Privacy policy

This policy explains what personal information Tillable collects, why we collect it, who we share it with and what you can ask us to do. It covers our website at tillable.app, our waitlist, enquiries you send us, and the Tillable service that businesses use, including the portal at pos.tillable.app and our apps and devices.

1. Who we are

Tillable is a trading name of Table Yeti Ltd, a company registered in England and Wales with company number 11634791. Our registered office is at 5th Floor, 167-169 Great Portland Street, London W1W 5PF. In this policy, "we", "us" and "our" mean Table Yeti Ltd.

We are the controller of the personal information described in this policy. The exception is information we handle for the businesses that use Tillable, which section 9 explains.

You can contact us about anything in this policy by emailing privacy@tillable.app or by writing to us at our registered office.

2. What we collect and how we use it

When you visit our website

When you visit tillable.app, our hosting provider records technical details of each visit: your IP address, the page you asked for, the time, and the type of browser and device you used. We use these details to show you the website, keep it secure and fix faults.

If you accept analytics cookies, Google Analytics records how you use our website: the pages you visit, how you reached them, how long you stay, and your device, browser and approximate location. It works out the location from your IP address but does not store the address. We use these reports to improve the website. If you reject analytics cookies, nothing is sent to Google. We do not use advertising cookies. Our cookie policy explains what we store in your browser and how to change your answer.

When you use the waitlist, invite code or contact forms, we keep a coded version of your IP address, made with a secret key, so that no single connection can flood them. We never store the address itself, and we delete the coded version after about a day.

When you join the waitlist

We ask for your name, email address, business name and type of business. We use them to keep your place on the waitlist, send you an invite code and email you when you can sign up, and for nothing else. If we send you an invite code, we record when it is used.

When you contact us

If you get in touch, through our contact form, by email or by phone, we use what you tell us to answer you and to talk to you about Tillable. Our contact form asks for your name, email address, phone number, type of business, turnover, number of sites and whether you would like a call or an email.

When your business uses Tillable

When you sign up, we collect your name, email address and phone number, details of your business, and the details of any staff accounts you create. As you use the service, we also collect:

• the information our payment partner needs to set up card payments and payouts, including details that verify your business and the people who own or run it
• billing details and records of what you buy from us
• records of your activity in the service, such as sales, refunds, the settings you change and the devices you connect
• messages you send to our support team

We use this information to provide the service, take payment for it, keep accounts secure, prevent fraud, give you support, meet our legal obligations and improve Tillable.

When you are signed in to the portal, we use PostHog to understand how the portal is used and to find problems. This can include recordings of your session, with what you type into fields such as email addresses, phone numbers and passwords hidden from the recording. We use Sentry to record errors so that we can fix them.

Emails we send

We send you emails about your account and the service when you need them. We only send marketing emails if you have agreed to receive them, or if you are a customer and the email is about similar Tillable products. You can unsubscribe from marketing emails at any time, using the link in each one.

3. Why the law allows us to use it

We rely on these legal reasons:

• Contract. To provide the service under our terms of service, and to take steps you ask for before a contract, such as running the waitlist and sending you an invite code.
• Legitimate interests. To answer enquiries, keep our website and service secure, prevent fraud, and understand how Tillable is used so that we can improve it. We only rely on these interests when your rights do not outweigh them, and you can object (see section 7).
• Legal obligation. To keep financial records and to make the checks the law requires.
• Consent. For analytics cookies on our website, for marketing emails where the law needs your consent, and for anything else we ask your permission for. You can withdraw your consent at any time.

4. Who we share it with

We do not sell personal information. We share it only with:

• Providers who work for us, under contracts that require them to protect it and use it only to provide their service to us. They include Vercel, which hosts our website and portal; Supabase, which hosts our databases in Ireland and London; Google, which provides our email and office tools and, if you accept analytics cookies, our website analytics; PostHog, which provides analytics for the portal from the European Union; Sentry, which records errors; and the services that deliver our emails and other messages.
• Adyen N.V., our payment partner, which provides card payments, payouts and Tillable Capital. Adyen uses information about your business to check who you are, process payments and meet its own legal obligations, under its own privacy policy.
• Apps and services you connect, such as accounting software, when you ask us to.
• Our professional advisers, such as lawyers and accountants.
• Authorities, such as HMRC, the police or a regulator, when the law requires it.
• A buyer or investor, if we sell, merge or reorganise our business, under the same protections as this policy.

5. Sending information outside the UK

Our databases are in Ireland and the UK. Some of our providers are based in the United States or let their staff reach data from other countries. When personal information leaves the UK, we make sure it stays protected: either the UK has decided that the destination protects it adequately, which includes companies certified under the UK Extension to the EU-US Data Privacy Framework, or we use the International Data Transfer Agreement or Addendum issued by the Information Commissioner's Office.

6. How long we keep it

We keep personal information only for as long as we need it:

• Waitlist details: until you join Tillable or ask us to remove you. If we close the waitlist, we delete the details within three months.
• Coded IP addresses from our forms: about a day.
• Website analytics: 14 months, in Google Analytics.
• Enquiries: up to two years after we were last in touch, unless you become a customer.
• Account information: while your account is open, and for six years after it closes, because we must keep financial records and may need them if there is a legal claim.

7. Your rights

You have the right to:

• ask for a copy of the personal information we hold about you
• ask us to correct information that is wrong or incomplete
• ask us to delete it
• ask us to limit how we use it
• object to how we use it, including for marketing, which we will always stop
• ask us to send it to you or to another organisation in a format a computer can read
• withdraw your consent, where we rely on it

Some of these rights depend on our reason for using the information, and the law requires us to keep some information, such as financial records, even if you ask us to delete it. If that applies, we will tell you.

To use any of these rights, email privacy@tillable.app. We will reply within one month, and there is normally no charge. We may ask you to confirm who you are first.

We do not make decisions about you based only on automated processing that have legal or similarly significant effects on you.

8. Complaints

If you are unhappy with how we have handled your information, tell us at privacy@tillable.app and we will try to put it right. You can also complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

9. Information we handle for businesses that use Tillable

Businesses use Tillable to take orders, payments and bookings, sell gift cards, run loyalty schemes, keep customer records and organise their staff. The business decides what information it collects about its customers and staff, and we handle that information on its behalf, following its instructions and our terms of service. The business is the controller of that information.

If you are a customer or member of staff of a business that uses Tillable, the business's own privacy notice explains how it uses your information, and you should contact the business to use your rights. If you contact us instead, we will pass your request to the business.

10. Keeping it safe

We protect personal information with measures that suit the risk, including encryption when information travels over the internet, access limited to the people who need it, and secure sign-in for our staff. If a security problem is likely to put you at risk, we will tell you, and the Information Commissioner's Office, as the law requires.

11. Children

Tillable is for businesses. Our website and service are not meant for anyone under 18, and we do not knowingly collect their information for our own purposes.

12. Changes to this policy

We will update this policy when the way we use personal information changes. The date at the top shows when it last changed. If a change affects you significantly, we will tell you by email or in the portal before it takes effect.