Privacy Policy

Hello, welcome to the Slip Privacy Policy. At Slip, we are committed to keeping your personal information safe and secure, and handling it in accordance with our legal obligations. This Privacy Policy sets out in detail the purposes for which we process your personal information, what rights you have in relation to that information, who we share it with and everything else we think is important for you to be aware of.

Please make sure you check it carefully and if you don’t agree with it, then (although we hate to turn you away) you shouldn’t use our Platform or services. This is because by accessing our Platform or services, you confirm that you accept the way in which we process your personal information. This privacy policy forms part of our Terms, and capitalised words and phrases in it have the same meaning as those in our Terms.

If you have any concerns, please feel free to contact us.

About Slip

We are Slip Technology Limited, a company incorporated and registered in England and Wales with company number13370492. Our registered office is at 120 New Cavendish Street, London W1W 6XX (referred to as Slip, we, our and us). We are the data controller for the purposes of the personal information processed in accordance with this Privacy Policy.

There are some occasions when Slip will be a data processor. This will include when you have signed up with one of our partners to receive a Digital Receipt but have chosen not to create a Slip account, or use our platform. In these circumstances, the data controller will be the company that you have received your Digital Receipt from and we would recommend that you review their privacy policy for information as to how they process your personal data. 

You can contact us regarding this Privacy Policy by web form here.

Contents of this Privacy Policy:

1. About this Privacy Policy
2. The personal information we collect, how we collect it, and why
3. Our legal basis for processing personal information
4. When do we share your personal information?
5. Communications
6. How long do we store your personal information?
7. Security of your personal information
8. Links
9. Age restrictions
10. Your rights and choices
11. Contacting us
12. Cookies
13. General

About this Privacy Policy

This Privacy Policy applies to the personal information we collect about you through our Platform, by telephone, by post, through our social media platforms, from third parties and when you otherwise communicate with us.

We regularly review our Privacy Policy to ensure it is up to date, however it may change from time to time. An up-to-date version will always be available on our Website. This Privacy Policy was last updated on 28 November 2024]. 

It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us, for example a new address or email address.

1. The personal information we collect, how we collect it, and why

Personal information means any information about an individual from which that individual can be identified. The following shows information we process about you, and the purpose for which we process that information. There may be more than one reason for which we collect such information. If you would like further information, please contact us.

Legal basis for collecting and using your personal information

We only ever use your information in line with applicable data protection laws – in particular, the EU General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018 (DPA 2018), together the Data Protection Legislation. In short, this means we only use it where we have a legal basis to do so. Under the Data Protection Legislation, these are the general legal bases for which we process your personal information, as detailed in the rest of this section 1:

• Performance of our contract – processing your personal information is necessary for a contract you have with us, or because we have asked you to take specific steps before entering into that contract.
• Legitimate interests – processing your personal information is necessary for our legitimate interests or those of a third party, provided those interests are not outweighed by your rights and interests (including where processing is required to comply with or enforce a legal obligation, or to exercise or defend our legal rights).
• Legal obligation - processing your personal information is necessary to comply with a legal or regulatory obligation. Where we rely on legal obligation and you do not provide the necessary information, we may be unable to fulfil a right you have or comply with our obligations to you, or we may need to take additional steps, such as informing law enforcement or a public authority or applying for a court order.
• Consent– you have given us consent to process your personal information for a specific purpose that we have told you about.

How and why: personal information that you provide to us.

1. Collected directly from Customers: 

Type of Information: Customer account set up information, including your name, email address, address, telephone number, gender, date of birth, personal preferences, and any other requested information which Customers provide.

Reasons for Using: Your account information enables us to personally and uniquely identify and communicate with you, both within the Platform, and externally in emails, SMS messages and other forms of communication. It also makes you visible and identifiable to us and by Clients. We also require this information for account eligibility purposes and account maintenance purposes.

Legal Basis: (a) To perform our contract with you, (b) Necessary for our legitimate interests (to keep our records updated and manage our relationship with you), and (c) Necessary to comply with a legal obligation.

Type of Information: Customer account set up information, including your name, email address, telephone number, personal preferences, and any other requested information which Customers provide.

