Privacy Policy

Last updated: 4 July 2026

This Privacy Policy explains what data Tap 'n' Kick ("we", "us", "our") collects, why, and what rights you have over it. We're based in England, United Kingdom, and act as the data controller for the personal data described below.

1. What We Collect

Account data:your email address and password (handled by our authentication system — we never see your password in plain text), or, if you choose "Sign in with Google", the basic profile details Google shares with us for that purpose.

Taproom data: whatever you enter to run your display — bar name, logo, tap and beverage details, pricing (Pro plan), and pour history. This is your operational data; we store it to provide the Service to you.

Technical data: standard connection/log data (like IP address and request timestamps) collected automatically by our network security provider to keep the Service secure and available.

2. Why We Collect It

We use this data to:

• Provide and operate the Service (create your account, run your displays, save your data);
• Respond to support requests;
• Keep the Service secure and reliable;
• Meet our legal obligations.

We process account and taproom data because it's necessary to provide the Service under our contract with you, and technical/log data on the basis of our legitimate interest in keeping the Service secure.

3. Cookies

We use a single essential cookie to keep you signed in. We don't currently use any analytics or advertising cookies or trackers.

4. Who We Share It With

We run our own infrastructure — your data isn't handed off to a third-party SaaS backend to operate the Service. A small number of specialist providers help us run that infrastructure and only process data on our instructions:

• Cloudflare — network security and traffic routing for our servers;
• Resend — delivering transactional emails (e.g. account confirmation, password reset);
• Google — only if you choose to sign in with a Google account.

We don't sell your data or share it with anyone for marketing purposes.

5. Data Retention

We keep your data while your account is active. If you'd like your account and data deleted, email [email protected]and we'll action it promptly.

6. Your Rights

Under UK GDPR, you have the right to access, correct, or delete your personal data, restrict or object to certain processing, and request a copy of your data in a portable format. To exercise any of these, email [email protected]. You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk if you think we've mishandled your data.

7. Children

The Service isn't directed at, or intended for use by, anyone under 16.

8. Changes to This Policy

We may update this policy from time to time. We'll post the updated version here with a new "last updated" date.

9. Contact

Questions about this policy or your data? Email [email protected].