Who we are
TipTrack is a trading name of Paul Graham, an independent developer trading as a sole trader, of [Your business address]. For data protection questions, email hello@tiptrack.co.uk. We are registered with the Information Commissioner's Office, registration number [ICO registration number].
This policy explains how we use personal data about people who visit this website, people who use TipTrack at a yard, and business contacts. It doesn't cover the yards' own records about their sellers. See the next section for those.
If you sold metal to a yard
Yards use TipTrack to keep the records the law requires when they buy scrap metal, including your name, address, ID, vehicle and the sale. The yard is responsible for that data (the "controller"). We store and process it for them under contract (as "processor"). To see, correct or ask about your data, contact the yard you sold to. If you contact us, we will pass your request to the yard.
Yards must keep these records for 3 years under the Scrap Metal Dealers Act 2013. When a yard reports a load to DEFRA, the receipt record goes to DEFRA's digital waste tracking service.
What we collect
| Who | What |
|---|---|
| Yard owners and staff | Name, email address, role, yard and business details (including licence and permit numbers), log-in and security records, the actions you take in TipTrack |
| Customers' billing contacts | Name, email, invoices and payments received |
| Anyone who contacts us | Your name, email address and what you tell us |
| Website visitors | Standard server logs kept by our host: IP address, browser and pages requested |
How we use it and why
| Use | Lawful basis |
|---|---|
| Providing TipTrack, managing accounts and sign-ins, sending service emails such as invitations and password resets | Contract with your business; our legitimate interest in running the service for the people at each yard |
| Support, billing and account administration | Contract; legal obligation for accounting records |
| Keeping TipTrack secure, preventing misuse and fixing faults | Legitimate interests |
| Occasional emails to business contacts about TipTrack (you can opt out at any time) | Legitimate interests |
| Meeting legal requests | Legal obligation |
We don't sell personal data, use it for advertising or make automated decisions with legal effects about anyone.
Who we share it with
We use these service providers (sub-processors) to run TipTrack:
| Provider | What for | Where |
|---|---|---|
| Supabase Inc. | Database, file storage (including ID images) and sign-in | London, UK |
| Vercel Inc. | Hosting the website and app | UK and global network; US company |
| Resend Inc. | Sending emails such as receipts, invitations and password resets | Ireland (EU); US company |
| Cloudflare Inc. | Domain name services | Global network; US company |
| DEFRA | Receiving digital waste tracking records when a yard submits them | UK |
We may also share data with professional advisers, or where the law requires it, such as with the police or a court. Transfers outside the UK are protected by UK adequacy regulations or the UK International Data Transfer Addendum to the EU standard contractual clauses.
How long we keep it
- Account and yard data: while the account is open, then 90 days for export, then deleted (backups overwritten within a further 35 days).
- Billing records: as long as tax law requires, currently at least 5 years after the relevant tax return deadline.
- Support emails: 2 years after the conversation ends.
- Security and access logs: up to 12 months.
Keeping data secure
Data is encrypted in transit and at rest. Each yard's records are kept separate at the database level, so one yard can never see another's. Access depends on each person's role, important changes are logged, and DEFRA API codes are stored encrypted.
Your rights
You can ask for a copy of your personal data, ask us to correct or delete it, object to or restrict how we use it, and ask for it in a portable format. Some rights have limits, for example where a yard must keep records by law. Email us and we will reply within one month.
If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We'd appreciate the chance to put things right first.
Cookies
This website sets no cookies and uses no analytics or advertising trackers. Fonts and images are served from our own site.
The TipTrack app uses only strictly necessary cookies and browser storage to keep you signed in. These don't need consent, and we don't use them to track you.
Changes to this policy
We will post any changes here and update the date at the top. If a change is significant, we will email customers. Last updated 25 October 2026.