Reasons for Using: To send you relevant marketing communications and make personalised suggestions and recommendations to you about goods or services that may be of interest to you based on the information you have provided to us.

Legal Basis: Necessary for our legitimate interests (to carry out direct marketing, develop our products/services and grow our business).

2. Collected directly from Clients: 

Type of Information: Client account and profile set up information, including business name, address, Client ID, contact information and other account details which you provide to us.

Reasons for Using: This information enables us to set you up as a Client on our Platform and communicate with you as envisaged by our Terms. We also require this information for billing, account eligibility purposes and account maintenance purposes.

Legal Basis: (a) To perform our contract with you, (b) Necessary for our legitimate interests (to keep our records updated and manage our relationship with you, and/or to recover debts due to us), and (c) Necessary to comply with a legal obligation.

Type of Information: Client account and profile set up information, including business name, address, Client ID, contact information and other account details which you provide to us.

Reasons for Using: To send you relevant marketing communications and make personalised suggestions and recommendations to you about goods or services that may be of interest to you based on the information you have provided to us.

Legal Basis: Necessary for our legitimate interests (to carry out direct marketing, develop our products/services and grow our business).

Type of Information: Client review and feedback information including your interests, preferences, feedback and survey responses.

Reasons for Using: We enable our Customers to browse Clients (including their Promotional Offers), and we may provide different forms of feedback based on their experiences with them.

Legal Basis: (a) To perform our contract with you, (b) Necessary for our legitimate interests (to keep our records updated and manage our relationship with you), and (c) Necessary for our legitimate interests (to study how customers use our products/services, to develop them and grow our business).

Type of Information: Information provided during Client Checks including ID documents.

Reasons for Using: We may check our Clients to ensure they are suitable for our Platform. We may use third party providers to carry out Checks, who may in turn provide us with any documents (such as ID documents) which you provide to them.

Legal Basis: (a) To perform our contract with you, (b) Necessary for our legitimate interests (for running our business, and to prevent fraud), and (c) Necessary to comply with a legal obligation.

Type of Information: Your preferences for receiving communications and notifications.

Reasons for Using: We store your preferences, so we know exactly how to communicate with you (e.g. for marketing or sending service communications), and in some cases, how not to communicate with you.

Legal Basis: (a) Necessary for our legitimate interests (to keep our records updated and manage our relationship with you), and (c) Necessary to comply with a legal obligation.

3. Personal information we collect automatically:

Type of Information: Account status

Reasons for Using: We store information about your account with us and interactions with our service, including where Customers have an unregistered account, or a full Customer Account.

Legal Basis: (a) To perform our contract with you, and (b) Necessary for our legitimate interests (to keep our records updated and manage our relationship with you, to study how customers use our products/services, to develop them, to grow our business, and to inform our marketing strategy).

Type of Information: User number

Reasons for Using: When a User signs up, we generate this as a mechanism to identify them across our technical systems, and to link that Customer with their product preferences, billing records, service interaction analytics and customer service history. 

Legal Basis: (a) To perform our contract with you, and (b) Necessary for our legitimate interests (to study how customers use our products/services, to develop them, to grow our business and to inform our marketing strategy).

Type of Information: Your interactions with our service

Reasons for Using: When you interact with our Platform, for example when a Customer gets a Digital Receipt, or when a Client publishes a Promotional Offer, we record and track this information for our ongoing operations and to analyse how our Users enjoy our service so that we can continue to develop it.

Legal Basis: (a) To perform our contract with you, and (b) Necessary for our legitimate interests (to study how customers use our products/services, to develop them, to grow our business, to inform our marketing strategy, to define types of customers for our products and services, and to keep our website updated and relevant).

Type of Information: Payment information (e.g. records of transactions)

Reasons for Using: Once applicable, we will record payment and transaction data to keep financial and security records for our business and to comply with our legal obligations to retain financial and transaction information.

Legal Basis: (a) Necessary for our legitimate interests (to recover debts due to us), and (c) Necessary to comply with a legal obligation.

