Privacy Policy
This Privacy Policy explains how Tap Card ID collects, uses, stores and protects your personal data when you use our website, place an order, contact our team, or manage your digital card profile.
1. Controller
The controller responsible for data processing on this website is the operator of Tap Card ID. Please replace this section with your full legal company details, address, support email, and, where applicable, VAT and company registration data.
2. What data we collect
We may collect personal data that you provide directly, as well as technical data required to operate the website securely and efficiently.
- Name, email address, phone number, company name and job title
- Card customization data such as website, Instagram, WhatsApp, LinkedIn, YouTube, location URL and profile text
- Order and payment-related data, shipping details and selected products
- Messages submitted through the contact form
- Login and account-related data where an account is created for card management
- Technical data such as browser type, device type, pages visited and cookie/consent preferences
3. Purposes of processing
We process personal data only where there is a legitimate and lawful purpose to do so.
- To process and deliver your order
- To create, manage and update your digital card profile
- To respond to support and contact requests
- To send order-related and service-related emails
- To protect the website against abuse, spam, fraud and unauthorized access
- To understand website performance and improve user experience, subject to your cookie consent where required
4. Legal bases
Depending on the context, data processing may be based on contract performance, legitimate interests, legal obligations, or your consent, especially where analytics or optional cookies are involved.
5. Orders, payments and customer accounts
When you place an order, we process the data necessary to complete the purchase, handle shipping, maintain records and provide support. If a customer account is created for you, login credentials and profile-related data may be stored to allow secure access to your card management area.
Payment-related processing may involve external payment service providers. We recommend listing the payment providers you use and linking their privacy notices where required.
6. Contact form and communications
If you send us a message through the contact form, we store the submitted data so our team can review and respond to your request. We may also send an automatic confirmation email confirming receipt of your message.
7. Cookies and analytics
Our website may use cookies and analytics tools to improve functionality, security and performance measurement. Where legally required, analytics are only activated after consent has been granted through the cookie banner.
If you use Google Analytics or similar tools, you should identify them here and explain what type of data is processed and under which legal basis or consent framework this happens.
8. Data sharing
We do not sell personal data. Data may be shared only where necessary with hosting providers, email providers, payment providers, shipping partners, technical service providers, or where required by law.
9. Data retention
We retain personal data only for as long as necessary for the relevant business purpose, contractual fulfillment, legal retention obligations, dispute resolution, security or support history.
10. Your rights
Subject to applicable law, you may have the right to request access to your personal data, request correction or deletion, restrict certain processing, object to processing, and request portability of your data.
To exercise these rights, please contact the data controller using the contact details listed in the legal notice or impressum section.
11. Security
We take reasonable technical and organizational measures to protect personal data against unauthorized access, loss, misuse, disclosure or alteration. However, no internet-based service can be guaranteed to be completely secure.
12. Updates to this policy
We may update this Privacy Policy from time to time to reflect changes in legal requirements, technical infrastructure, services or data processing practices. The latest version will always be published on this page.