Privacy Policy

1. Who We Are & Information We Collect

Tabsy (registered office: 61 Bridge Street, Kington, HR5 3DJ) is the data controller for personal data processed through the Tabsy platform. You can contact us at contact@tabsy.co.uk.

We collect:

  • Account information: name, mobile phone number, email address.
  • Identity verification data: where required, a photo ID document and a liveness/face-match image, processed on our behalf by our identity verification provider.
  • Contract information: amounts, dates, repayment terms and interest entered by Lenders and Borrowers, and confirmation/dispute records.
  • Communications data: the content and delivery status of SMS and in-app messages sent through the Platform.
  • Technical and usage data: device identifiers, IP address, log data, and behavioural signals used for fraud prevention.

2. How We Use Your Information

We use your information to:

  • create and operate your account, and provide the Contract and reminder features you use;
  • verify your identity and detect and prevent fraud;
  • send the SMS and in-app reminders that are the core service you have signed up for;
  • investigate reports of fraud, abuse or disputes;
  • comply with our legal and regulatory obligations.

Our legal bases for this processing are: performance of a contract with you (running your account and Contracts), our legitimate interests (fraud prevention, service improvement), consent (where required, for example for optional marketing communications), and legal obligation (for example, responding to law enforcement requests).

3. Sharing Your Information & International Transfers

We share personal data with:

  • Identity verification providers (for example Onfido or Yoti), to check documents and confirm you are a real, live person;
  • SMS and messaging providers, to deliver reminder messages;
  • Fraud detection and risk-scoring providers, to assess the risk of a Contract or account;
  • Regulators, law enforcement or courts, where required by law;
  • Professional advisers (lawyers, auditors) where necessary.

We do not sell your personal data. Where a provider is based outside the UK, we put appropriate safeguards in place (such as the UK's International Data Transfer Agreement or adequacy regulations) before transferring your data.

4. Retention, Security & Your Rights

We keep personal data for as long as your account is active, and for a period afterwards as needed to resolve disputes, meet legal obligations, or satisfy our fraud and audit records — generally no longer than 6 years after a Contract is closed, unless a longer period is required by law or an ongoing dispute.

We use technical and organisational measures (encryption, access controls, and vetted third-party processors) to protect your data.

Under UK GDPR, you have the right to: access the personal data we hold about you; correct inaccurate data; ask us to delete data in certain circumstances; object to or restrict certain processing; receive your data in a portable format; and request human review of a significant decision made about you by an automated system (for example, an automated fraud suspension). To exercise these rights, contact us at contact@tabsy.co.uk. You also have the right to complain to the Information Commissioner's Office (ico.org.uk) if you believe we have not handled your data properly.

5. Children's Data, Automated Decisions & Changes

Tabsy is not intended for anyone under 18, and we do not knowingly collect data from children. We use automated systems, including AI-based tools, to help assess fraud risk and moderate message content; significant decisions such as account suspension are reviewed by a person on request, as set out above.

We may update this Privacy Policy from time to time; we will notify you of material changes. Questions about this policy can be sent to contact@tabsy.co.uk.