This notice is for firms that use Tipslip and for the people in those firms who log in to the office app. Drivers have their own notice: legal/privacy/drivers.md. Visitors to our website are covered by legal/privacy/marketing.md.
Who we are
Tipslip is a product of Skrivon Ltd, a company registered in England and Wales (company number [TBC], registered office [TBC]). ICO registration number: [TBC].
Contact for anything in this notice: [privacy contact TBC]. For account help: support@tipslip.co.uk.
Our two roles, in one paragraph
We hold two kinds of data about your firm, and our role differs between them. For your account (who you are, who logs in, billing, support and keeping the service secure), we decide what we collect and why, so we are the controller and this notice covers it in full. For your waste records and your drivers' data (customers, jobs, waste lines, locations, photos, signatures, transfer notes and Defra submissions), you are the controller. We are your processor: we hold and handle that data only on your instructions, under our data processing agreement (legal/dpa.md). We do not use it for our own purposes. You decide what to record, who to record it about, and what happens to it. That means you, not we, must tell your drivers and customers about it.
What we collect about you and your staff (we are controller)
| What | Where it comes from |
|---|---|
| Firm details: business name, contact email, phone, address, firm code | You, at sign-up and in settings |
| Office users: name, email address, role (owner, admin or office) | The owner or admin who invites them |
| Login details: password (held by our login provider, Supabase Auth, not readable by us), sign-in sessions | The user |
| Security and technical logs: records of requests to our servers, which can include an IP address and time, kept by our hosting providers | Our systems |
| Plan, trial dates, subscription state, invoices, Stripe customer id | You and Stripe |
| Billing contact and payment card | You, entered directly into Stripe. Card details never reach our systems |
| Support conversations and attachments | You, by email to support@tipslip.co.uk |
| Service emails you receive from us (for example billing reminders, set-up nudges) and whether they were sent | Our systems |
| Status-page subscription email, if you subscribe | You |
Why we use it, and our lawful basis
| Purpose | Lawful basis |
|---|---|
| Setting up and running your account, giving your staff access | Contract (Art 6(1)(b)) |
| Billing and collecting payment | Contract (Art 6(1)(b)) |
| Keeping tax and accounting records | Legal obligation (Art 6(1)(c)) |
| Securing the service: logins, preventing unauthorised access and abuse across the platform | Legitimate interests (Art 6(1)(f)): protecting statutory records outweighs the small intrusion of short-lived logs |
| Answering support requests and keeping a history of past issues | Contract; legitimate interests |
| Service emails about your account (set-up help, billing, incidents) | Contract; legitimate interests |
| Running our business: counting firms, sites, drivers and receipts at firm level to see how Tipslip is used | Legitimate interests. Firm-level figures only; never driver-level location or photos |
| Keeping a minimal record after you leave (legal name, contract dates, terms version, and a ledger of what we sent to Defra without its contents) to deal with any claim | Legitimate interests. [HOLD: not built, see end] |
If you give us your staff's details, please make sure they know about this notice.
Your waste records and driver data (we are processor)
When your staff and drivers use Tipslip, we store and handle for you: customer and site contact details, job addresses, waste lines, one location fix per job save, photos, signatures and printed names, transfer notes and receipts, and submissions to Defra.
We only use this to provide Tipslip to you, as set out in the DPA. We do not:
- use driver location, photos or signatures for any purpose of our own, including analytics, benchmarking or training AI models;
- combine your drivers' data with another firm's;
- sell it or share it with anyone except the recipients you instruct and our listed sub-processors;
- track drivers continuously or in the background.
Defra. Where you receive waste at your own permitted site, we send the receipt to Defra's waste tracking service on your behalf. Defra is a separate controller once it receives it. We send only the fields the Defra schema asks for. We do not send GPS, photos or signatures. You should name Defra as a recipient in your own notices.
Your customers receive transfer notes by email when you choose to send them. The note shows the driver's printed name and signature; it does not show GPS or photos, and no photos are sent to customers by any other route.
Who else receives data (recipients and sub-processors)
The companies we use to run Tipslip are listed, with what they receive and where, in legal/sub-processors.md. In short: Supabase (database, file storage, office logins), Vercel (hosting), Inngest (background jobs), Resend (email), Cloudflare (status page) and Plausible (website statistics). Stripe handles payments and acts as an independent controller for its own payment, fraud and legal-compliance purposes. Google hosts our support mailbox.
We will tell account owners at least 30 days before adding a new sub-processor.
Other recipients: our accountant (billing records only); the police, regulators or courts where the law requires it.
Where your data is kept
- Database: Supabase, London (
eu-west-2). Confirmed. - File storage (photos, signatures, PDFs): Supabase, same project. Region to confirm.
- Office app, API and background workers: Vercel, London (
lhr1). Confirmed. - Driver app hosting: Vercel. Region to confirm.
- Inngest, Resend, Stripe, Cloudflare (status page), Plausible, Google: to confirm. Some of these are US companies. Where data leaves the UK we will name the safeguard (UK adequacy regulations, the UK-US Data Bridge, or the ICO's international data transfer agreement or addendum) here and in
legal/sub-processors.md.
How long we keep it
Full periods and reasons are in legal/retention-schedule.md. The main ones:
| Data | Kept for |
|---|---|
| Office user accounts | While active; deleted 30 days after the user is removed or the account closes |
| Firm contact details | Account life plus 90 days |
| Minimal account record (legal name, contract dates, terms accepted) | 6 years after the account closes |
| Billing records | 6 years (VAT) |
| Support emails | 2 years from the last message |
| Security logs | 30 days |
| Waste records, including driver location, photos and signatures | 3 years from the date of transfer by default, or longer if you instruct (for example if you run a permitted site). This is your decision as controller |
When your account closes
- Export first. You can download your records before closing.
- Statutory records are yours to keep. The law requires you to keep transfer notes for at least 2 years, and hazardous waste records for 3. Closing your Tipslip account does not end that duty. Take your export, or ask us to keep a read-only archive until the period ends.
- Then deletion. We delete your firm's data 90 days after your subscription ends, except the minimal account record, billing records and the Defra ledger described above. Copies in backups expire on a rolling basis.
Your rights
You and your staff have the right to: access your personal data; have it corrected; have it erased; restrict or object to our use of it (including our legitimate interests); receive it in a portable format; and withdraw consent where we rely on it. Some rights have limits, for example we must keep billing records for tax. We will reply within one month. Contact: [privacy contact TBC].
For data we hold as your processor, a driver or customer should ask you. If they contact us, we pass the request to you and help you answer it.
Your drivers: you must tell them
You are responsible for telling your drivers what Tipslip records about them, before they use it. The ICO says employers must tell workers about monitoring in advance, and that consent is not usually the right lawful basis for it. Recording drivers' location is on the ICO's list of processing that needs a data protection impact assessment. To help, we provide:
- a driver privacy notice you can give them (
legal/privacy/drivers.md, and the firm version inlegal/templates/); - a DPIA template, a monitoring policy, a consultation note and lawful basis guidance (
legal/templates/).
These help, but the decisions in them are yours.
Complaints
Please tell us first, and we will try to fix it. You can also complain to the UK data protection regulator, the Information Commissioner's Office (ICO): ico.org.uk/make-a-complaint. From 30 September 2026 its legal name is the Information Commission; it still uses the name ICO.
Changes to this notice
We will post changes here with a new version and date. If a change materially affects you, we will email the account owner before it takes effect.
| Version | Date | Change |
|---|---|---|
| 0.1 | 2026-09-25 | First draft. |