Privacy Policy

1. Who We Are

TwoTicks is operated by:

We act as the Data Controller for all personal data collected through the TwoTicks platform. If ownership or control of TwoTicks transfers in future (for example, to Copy This Ltd, a company under the same ownership), your data may be transferred as part of that change, while maintaining the same protection standards described here.

2. What Information We Collect

We collect:

• Account Information – name, email, password, and login details.
• Payment Information – billing details and transaction ID (processed via Stripe; we do not store card numbers).
• Usage Data – IP address, browser type, device information, and interactions (via Google Analytics or similar tools).
• Marketing Data – name and email address for updates or campaigns.
• Support Communications – messages or emails sent to our team.

We do not currently collect identity verification (KYC) data. If we introduce KYC in future, we will update this Policy and clearly inform users beforehand.

3. How We Use Your Information

We process data to:

• Provide and manage your TwoTicks account;
• Process payments via Stripe;
• Communicate updates and marketing offers (with consent);
• Improve functionality and security;
• Comply with legal obligations;
• Prevent misuse or fraud.

4. Lawful Basis for Processing

Under UK GDPR, we rely on:

• Contract – to provide subscribed Services;
• Consent – for marketing communications;
• Legal Obligation – for record-keeping and compliance;
• Legitimate Interest – to maintain security and improve services.

5. Cookies and Tracking

We use cookies and similar technologies for site functionality, analytics, and marketing (e.g. Google Analytics, Meta Pixel). You can control cookies through your browser settings. Continued use of the site implies consent.

6. Sharing Your Information

We share data only with trusted partners:

• Stripe (payment processing);
• Email/CRM providers (Aweber or GoHighLevel);
• Analytics providers (Google Analytics, Meta);
• Hosting and IT partners;
• Professional advisers;
• Regulatory authorities (where required).

7. International Transfers

Where data is transferred outside the UK or EEA, we ensure protection using UK-approved Standard Contractual Clauses or equivalent safeguards.

8. Data Retention

We keep data as long as necessary to deliver services, meet legal obligations, or resolve disputes. Marketing data is kept until consent is withdrawn.

9. Your Data Rights

You have the right to access, rectify, erase, restrict, or object to processing, and to data portability. You may withdraw consent at any time by emailing [email protected]. We respond within one calendar month.

10. Data Security

We use technical and organisational measures such as HTTPS encryption, secure password storage, and access controls to protect your data. No system is entirely immune to risk, and users should take care to maintain strong passwords.

11. Third-Party Links

We are not responsible for the privacy practices of third-party websites linked from our site.

12. Children’s Privacy

TwoTicks is not for users under 18. We do not knowingly collect data from minors. Contact [email protected] if you believe a child’s data has been provided.

13. Changes to This Policy

We may update this Privacy Policy periodically. The “Last Updated” date indicates the latest revision. Continued use of our Services after updates implies acceptance of the changes.

14. Contact Information

Privacy Team

If unsatisfied with our response, you may contact the Information Commissioner’s Office (ICO) at www.ico.org.uk.