ChuckIn

Who we are

ChuckIn is a temporary digital group-payment and collection service designed to help people contribute towards purchases and shared expenses.

For data-protection purposes, the organisation responsible for your personal information is:

ChuckIn Ltd
Trading as ChuckIn
Company number: 0158965
Registered office: 28 Fairway Avenue, Ivybridge, PL21 9HZ
Email: privacy@chuckin.co.uk
Telephone: [insert telephone number, if used]

We are the data controller for the personal information described in this notice.

This website is currently operating in prototype mode. No real payments are taken, held, released or refunded through the prototype unless we clearly tell you otherwise.

Who this notice applies to

This notice applies to:

  • Prospective pilot users and commercial partners
  • People who create or manage a ChuckIn
  • People who contribute to a ChuckIn
  • People who receive a ChuckIn payment or purchase
  • People who contact us for support
  • Visitors to our website

Personal information we collect

The information we collect depends on how you use ChuckIn.

Organisers

When you create or manage a ChuckIn, we may collect:

  • your name;
  • email address;
  • mobile telephone number, where provided;
  • login, magic-link or secure organiser-link information;
  • the title and purpose of your ChuckIn;
  • the target amount;
  • closing date;
  • expected number of contributors;
  • intended recipient, merchant or purchase;
  • messages and information you provide to contributors;
  • support requests and correspondence;
  • technical and security information connected with your use of the service.

When live payment services are introduced, we may also collect or receive:

  • identity-verification status;
  • date of birth;
  • address;
  • payout-account details;
  • fraud and compliance-check results;
  • transaction, refund and chargeback information.

We intend to use regulated payment and identity-verification providers for these services. ChuckIn should not store complete payment-card details itself.

Contributors

When you contribute or test the contribution journey, we may collect:

  • your name or chosen display name;
  • email address;
  • mobile number, where provided;
  • contribution amount;
  • optional message;
  • payment, refund and transaction status;
  • the ChuckIn you contributed to;
  • date and time of the contribution;
  • technical, fraud-prevention and security information.

In the current prototype, contributions are simulated and no real payment-card details should be collected.

Website visitors

We may collect:

  • IP address;
  • browser and device information;
  • pages viewed;
  • dates and times of visits;
  • referring website;
  • cookie preferences;
  • error, security and diagnostic logs.

How we collect your information

We collect personal information:

  • directly from you when you complete a form, create a ChuckIn, contribute or contact us;
  • from another user where they invite you or name you as a recipient;
  • automatically through website logs and cookies;
  • from payment, verification, messaging and fraud-prevention providers when the live service is introduced;
  • from professional advisers, public registers or law-enforcement bodies where necessary and lawful.

Where somebody else provides your information, we will provide appropriate privacy information where required.

Why we use your information

We may use personal information to:

  • Send marketing communications where permitted
  • Create and operate ChuckIns
  • Generate public contributor links and private organiser links
  • Calculate goals, fees and suggested contribution amounts
  • Send organiser access links, receipts and service notifications
  • Display contribution progress
  • Process, confirm, release or refund payments when live payments are available
  • Verify organisers and recipients
  • Prevent fraud, misuse and money laundering
  • Respond to questions, complaints and disputes
  • Maintain security and audit records
  • Test and improve the prototype
  • Understand how the website is used
  • Comply with legal, tax, accounting and regulatory obligations
  • Establish, exercise or defend legal claims

Our Lawful Basis

UK data-protection law requires us to have a lawful basis for each use of personal information. Consent is not required for every type of processing.

We expect to rely on the following bases:

Contract

We use information where it is necessary to:

  • create and manage a ChuckIn;
  • provide organiser access;
  • provide the contribution journey;
  • process transactions, refunds and payouts;
  • deliver requested customer support;
  • take steps requested before entering into a contract.

The contract basis only applies where the processing is genuinely necessary to deliver the service.

Legitimate interests

We may use information where necessary for our legitimate interests or those of another person, provided those interests are not overridden by your rights.

These interests may include:

  • operating and improving ChuckIn;
  • securing the website and accounts;
  • preventing fraud and misuse;
  • keeping appropriate business records;
  • analysing service performance;
  • responding to complaints;
  • communicating important service information.

Where required, we will assess and document these interests.

Legal obligation

We may use information to comply with:

  • payment and financial-services requirements;
  • fraud and anti-money-laundering requirements;
  • tax and accounting law;
  • court orders;
  • regulatory requests;
  • data-protection obligations.

Consent

We may rely on consent for:

  • optional marketing emails;
  • optional marketing text messages;
  • non-essential cookies;
  • certain optional uses where you are given a genuine choice.

You may withdraw consent at any time, although this will not affect processing carried out before withdrawal.

Legal claims and vital interests

In limited circumstances, we may process information where necessary to protect someone’s vital interests or to establish, exercise or defend legal claims.

Public information on a ChuckIn Page

A public ChuckIn page may show:

  • the ChuckIn title and purpose;
  • organiser name or chosen display name;
  • target and progress;
  • closing date;
  • number of contributors;
  • contributor names where contributors choose to display them;
  • optional contributor messages.

We will not publicly display contributor email addresses, payment details, organiser access codes or private contact information.

Organisers must not include sensitive personal information about another person in a ChuckIn description without a proper reason and their permission where appropriate.