Type of Information: IP address

Reasons for Using: This enables us to uniquely identify you and to distinguish you from other Users. In turn, it enables us to deliver you a more personalised service (e.g. more personalised Platform content).

Legal Basis: Necessary for our legitimate interests (for running our business, provision of administration and IT services, network security, to define types of customers for our products and services, and to keep our website updated and relevant).

Type of Information: Records of competitions, promotions, rewards, and prizes

Reasons for Using: Whenever we hold competitions and/or give away rewards or prizes, whether as part of Promotional Offers or otherwise, we keep an internal record of how they have been distributed. We collect data around competitions, how Users interact with them, and we use that data to improve the way we hold competitions and give away rewards or prizes in future.

Legal Basis: (a) To perform our contract with you, and (b) Necessary for our legitimate interests (to study how customers use our products/services, to develop them, and to grow our business).

Type of Information: Your interactions with our service using personal information collected by using cookies and other similar technologies as you interact with our website and make purchases.

Reasons for Using: To send you relevant marketing communications and make personalised suggestions and recommendations to you about goods or services that may be of interest to you based on your usage and preferences.

Legal Basis: Necessary for our legitimate interests (to carry out direct marketing, develop our products/services and grow our business).

4. Personal information we collect from other sources:

Type of Information: Social media information

As part of the sign-up process, we may import some of the information you have disclosed to your social media pages, such as Facebook or Google (if you choose to connect to Slip via a social network). Equally, certain parts of our service enable you to share our content or information by email, text (SMS) message or other social applications.

Reasons for Using: In respect of all the above information, our overarching purpose is to enable us to generate a trusted, secure portal for making receipts paperless. We want all of our Users’ information to be secure, but also visible to us so that we can provide them personalised customer service and a customised User experience.

Legal Basis: Necessary for our legitimate interests (to define types of customers for our products and services, to keep our website updated and relevant, to help us improve and develop our products and services, and to provide you with a personalised service).

5. Aggregated Data

We may also collect, use and share aggregated data such as statistical or demographic data which is not personal data as it does not directly (or indirectly) reveal your identity. For example, we may aggregate the data collected to show an individuals' usage to calculate the percentage of users accessing a specific website feature in order to analyse general trends in how users are interacting with our website to help improve the website and our service offering.

2. Marketing and general communications

Section 1 has detailed how and why we collect your personal information, including where we use your personal information to send you marketing and other such communication. This section 2 is to explain how we will ensure that you only receive communications that you wish to receive.

Marketing communications:

We want to ensure that you are informed and aware of the best services and promotions that we can offer you. 

When you sign up to an account with us, you will be able to indicate your preferences for receiving direct marketing communications from us. 

If you have not opted out of receiving the marketing, we will send you marketing communications about products or services that we believe you may be interested in if you have requested information from us or if you have purchased goods or services from us, or have purchased goods or services from one of our Clients and have signed up to receive digital receipts through Slip.

We will always process your personal information in accordance with this Privacy Policy.

You can change your marketing preferences and unsubscribe at any time by accessing the settings within our Platform, by unsubscribing in emails and messages, or by emailing us. If you choose not to receive this information, we will be unable to keep you informed of new services and promotions of ours, or the Slip group of companies, that may interest you.

Whatever you choose, you’ll still receive other important information, for example service updates, as described below.

Service communications:

As detailed in section 1, we may send you communications such as those which relate to any service updates (e.g. new product features, service availability) or provide customer satisfaction surveys. In particular, if you have requested to receive digital receipts, these may be sent to you via SMS or other messaging service.

