Trust centre

Security

• HTTPS everywhere. Our website, the back office, every shop and every sign-in use an encrypted connection.
• Passwords are never readable. They're stored as a one-way hash, so not even our team can see them.
• Keys and tokens are encrypted. Payment, courier and Google keys, and two-step verification secrets, are stored encrypted. They're never written to our logs or activity records.
• Two-step verification. Everyone on the Tillzy team must use an authenticator app. Shop owners and staff can switch it on for their own accounts, and we ask them to.
• Card details never reach us. Card payments are handled by Stripe and PayPal.
• Least access. Shop staff see only their own shop, and only what their role allows. On our side, only the company's owners can change platform settings.
• A record that can't be rewritten. Issued invoices, stock movements and the activity log are only ever added to. A correction is a new entry, so history can't be quietly changed.
• Nightly encrypted backups. Every night we back up each shop, encrypt the copy before it leaves our server, and keep 14 days plus one a month for six months. Once a month we check the latest backup opens.
• Spam and abuse protection on every public form.

Our full information security policy sets out how we protect Tillzy, including what is still planned.

Report a security problem

If you think you've found a weakness in Tillzy, please tell us before anyone else. We read every report. Email [email protected], or see our security.txt. Please don't access other people's data, and give us a reasonable time to fix the problem before you share it.

Data protection policy: a summary

The controls marketplaces and partners ask about, in one place.

Data protection

• UK GDPR. For shop owners' and staff accounts, Tillzy decides how the data is used, so we're the controller. For a shop's customers, the shop decides, and Tillzy stores and processes the data for the shop and on its instructions, as its processor.
• Data processing agreement. Sellers who need a written agreement for the customer data we hold for them can ask at [email protected].
• Your rights. Our privacy notice explains them, and how to complain to the Information Commissioner's Office.

Sub-processors

These companies handle personal data for us to run Tillzy. Each gets only what it needs for its job. Some are outside the UK, mainly in the US. Where that happens, the transfer is covered by the UK's adequacy rules or by standard contract clauses approved for UK data.

Couriers, payment providers, marketplaces and other services a shop connects itself (for example Royal Mail, Parcel2Go, Etsy or eBay) are the shop's own choice, and receive data under the shop's agreement with them.

Keeping data

Deleting your account

Shop owners close their shop by asking us. There isn't a self-service button yet, so a person handles each request.

1. Download anything you want to keep. Products, customers and orders all export from your back office.
2. Email us from the shop owner's address at [email protected], or use the contact form, and ask us to close the shop and delete its data.
3. We check the request really comes from the owner, then close the shop. Every connected service is disconnected and its keys and tokens are deleted, marketplace tokens included.
4. We delete the shop's data, apart from anything the law makes us keep, such as our own invoices to you. Copies in our encrypted backups disappear as those backups expire, within six months.
5. We email you when it's done.

Staff, and anyone else with a Tillzy login, can ask us to delete their account in the same way. If you bought from a shop that uses Tillzy, ask that shop first. If you ask us, we'll pass your request on and help the shop answer it.

Marketplace data

We plan to connect Tillzy to Etsy, eBay, Amazon and TikTok Shop, once each one approves us. None of these connections is live yet. When they are, Tillzy will read and write only what a seller needs to keep listings, stock and orders in step. Tokens are stored encrypted, sellers can disconnect at any time, and the data is deleted on disconnect or when the account closes.

Read exactly what we read and write, and why

Incident response

If something goes wrong with security, this is what we do:

1. Contain it: stop the problem and protect what's left, for example by switching off access or changing keys.
2. Find out what happened, which shops and which data were affected.
3. Tell the shops affected without undue delay: what happened, what data was involved, what we've done and what they should do.
4. Report it to the Information Commissioner's Office within 72 hours of finding it, where UK GDPR requires that. If a shop's customers need to be told, we help the shop do it.
5. Once a marketplace connection is live, tell that marketplace within 24 hours of finding a problem that affects its data, or sooner if its terms require.
6. Write down what went wrong and fix the cause.

Requests from public authorities

We only hand over data when the law requires it, and only the minimum needed. Unless the law stops us, we tell the shop affected.

Responsible AI

• AI suggests, you decide. AI tools in Tillzy draft and suggest. Someone in the shop reads, edits and approves before anything is published or sent.
• AI is optional. A tool only runs when someone in the shop chooses to use it. A shop can work without AI at all.
• Customer details go only to approved providers. They're sent only for tools that need them, such as drafting a reply to a customer's message. Most tools never see customer details.
• No training on your data. We use AI providers' paid business services, not their free consumer apps. The providers that receive anyone's personal details don't use what we send to train their AI, under our agreements with them.

Accessibility statement

We want everyone to be able to use the Tillzy website, including people who use screen readers, keyboards, voice control or magnification. We aim to meet the Web Content Accessibility Guidelines (WCAG) 2.2 at level AA on these public pages. They use headings, landmarks and labelled forms, work with a keyboard, show where the focus is, and reflow on small screens.

These pages haven't had an independent accessibility audit yet. The shop back office is a larger product and may not meet every guideline yet. We're improving it as we go.

If you find something you can't use, or you need information in another format, email [email protected] and we'll get back to you. If you're not happy with our reply, you can contact the Equality Advisory and Support Service.

This statement was prepared on 11 October 2026.

Company

Trading name

Tillzy

Legal name

Design Studio Lab Ltd

Company number

11222280

Registered office

2 Damara Way, Ashford TN25 7FD

Email

[email protected]

More on About and Contact.