Privacy notice
Last updated 6 October 2026
The short version
- If you joined a shop's loyalty scheme, the shop decides how your details are used. Tillkeep runs the system for them.
- We collect your first name and mobile number, your points, and what you agreed to.
- Other customers never see your number. Shop staff see only the last 4 digits.
- You only get offers if you said yes. Every offer has a link to stop them.
- We never sell your details or use them to advertise.
Who we are
Tillkeep is a loyalty card system for independent shops. It is run by Zaar Trading Ltd, a company registered in England and Wales (company number 16816358), registered office 3rd Floor, 86-90 Paul Street, London EC2A 4NE. In this notice, "we" and "us" mean Zaar Trading Ltd.
Who is responsible for your details
If you are a shop's customer
The shop whose loyalty scheme you joined is the controller of your details. It decides why and how they are used. We are the shop's processor: we store and use your details only to run that shop's scheme, on its instructions. Each shop's customer list is kept separate. Other shops cannot see it.
The quickest way to ask about your details is to ask the shop. You can also contact us and we will pass your request on and help the shop answer it.
If you work at a shop, or you contacted us
We are the controller for the details of shop owners and staff who sign in to Tillkeep, and for people who ask us for a demo.
What we collect and why
| Who | What | Why | Lawful basis |
|---|---|---|---|
| Shop customers | First name, mobile number, member code, points history (date, basket total, points) | To run the loyalty scheme: find your card at the till, add points and give rewards | Contract: you asked to join the scheme |
| Shop customers who said yes to offers | How you want offers (text or WhatsApp), and the messages sent to you | To send you offers from the shop | Consent. You can withdraw it at any time with the link in every message or on your card page. |
| Shop customers | A record of what you agreed to: the wording you saw, the date and time, and how you joined | To show the shop has your permission, as the law requires | Legal obligation |
| Shop owners and staff | Name, email address, which shop and role, sign-in times | To give you a secure sign-in and the right access | Contract, and our legitimate interest in keeping accounts secure |
| People who ask for a demo | Name, shop name, town, phone or email, your message | To reply to you | Legitimate interest in answering enquiries |
We do not use your details for automated decisions that affect you, and we do not build advertising profiles.
Who we share details with
We use these companies to run Tillkeep. Each one may only use your details to provide its service to us.
| Company | What they do | Where |
|---|---|---|
| Supabase | Database, sign-in and file storage | Ireland (EU) |
| Cloudflare | Hosts the website and our web addresses | Global network, data passes through it in transit |
| Vercel | Sends visitors from our old web address to tillkeep.com | Global network, data passes through it in transit |
| Twilio | Sends text messages. Receives your mobile number and the message. | United States |
| Google Wallet, only if you choose to add your card to it | Google's own terms apply once your card is in your wallet |
Where details go outside the UK, we rely on the UK government's adequacy regulations or on the UK International Data Transfer Agreement and standard contractual clauses. We share details with the police or other authorities only when the law requires it.
How long we keep details
- Customer details: while you are a member of the shop's scheme. If you or the shop remove your card, we delete your name and number.
- Records of what you agreed to: kept for up to 6 years after you leave or withdraw consent, so the shop can show it had permission.
- Messages sent: kept for 2 years.
- Demo requests: kept for 12 months after our last contact with you.
- Staff accounts: until the shop removes you or closes its account.
Your rights
Under UK data protection law you can ask to see your details, correct them, delete them, limit how they are used, or move them to another service. You can object to us using them, and you can withdraw consent for offers at any time. Withdrawing consent does not affect your points.
To use these rights, ask the shop, or contact us using the details below. We will reply within one month.
How we protect your details
Details are encrypted in transit and stored with access controls, so each shop can only reach its own customers. Staff use their own sign-in and see only the last 4 digits of a mobile. Only the shop owner can see the full customer list.
Cookies and your device
We do not use advertising or tracking cookies. Our cookies page explains the small amount we store on your device and why.
Contact us or complain
Write to Zaar Trading Ltd, 3rd Floor, 86-90 Paul Street, London EC2A 4NE, or use the form on our homepage and say your message is about privacy.
If you are unhappy with how your details have been handled, you can complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint or on 0303 123 1113. We would like the chance to put things right first.
Changes to this notice
If we change how we use your details, we will update this page and the date at the top. If the change matters to you, the shop will tell you before it happens.