3. When do we share your personal information?

We may share your personal information for certain purposes and to third parties, as described below, where it is necessary for the purposes set out in section 2 above:

• Slip staff and our group of companies: we share your information with our staff (including employees, consultants, agents and advisors) and within the Slip group of companies as required for: providing you with access to our services according to our agreement, data storage and processing, providing customer support, making internal choices around business improvements, content development, and for the other purposes set out in this Privacy Policy.
• Clients: Where a Customer has previously opted in to share their personal information with a particular Client, directly with that Client, then the Customer’s Transaction data generated on Slip may, in accordance with the agreed terms between the Client and the Customer, then be shared with the Client by Slip. This is always subject to the Customer granting their consent to the Client for this information to be shared.
• Third Party Providers: We use certain companies, agents or contractors (Third Party Providers) to perform services on our behalf or to help deliver our services to you. In particular, we contract with Third Party Providers, for example to provide advertising, marketing, communications, identity checking, infrastructure and IT services, to personalise and enhance our services, to provide customer service, to collect debts, to analyse and action data (including data about our Users’ interactions with our Platform), and to process and administer consumer surveys. In the course of providing such services, these Third-Party Providers may have access to your personal information. We do not authorise them to use or disclose your personal information except in connection with providing their services to us.
• Promotions with our partners: We may offer joint promotions, schemes or incentives with our selected partners (including Clients where applicable) that, in order for you to participate in, will require us to share your information with the relevant partner. In fulfilling these types of promotions, we may share your name and other information in connection with fulfilling the relevant incentive. Please note that our partners are responsible for their own privacy and data protection methods and, if applicable, you should refer to their relevant privacy policy.
• To protect legitimate interests: There are certain circumstances where Slip and our Third Party Providers may disclose and/or make use of your information where a disclosure would be necessary to: (a) satisfy any applicable law, regulation, legal process, or other legal or governmental request or requirement, (b) enforce applicable terms of use, including investigation of any actual or alleged breaches, (c) detect, prevent, or otherwise address illegal or suspected illegal activities (including payment fraud), security or technical issues, or (d) protect against harm to the rights, property or safety of Slip, its Users or the public, as required or permitted by law.
• Transfers of our business: In connection with any corporate reorganisation, restructuring, investment, merger or sale, or other transfer of assets, we will transfer information, including personal information, provided that the receiving party agrees to comply with our requirements as set out in this Privacy Policy relating to your personal information.

4. How long do we store your personal information?

Unless a longer retention period is required or permitted by law, we will only hold your personal information on our systems for the period necessary to fulfil the purposes outlined in this Privacy Policy or until you request that we delete your personal information. Even if we delete your personal information, we may need to retain a copy on backup or archival media for legal, tax or regulatory purposes.

We are legally permitted or required to maintain certain personal information, for example:

• We are legally required to retain financial and transaction data for a minimum period of 7 years for tax, audit and accounting purposes. This includes keeping a record of the amount of each transaction, what it related to, and who we transacted with.  
• We will retain Digital Receipt records within a User’s account at least so long as the User is active, and their account has not been deleted.
• If there is an unresolved issue relating to a Customer Account, for example relating to an issue with Digital Receipts or an unresolved dispute, then we will retain your personal information until the issue is resolved.
• There may be other situations where we have legitimate business interests to retain personal information, such as to prevent fraud or protect security of our other Users.

Any Third-Party Providers that we engage will keep your personal information stored on their systems for as long as is necessary to provide the relevant services to you or us. 

If we end our relationship with any third-party providers, we will take reasonable steps to ensure that they securely delete or return your personal information to us.

We may retain personal information about you for statistical purposes. Where information is retained for statistical purposes, it will always be anonymised, meaning that you will not be identifiable from that information.

5. International transfers of your personal information

All of our servers are based in the United Kingdon (UK) and the personal data that we collect is currently processed and used in the UK, and the European Economic Area (EEA). 

As such, the information that we collect from you may be transferred to, and stored at, a destination outside of the country that you are based in. 

When we transfer and store your personal information outside of the UK or EEA, we will take steps to ensure that the information is transferred in accordance with this Privacy Policy and applicable data protection laws. 

Whenever we transfer your personal data out of the UK to countries which have laws that do not provide the same level of data protection as the UK law, we always ensure that a similar degree of protection is afforded to it by ensuring that the safeguards are implemented.

In particular, we will ensure that appropriate contractual, technical, and organisational measures are in place with any parties outside the UK and/or EEA such as the Standard Contractual Clauses approved by the EU Commission, the International Data Transfer Agreements approved by the Information Commissioners Office, or the International Data Transfer Addendum to the European Commission’s standard contractual clauses for international data transfers. 

