Types of data we collect and how we process it
Merchant Data
We collect the following Merchant data which is entered by the merchant into our Tucr app: Business address, Email, address, Contact number, Terms & Conditions of contract, Tax number, Banks Account Details, Debit/Credit Card, Record of payment received, IP address.
Merchant data is collected for: account creation. To enabling the Merchant/Vendor to enter into a commercial contract with their clients. To enables Merchant/Vendor to create merchant accounts via Stripe Payments Europe, Ltd (SPEL). To enables Merchant/Vendor to access their merchant accounts via Stripe Payments Europe, Ltd (SPEL). Captured for marketing purposes.
We store merchant data on a secure server as long as the merchant is subscribed, as long as the contract between the user is live. If the merchant’s account is inactive and the merchant has not live contract we will store their data for a period of 7 years.
Merchant data is also collected by the following 3rd party services: Google Analytics, Hotjar, Hubspot, Mailchimp, Twak.to, Intercom, and Mailgun. Please refer to Third Party Service section of this privacy policy to understand what types of data we share with these companies.
User Data
We collect the following personal data from our users: Name, Email address, Phone number, Debit/Credit Card details, Purchase history, Record of payments made to merchants, Description of items/services purchased from merchants, IP address.
User data is entered into Tucr App by the merchant for processing of their contract of sale with the user. A user may also visit Tucr App and create an account but doing so they provide consent to Tucr Limited to process their data.
User data is collected as necessary for performance of a commercial contract between the merchant and their client, the user. Processing is necessary for payment of a contract between the merchant and their client, the user. Data is also processed to create a user account and user data is collected for marketing purposes.
We will store this data on a secure server as long as the contract between the user and merchant is live or for a period of 7 years after the contract has been completed.
User data is also collected by the following 3rd party services: Google Analytics, Hotjar, Mailchimp, Twak.to, Intercom, and Mailgun. Please refer to Third Party Service section of this privacy policy to understand what types of data we share with these companies.
Visitors & Cookies
We use cookies to improve the experience of visitors, users and merchants and to remember their preferences. What we set, why, and how to refuse or remove cookies is covered in our Cookie Policy.
Third party services we use and data we share with them
Stripe
We partner with Stripe to deliver the highest level of PCI compliance possible while our users and merchants are processing transactions through our applications (Read more about our Stripe Integration here). Merchants can create a Stripe merchant account via an embedded Stripe login page. When doing so the merchant enters contact details as part of your business relationship with Stripe. Details such as name, postal address, telephone number and email address. During this process Stripe may also collect financial and personal information for KYC and AML purposes. Such as date of birth and government identifiers associated with the organisation and the point of contact. (such as your social security number, tax number, or Employer Identification Number).
If the merchant already has a Stripe account they can connect their account to our apps by entering their Stripe login credentials via the same page. Users and Merchants may also enter personally identifiable details such banking details into Stripe through our Stripe integration. Further non identifiable details such as card info may be provided to Stripe through an integrated payment gateway. This info is Tokenized and not stored on our website and apps as personally identifiable information. For further information about Stripe privacy please visit Stripe Privacy Policy.
Google Analytics
When someone visits Tucr.io and our applications we use a third party service, Google Analytics, to collect standard internet log information and details of visitor behaviour patterns. We do this to find out things such as the number of visitors to the various parts of the site. This information is only processed in a way which does not identify anyone. We do not make, and do not allow Google to make, any attempt to find out the identities of those visiting our website. Google’s Privacy Policy.
Mailchimp
As part of the registration process for our e-newsletter, we collect your personal email address. We use that information for a couple of reasons: to tell you about stuff you’ve asked us to tell you about; to contact you if we need to obtain or provide additional information; to check our records are right and to check every now and then that you’re happy and satisfied. We don't rent or trade email lists with other organisations and businesses.