Who we share your data with

We may share personal information with:

  • website, database and hosting providers;
  • email and SMS providers;
  • payment processors;
  • regulated payment or electronic-money partners;
  • identity-verification providers;
  • fraud-prevention and compliance providers;
  • analytics and cookie providers;
  • customer-support systems;
  • accountants, solicitors, insurers and professional advisers;
  • merchants, recipients or suppliers where necessary to complete the agreed purchase;
  • regulators, courts, law-enforcement bodies and public authorities where legally required;
  • a buyer, investor or successor if the business or its assets are sold or reorganised.

We require service providers to use information only for authorised purposes and to protect it appropriately.

When live payment providers are selected, we will update this notice with their identities or provide links to their privacy information.

Payment Information

The current prototype does not take real payments.

When live payments are introduced:

  • payment information will normally be entered into a secure payment provider’s system;
  • ChuckIn should receive transaction references and status information rather than full card details;
  • regulated partners may carry out identity, fraud and compliance checks;
  • those providers may act as independent controllers for some processing and processors for other processing.

Their privacy notices will explain how they use information for their own legal and regulatory responsibilities.

International transfers

Some service providers may process personal information outside the United Kingdom.

Where information is transferred internationally, we will use an appropriate safeguard where required, such as:

  • UK adequacy regulations;
  • the UK International Data Transfer Agreement;
  • the UK Addendum to approved contractual clauses;
  • another lawful transfer mechanism.

You may contact us for more information about the safeguards applying to a particular transfer.

How long we keep information

We keep information only for as long as reasonably necessary for the purposes described in this notice.

Our intended retention periods are:

InformationIntended retention
Incomplete prototype formsUp to 30 days
Prototype ChuckIns and simulated contributionsUp to 12 months after testing ends
Active live ChuckIn recordsFor the duration of the ChuckIn
Completed transaction and accounting recordsNormally 6 years after the relevant financial year
Organiser and contributor communicationsNormally up to 3 years after the matter closes
Complaints, disputes and chargebacksNormally 6 years after resolution
Fraud and compliance recordsAccording to legal and provider requirements
Marketing preferencesUntil withdrawal, plus a suppression record where needed
Website security logsNormally 6–12 months
Cookie and analytics informationAs stated in our cookie notice

These periods may be extended where information is required for a dispute, legal claim, regulatory investigation or legal obligation.

Before launch, the final periods should be confirmed against the requirements of the selected regulated payment partner and legal adviser.

Security

We use technical and organisational measures intended to protect personal information, including:

  • access controls;
  • secure organiser links or passwordless access;
  • encryption in transit;
  • restricted administrative access;
  • activity and security logging;
  • secure hosting and backups;
  • supplier due diligence;
  • staff or contractor confidentiality obligations;
  • incident-management processes.

No online system is completely risk free. Users should keep organiser links confidential and contact us immediately if they believe a link or account has been compromised.

Your rights

Depending on the circumstances, you may have the right to:

  • be informed about how your information is used;
  • request access to your personal information;
  • ask us to correct inaccurate information;
  • ask us to erase information;
  • ask us to restrict processing;
  • object to processing based on legitimate interests;
  • receive certain information in a portable format;
  • withdraw consent;
  • object to direct marketing;
  • ask for human intervention in certain automated decisions;
  • complain to the ICO.

Some rights are subject to exemptions and may not apply in every circumstance.

To exercise a right, contact:

privacy@chuckin.co.uk

We may need to verify your identity before responding.

Automated decisions and profiling

The prototype does not make decisions producing legal or similarly significant effects through solely automated processing.

When live payments are introduced, payment and fraud-prevention providers may use automated systems to assess transactions, identity or fraud risk. Where such processing has a significant effect, we or the relevant provider will give further information about the logic, importance and possible consequences, together with any applicable rights.

Marketing

We will not automatically add organisers or contributors to general marketing lists merely because they used ChuckIn.

We may send essential service messages without marketing consent, including:

  • organiser access links;
  • contribution receipts;
  • deadline reminders;
  • funded, expired or refunded notifications;
  • security or account messages;
  • important changes affecting the service.

Marketing emails or texts will only be sent where permitted under data-protection and electronic-marketing rules. You can unsubscribe at any time.

Cookies

We may use:

  • strictly necessary cookies for security, sessions and website functionality;
  • preference cookies;
  • analytics cookies;
  • marketing cookies, where introduced.

Non-essential cookies will not be used without the required choice or consent.

A separate Cookie Notice should explain the cookies actually used by the final website.

Children

ChuckIn is not presently intended for independent use by children under 18.

Organisers should not invite children to enter payment or personal information without appropriate adult involvement.

Where we later design a service intended for children, we will provide privacy information in language they can understand and apply the additional protections required for children’s information. The ICO confirms that children have data-protection rights and that privacy information must be presented appropriately for them.

Complaints

Please contact us first so we can try to resolve your concern:

Email: privacy@chuckin.co.uk
Address: 28 Fairway Avenue, PL21 9HZ

You also have the right to complain to the Information Commissioner’s Office.

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

The ICO’s contact details and complaint routes are available through its official website.

Changes to this notice

We may update this notice when:

  • the prototype changes;
  • live payment services are introduced;
  • we appoint new regulated or technical providers;
  • laws or regulatory requirements change;
  • we add new features.

The latest version will always be published on this page, with the updated date shown at the top.

Where a change materially affects how we use existing information, we will provide an additional notice where appropriate.