6. Security of your personal information

We are committed to securing and protecting your personal information, and we make sure to implement appropriate technical and organisational measures to help protect the security of your personal information. We may adopt various policies including anonymisation, pseudonymisation, encryption, password restricted access, and retention policies to guard against unauthorised access and unnecessary retention of personal information in our systems.

In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.

We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

7. Links

Our Platform may, from time to time, contain links to websites, plug-ins and applications operated by third parties, which will usually be those of Clients or our commercial partners. 

This Privacy Policy only applies to the personal information that we collect from you, and we cannot be responsible for personal information collected and stored by third parties. 

If you click on a link or enable plug-ins, please understand that those connections may allow third parties to collect or share data about you, and that those third-party websites will have their own terms and conditions and privacy policies.

We do not control or accept any responsibility for the content of those third-party websites or third-party terms and conditions or policies. 

Please check these policies, when you leave our website and before you submit any personal information to them.

8. Age restrictions

You must be 16 years of age or older to use the Platform. We do not knowingly collect personal information from individuals under 16 years of age. 

If you are under that age limit, then please do not use Slip or provide any personal information to us.

If you are under 18 years of age, then you will be required to have consent of your parent or guardian to access the Platform and we will only process the basic information which we require from you for so that you can use our Platform.

If you are a parent or legal guardian of a child under the applicable age limit or accessing the Platform without consent, and you become aware that your child has provided his/her personal information to us, please contact us. If we learn that we have collected personal information of an individual under the age of 16, then we will take all reasonable steps to delete that information from our systems, and if required, delete the relevant User account.

9. Your rights and choices

This section explains that you have a number of rights in relation to your personal information.

Under the GDPR and the UK Data Protection Act 2018, as a User of our Platform, you are entitled to certain rights. There are circumstances in which your rights may not apply. You have the right to request that we:

• provide you with a copy of the information we hold about you;
• update any of your personal information if it is inaccurate or out of date (though we may need to verify the accuracy of the new information that you provide to us);
• delete the personal information we hold about you in certain circumstances - if we are providing services to you and you ask us to delete personal information we hold about you then we may be unable to continue providing those services to you. We also may not always be able to comply with your request for specific legal reasons which will be notified to you at that time;
• restrict the way in which we process your personal information including if you want us to establish your personal information’s accuracy, where our use of the data is unlawful but you do not want us to delete it, where you need us to hold onto data even though we no longer require it, or if you have objected to us using your data but we have overriding legitimate grounds to use it;
• stop processing your data if you have valid objections to such processing, including the absolute right to object any time to the processing of your personal data for direct marketing purposes. In some cases, we may demonstrate that we have compelling legitimate grounds to process your information which override your right to object; 
• transfer your personal information to a third party; and 
• withdraw consent at any time where we are relying on consent to process your personal data (see section 2 for more details of when we rely on your consent). If you withdraw your consent, we may not be able to provide certain products or services to you. We will advise you if this is the case at the time you withdraw your consent.

For more information on your rights and how to use them, or if you would like to make any of the requests set out above, please contact us.

We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal information (or to exercise any of your other rights). This is a security measure to ensure that personal information is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.

You will not usually have to pay a fee to access your personal data (or to exercise any of the other rights). However, please note that we reserve the right to charge a fee for responding to requests where we reasonably determine that they are manifestly unfounded or onerous or being made in bad faith. Alternatively, we could refuse to comply with your request in these circumstances.

We try to respond to all legitimate requests within one month. Occasionally it could take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.

10. Contacting us

If you have any questions or concerns about how we handle your personal information, please contact us here.

If you are not satisfied with the way a complaint you make in relation to your Data is handled by us, you may be able to refer your complaint to the relevant data protection authority. For the UK, this is the Information Commissioner's Office (ICO). The ICO's contact details can be found on their website at https://ico.org.uk/.

11. Cookies

We may use cookies on our Platform which help us monitor use of the Platform, and in turn improve it based on how our Users interact with it. You can choose to accept or turn off cookies within your browser settings.

For more information about how we use cookies, please see our cookies policy: here. 

‍