We use a third-party provider, MailChimp, to deliver our newsletter. We gather statistics around email opening and clicks using industry standard technologies to help us monitor and improve our e-newsletter. For more information, please see MailChimp’s Privacy Policy. You can unsubscribe to general mailings at any time of the day or night by clicking the unsubscribe link at the bottom of any of our emails or by emailing our data protection officer at dpo@tucr.io
Mailgun
As part of the registration process for our applications, we collect your email address. We use that information for a couple of reasons: to confirm your account and give you account login access; to ensure you receive records of important updates to contracts you have with supplying merchants (updates such as; payments made, edited/cancelled contract); tell you about about updates to our products and policies; to contact you if we need to obtain or provide additional information; to check our records are right and to check every now and then that you’re happy and satisfied. We don't rent or trade email lists with other organisations and businesses.
We use a third-party provider, MailGun, to deliver our contract updates emails. We gather statistics around email opening and clicks using industry standard technologies to help us monitor and improve our service. For more information, please see MailGun Privacy Policy. You can unsubscribe from important contract emails at any time of the day or night by clicking the unsubscribe link at the bottom of any of our emails or by emailing our data protection officer at dpo@tucr.io
Nexmo
We store a record of a personal contact number for each user as this is necessary to ensure we are following industry standard security recommendations for authentication and this step put in place to protect personal data associated with each contract. This enables us to issue a 2 factor authentication pin number by SMS. Users are required to use their security pin when authenticating access to their contract which has been issued by the supplying merchant through Tucr App. We use a third-party provider, Nexmo, to deliver our access PIN number SMS. For more information, please see Nexmo Privacy Policy. You can unsubscribe to receiving PIN number by SMS by emailing our data protection officer at dpo@tucr.io
Digital Ocean
When you enter into a commercial contract with a merchant who is a client of Tucr Limited, they may enter your name, email and contact number into app.tucr.io to securely store it on our private database, which is hosted on a private server supplied by Digital Ocean. You may, of course, enter into a contract without supplying the aforementioned personal data and it is the merchant's responsibility as part of their own privacy obligations to inform you that they are entering your personal data into app.tucr.io for the purposes of keeping account and also issues you with your digital contract for future processing and your own personal record. Please be assured that we do not share your personal details with any other company without your consent. Digital Ocean Privacy Policy.
Hotjar
Hotjar is a solution that we use infrequently to understand how our site and apps are being. Hotjar is NOT designed to show how a specific and identifiable person is using the our site or apps.
We do not need to know who a specific individual is and what they are doing. To get actionable insights, it is enough to look at how people use our website or apps as a whole and we primarily only use Hotjar when post launch of a new product/feature or trouble shooting an issue. At all other times tracking is turned off by default.
Hotjar respects the Do Not Track (DNT) header in browsers and there is an ‘opt-out’ page. This means that anyone can visit the Hotjar site and click on a link in order to no longer be tracked anonymously not just on Tucr Limited site and apps but on any site/app Hotjar support.
Hotjar also chooses to never show full or partial user IP addresses of site visitors anywhere within the Hotjar interface. Additionally, they anonymize all IP addresses stored in our database by removing the last octet and do not record keystrokes.
Finally hotjar also anonymize data in recordings by tagging HTML and fields within pages. In such cases, the data is suppressed client-side (the visitor’s browser) which means it never reaches Hotjar servers. Hotjar Privacy Policy.
Wordpress
Our website is built on WordPress which is a content management system that enables website owners to install 3rd party plugins that are core to management and delivery of business operations. From time to time merchants, users and visitors may choose to interact with us through a a third party plugin in a way that require us to gather personally-identifying information. An example of this is Intercom chat widget plugin. Other plugins may track not personally identifiable data while you are visiting our website. For further information of Wordpress’s privacy please visit Wordpress Privacy Policy.
Intercom
We use intercom chat widget to manage direct queries on our website. Any data entered into the chat widget is covered by this privacy policy. For further information of Intercom privacy please visit Intercom Privacy Policy.
Tawk.to
We use Tawk chat widget to manage direct queries on our applications. Any data entered into the chat widget is covered by this privacy policy. For further information of Tawk.to privacy please visit Tawk.to Privacy Policy.
Hubspot
We use Hubspot to organise our sales and marketing activities (eg, queries, prospects,leads,deals and customers). This info is stored and managed on hubspot service providers’ servers. This information is used to contact visitors about their interest in our services. For further info on Hubsports privacy please visit Hubspot Privacy Policy.
