This page explains what personal information Tillzy holds, why, who it is shared with, and your rights. Tillzy is a trading name of Design Studio Lab Ltd, registered in England and Wales, company number 11222280. Registered office: 2 Damara Way, Ashford TN25 7FD. For anything about your data, email [email protected].
Two kinds of information
- Shop owners and their staff. When you open a Tillzy shop, we decide how your account details are used, so we are the controller of them.
- A shop's customers. When you buy from a shop that runs on Tillzy, that shop decides how your details are used and is the controller. Tillzy stores and processes them for the shop, as its processor, and only on its instructions. Questions about an order or your data should go to the shop first; its contact details are on its website.
What we hold
- Account details: name, email address, password (stored scrambled, never readable), two-step sign-in settings, and which shop you work in. When anyone sets a new password, we check it isn't on the public list of passwords leaked in data breaches (Have I Been Pwned): only the first five characters of a scrambled copy of it are sent, so the password itself never leaves Tillzy.
- Shop records: products, stock, orders, invoices, customers, messages and reviews that the shop keeps in Tillzy.
- Technical records: sign-in times, IP addresses and an activity log of changes, kept to protect accounts and find faults.
- Billing records if a shop buys a plan or AI credits: what was bought and when. Card details are handled by Stripe and never reach us.
- Messages you send through the contact or partner forms on this website: your name, email address, shop or organisation name and what you wrote, so we can reply (legitimate interests).
- Support tickets: questions you send us from your back office, our help centre, the contact form or by email, with our replies and the page you were on, so we can help you (legitimate interests). Anything that looks like a password, key or card number is hidden before it is saved.
Why we use it
- To run the service a shop has signed up for (contract).
- To keep accounts and shops secure, prevent fraud and spam, and fix problems (legitimate interests).
- To keep financial records the law requires (legal obligation).
- To send service emails such as sign-in codes, invitations and alerts. We don't send marketing to shop owners without asking first.
Who we share it with
We use these companies to run Tillzy. Each only gets what it needs for its job:
| Company | What it does for us | Data involved |
|---|---|---|
| IONOS | Hosting the website and databases | Everything held in the service |
| Cloudflare | Delivering pages securely and quickly, the "I'm not a robot" check on some forms, receiving email sent to us, and storing our encrypted backups | Visitors' IP addresses and requests, emails sent to us, and backups (encrypted before they leave our server) |
| Brevo | Sending emails | Recipients' names and email addresses, and the email content |
| Stripe | Taking card payments and Tillzy's own billing | Payment and billing details (card numbers go to Stripe and never reach Tillzy) |
| PayPal | Taking PayPal payments | Payment details (these go to PayPal and never reach Tillzy) |
| Anthropic, Google and OpenAI | AI tools, only when someone in a shop uses one, such as drafting a reply to a customer message | What that tool needs to do its job |
- Couriers a shop connects, such as Royal Mail Click & Drop and Parcel2Go, receive what a shipping label needs: the delivery address and any delivery instructions or safe place the customer gave.
- Payment providers a shop connects (Stripe and PayPal) receive payment details under the shop's own agreement with them.
- Google analytics and advertising tags appear on a shop's website only if that shop turns them on, and only after a visitor agrees in the cookie banner.
Only the AI tools that need customer details, such as drafting a reply to a customer's message, send any, and the AI services that receive personal details don't use it to train their AI, under our agreements with them. When you ask for help in your back office, an AI may answer straight away from our guides, and you can always ask for a person instead. Our replies to support tickets may be drafted by AI, but a person on our team checks each one before it is sent. Some of these companies are outside the UK, mainly in the US. Where that happens, the transfer is covered by the UK's adequacy rules or by standard contract clauses approved for UK data.
