Privacy policy

This policy explains how Orbix Technologies Ltd (trading as Tapqora), a company registered in England and Wales (company no. 16973554), registered office 437–441 Coventry Road, Small Heath, Birmingham B10 0TH ("Tapqora") uses personal data. For privacy questions or to exercise your rights, email privacy@tapqora.com.

Who is responsible

Tapqora is the controller for data about our customers and website visitors. For contact details that other people share with a Tapqora user through that user's profile, the Tapqora user decides how to use them and Tapqora processes them on the user's behalf.

What we collect

• Account data: email address and sign-in details.
• Profile data you choose to publish: name, job title, company, phone, email, website, address, photo, links.
• Order data: name, delivery address, items, and payment status from Stripe (we never receive your full card number).
• Contact data shared with you: name, email, phone, company and note entered by someone on your profile.
• Usage data: profile views, taps, contact saves, approximate country and device type. We do not use advertising trackers on profile pages.

Why we use it (lawful basis)

• To provide cards, profiles and plans you asked for (contract).
• To process payments, prevent fraud and keep records required by law (legal obligation and legitimate interests).
• To show you analytics about your own profile (contract).
• To send service emails such as order and sign-in emails (contract). We send marketing only if you opt in, and you can opt out at any time.

Who we share it with

We use trusted service providers who process data for us under contract: Supabase (database and sign-in, hosted in London, UK), Cloudflare (website hosting and security), Stripe (payments), Resend (transactional email), Zoho (business email), and our card printing partners Printags (France/Canada) and NFC Tagify (UK), who receive only what is needed to make and deliver your card. Some providers may process data outside the UK; where they do, we rely on UK adequacy regulations or the UK International Data Transfer Agreement/Addendum.

How long we keep it

Account and profile data: while your account is open, then deleted within 30 days of closure. Order and invoice records: 6 years (UK tax law). Contacts shared with you: until you or the person who shared them deletes them, or your account closes. Analytics: 24 months.

Your rights

You can ask to access, correct, delete, restrict or port your data, and object to processing based on legitimate interests. Email privacy@tapqora.com and we will respond within one month. You can also complain to the Information Commissioner's Office (ico.org.uk, 0303 123 1113).

Security

Data is encrypted in transit, access is restricted by row-level security, and payment data is handled by Stripe (PCI DSS Level 1).

Children

Tapqora is not intended for children under 16.