours and password reset links for 1 hour. Expiry makes a link unusable; it does not by itself prove every stored copy has been removed.

After a deletion request we erase unnecessary personal account information without undue delay, aiming to finish within 30 days or one calendar month, whichever comes first. If a specific legal obligation requires more time or information, we explain what remains, why and how long. Deletion progress never means cleanup has already finished.

Once account erasure completes, minimal deletion evidence contains only identifiers, dates and the cleanup outcome. With no financial records, we remove that evidence after 90 days. Backup copies expire within 35 days after removal from live systems. Deleted information in backups is kept beyond ordinary use, and any restored copy must have deletion reapplied before use.

If you use payment or customer features, we provide additional privacy information before collecting those details. Where financial records must be retained, only necessary facts remain with restricted access. The applicable periods depend on the actual record: sole trader tax records for five years after the relevant 31 January filing deadline, company records for six years after the financial year end, standard VAT records generally for six years, and OSS VAT records for ten years after the transaction year end. A specific legal requirement or documented hold may require longer retention. Keeping such records does not preserve a usable seller login.

Your rights

Contact support@tillloop.com to request access, correction, deletion, restriction or a portable copy where those rights apply. We may need to confirm your identity. You can request account deletion in Settings. Where processing relies on consent, you can withdraw it at any time without affecting earlier lawful processing.

You have a right to object to processing based on our legitimate interests. Tell us which processing you object to and why. You can object to direct marketing at any time.

You can complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint. You can contact us first, but you do not have to do so. We will tell you about material changes to this notice before using your information for a new purpose.

If you asked a shop for a receipt

When you pay a shop that uses Tillloop, you can choose to type your email for a digital receipt. We save your email, the purchases you made at that shop and, if you ticked the offers box, when you agreed and the words you saw. Each shop only sees its own customers.

Your email is used to send the receipt you asked for. A receipt never counts as agreeing to offers. Offers are sent only if you ticked the box, and every email with offers has a Stop offers link that works straight away.

We keep your email and purchase history while the shop uses Tillloop. If the shop closes its account, we erase its customers' emails and offers history. Sales records the shop must keep for tax stay without your email.

To stop offers, use the Stop offers link in any receipt. To ask for a copy of your information or for it to be deleted, contact support@tillloop.com.