Marketplace connections
We plan to connect Tillzy to Etsy, eBay, Amazon and TikTok Shop, once each one approves us. None of these is live yet. When a shop connects one, Tillzy will read and write only what's needed to keep that shop's listings, stock and orders in step, including the buyer's name and delivery address so the shop can fulfil the order. The marketplace's access token is stored encrypted, the shop can disconnect at any time, and we delete the token when it does. Buyers' details are never used for marketing or sent to AI tools. Marketplace data isn't used to train AI, and we don't send order or shipping messages to marketplace buyers. The full detail is on our marketplace data page.
When eBay tells us that one of its users has asked for their data to be deleted, we delete that person's eBay data from every shop.
Google sign-in and Search Console
If a shop chooses to connect Google Search Console, the shop owner signs in with Google and allows Tillzy to read, but not change, that shop's Search Console data: which Google searches the shop appears for, with clicks, impressions and average position, and the list of their sites so they can pick the right one. We also read the email address of the Google account, to show which account is connected. We use this data only to show the shop its own search figures, to suggest clearer wording for its product pages and to point out search trends for its product categories. The shop reviews every suggestion before anything changes. To make those suggestions, the shop's search figures are sent to Google's AI service, which doesn't use them to train its AI. We don't sell this data, use it for advertising, or share it with anyone else. The access token is stored encrypted. The shop can disconnect at any time in Settings › Google, which deletes the token and revokes Tillzy's access, or remove access in their Google Account. Tillzy's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Social accounts: Facebook, Instagram, WhatsApp, TikTok and Pinterest
Connecting a Facebook Page, Instagram account, WhatsApp number, TikTok account or Pinterest account to a Tillzy shop isn't available yet, so we hold no data from them today. When it is, this is how that data will be handled, and we'll update this notice before it starts:
- What we'll read: the Page, account or number the shop chooses; its posts and their results (views, reach, likes, comments, shares); and the comments and messages people send to it.
- Why: so the shop can plan and post its own content, see what worked, and answer customers from one inbox.
- What we'll never do: post or send anything without a person in the shop pressing Approve or Send, except order updates on WhatsApp that the customer asked for; sell this data or use it for advertising; or use it to train AI. Message text will go to the AI providers on our sub-processor list only when staff ask for a reply draft.
- How long: messages and comments will be kept for 2 years, then deleted; results while the connection is open.
- Deleting: see how to have your data deleted.
How long we keep it
Account details and the activity log are kept while the account is open. Tillzy's own billing records (our invoices to shops) are kept for six years, as UK tax law requires. Each shop owner is responsible for keeping their own shop's tax records, and can download them from their back office at any time. Server logs are kept for a short time. IP addresses and browser details on activity log entries are removed after 24 months; the entry itself stays. Messages from our website forms are deleted 24 months after we answer them, and you can ask us to delete them sooner. Emails you send us are deleted 24 months after the last message in that conversation. Support tickets are deleted 24 months after their last message. When a shop closes, we delete its records once any period the law requires us to keep them has passed. If Tillzy set up a shop for a trial period and it ends with no plan chosen, we email the owner a link to download their products, customers and orders, and delete the shop's data 60 days after the trial period ends.
Where your data is stored
Tillzy's servers are run by IONOS. Our encrypted backups are kept in Cloudflare R2. Some of the companies listed above are in the US; those transfers are covered as described above.
Cookies
Tillzy uses cookies that are needed to sign in, keep your basket and keep forms secure. Shops may add analytics or advertising cookies; those only run if you agree in the shop's cookie banner, and you can change your mind there.
Deleting your account
To close a shop and delete its data, the shop owner emails us or uses our contact form. We check the request comes from the owner, disconnect every connected service, delete the shop's data apart from what the law makes us keep, and confirm by email. Copies in our encrypted backups disappear as those backups expire, within six months. The steps are on our Trust centre.
Your rights
You can ask to see the personal information we hold about you, to correct it, to delete it, to limit or object to how it's used, or to get a copy to take elsewhere. Email [email protected]. If your details are held for a shop, we'll pass your request to that shop and help it answer. If you're unhappy with how we've handled your information, you can complain to the Information Commissioner's Office at ico.org.uk.
Changes
If we change this page in a way that matters, we'll tell shop owners by email before the change takes effect.