Privacy Policy

Last updated: June 16, 2026

This policy explains how Tick It ("Tick It", "we") handles personal data when you use our case- and workflow-management service (the "Service"). We are the data controller for your account and billing data. For the case content our customers store in the Service (including the people they support), the customer is the controller and we process it on their behalf.

What we collect

• Account data: your name, work email, company name, and password (stored only as a hash).
• Billing data: your plan and subscription details. Card payments are handled by Stripe — we never see or store full card numbers.
• Content you process: cases, customer/contact records, and messages you send and receive through connected channels — email (Microsoft 365, Gmail, or SMTP/IMAP) and WhatsApp (via the Meta WhatsApp Business Platform), including message content, media, and contact phone numbers.
• Technical data: IP address, browser type, and log/audit records, used to keep the Service secure and working.

Why we use it & our lawful basis

We use this data to provide and secure the Service, process payments, and send essential account emails (such as verification and password resets). Our lawful bases under UK GDPR are performance of our contract with you, our legitimate interests in running and securing the Service, legal obligations (e.g. accounting), and consent where required. We do not sell personal data or use your content for advertising.

Who we share it with

We share data only with providers that help us run the Service: our hosting provider, Stripe (payments), and the email and messaging providers you connect (Microsoft, Google, and Meta/WhatsApp). We may also disclose data where required by law. Your use of WhatsApp is also subject to Meta's own terms and privacy policy.

International transfers

Some providers process data outside the UK. Where that happens, we rely on safeguards such as the UK International Data Transfer Agreement or Standard Contractual Clauses.

How long we keep it

We keep account and content data for as long as your account is active. When an account is closed, we delete or anonymise the data within a reasonable period, except where we must keep certain records (such as billing) to meet legal obligations.

Cookies

We use a single strictly necessary, first-party cookie to keep you signed in. We do not use advertising or cross-site tracking cookies.

Your rights

Under UK GDPR you have the right to access, correct, delete, or port your data, and to object to or restrict certain processing. To exercise these rights, contact us using the details below. If you are unhappy with our response, you can complain to the UK Information Commissioner's Office (ICO) at ico.org.uk. If you contacted a company that uses Tick It, that company is the controller of your data — please raise your request with them.

Contact

Tick It
N15 5RN
Email: support@tick-it.net

We may update this policy from time to time; the "Last updated" date above shows the latest version.