Privacy Policy
Effective Date: 01/08/2024
Latest Updated: 25 Oct 2024
- Introduction
Welcome to WeTip (“we”, “our”, “us”). We are committed to protecting your privacy and ensuring that your personal information is handled in a safe and responsible manner. This Privacy Policy outlines how we collect, use, disclose, and protect your information when you use our digital tipping platform, in compliance with the General Data Protection Regulation (GDPR).
- Information We Collect
We collect the following types of personal information:
- Names and Email Addresses: Required for user identification and communication.
- Telephone Numbers: Used for communication and account verification.
- Tip Amounts Earned: Recorded to manage and distribute tips accurately.
- Information We Do Not Collect
We do not collect or store any bank details directly. All financial transactions, including payouts, are handled by Stripe Connect.
- Use of Stripe Connect
- Payouts and Financial Transactions: We use Stripe Connect to manage all financial transactions. When you register with our platform, you will be required to provide KYC (Know Your Customer) information directly to Stripe.
- Data Handling by Stripe: Stripe handles sensitive financial data, including addresses and IBANs. While we can view this information via the Stripe dashboard, we do not store it on our servers.
- Legal Basis for Processing Personal Data
We process your personal data based on the following legal grounds:
- Contractual Necessity: To perform the contract we have with you, such as providing and managing our services.
- Legitimate Interests: For our legitimate business interests, such as improving our services and ensuring the security of our platform.
- Consent: Where required, we will ask for your consent before processing your personal data.
- How We Use Your Information
We use your personal information to:
- Provide and Manage Services: Facilitate the digital tipping process and ensure accurate distribution of tips.
- Communication: Contact you regarding your account, tips earned, and any platform updates or issues.
- Security and Verification: Verify your identity and ensure the security of your account.
- Internal Logging and Monitoring
- Logging Services: WeTip uses Sumo Logic for internal logging and monitoring purposes. This helps us maintain the performance, security, and integrity of the WeTip Platform. By using the WeTip Platform, you acknowledge and agree to the use of Sumo Logic for these purposes.
- Purpose of Data Collection: The data collected through Sumo Logic is used to:
- Monitor and improve the performance of the WeTip Platform.
- Detect and prevent security threats and malicious activities.
- Ensure compliance with legal and regulatory requirements.
- Conduct analytics and generate reports for internal use.
- Access to Information
Our administrators have access to vendor and employee accounts to manage the platform effectively. However, access is restricted to authorized personnel only, and all actions are logged for security purposes.
- Data Protection and Security
We implement robust security measures to protect your personal information, including:
- Encryption: Protecting data in transit and at rest using industry-standard encryption protocols.
- Access Controls: Restricting access to personal information to authorized personnel only.
- Regular Audits: Conducting regular security audits to identify and address potential vulnerabilities.
- Data Integrity: Implementing top-tier best practices to ensure data integrity and reliability.
- Incident Response: Having an incident response plan in place to handle any data breaches swiftly and effectively.
- Sharing Your Information
We do not sell, trade, or otherwise transfer your personal information to outside parties, except as required by law or necessary to provide our services.
- International Data Transfers
If we transfer your personal data outside the European Economic Area (EEA), we ensure it is protected by appropriate safeguards, such as Standard Contractual Clauses or other legally acceptable mechanisms.
- Your Rights Under GDPR
You have the following rights regarding your personal data:
- Right to Access: Request access to the personal information we hold about you.
- Right to Rectification: Request corrections to any inaccurate or incomplete personal information.
- Right to Erasure: Request the deletion of your personal information, subject to legal and contractual obligations.
- Right to Restrict Processing: Request the restriction of processing your personal data under certain conditions.
- Right to Data Portability: Receive your personal data in a structured, commonly used, and machine-readable format, and have it transmitted to another controller where technically feasible.
- Right to Object: Object to the processing of your personal data in certain circumstances.
- Right to Withdraw Consent: Withdraw your consent at any time where we rely on consent to process your personal data.
- Right to Lodge a Complaint: Lodge a complaint with a supervisory authority if you believe our processing of your personal data violates GDPR.
- Data Retention
We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. The retention period may vary depending on the type of data and the purpose for which we process it.
- Audit Records: Even if a vendor or employee is removed from the WeTip system, WeTip retains audit records of their tips and payouts for a period of 2 years to mitigate any potential claims of mismanagement or theft of funds. This ensures transparency and accountability in financial transactions.
- Children’s Privacy
Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that a child under 18 has provided us with personal information, we will take steps to delete such information from our systems.
- Third-Party Links
Our platform may contain links to third-party websites. We are not responsible for the privacy practices or the content of these third-party sites. We encourage you to review the privacy policies of any third-party sites you visit.
- Automated Decision-Making and Profiling
We do not use automated decision-making or profiling that significantly affects users. Any automated processing of your personal data will be in compliance with GDPR requirements.
- Cookies and Tracking Technologies
We use cookies and similar tracking technologies to enhance your experience on our platform. Cookies help us understand how you use our services and enable us to provide personalized features. You can manage your cookie preferences through your browser settings.
- Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page, and we will notify you of significant changes by email or through our platform. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.
- Contact Us
If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:
Email: contact@wetipit.com
- Consent
By using our platform, you consent to our Privacy Policy.
Please review this policy regularly to stay informed about how we are protecting your information.
- Additional Measures for Data Security
We take our security seriously and use top-tier best practices to ensure data integrity and protection. Our additional measures include:
- Multi-Factor Authentication (MFA): Requiring multiple forms of authentication to access sensitive data.
- Regular Training: Providing regular data protection and privacy training to our employees.
- Data Minimization: Collecting only the personal data necessary for specific purposes and not retaining it longer than necessary.
- Secure Software Development: Incorporating security into our software development lifecycle to ensure our platform is resilient to threats.
- Continuous Monitoring: Implementing continuous monitoring to detect and respond to security incidents in real-time.
By ensuring robust data protection and security practices, we aim to maintain the highest level of trust and confidence from our users.
This Privacy Policy covers various aspects to ensure comprehensive protection of your personal data while using WeTip.
If you have any further questions or need additional information, please do not hesitate to contact us.
