TASA Live

Privacy Policy

Last Updated: 7 August 2026 · Effective Date: 7 August 2026 · Version: 1.0

1. About Us and This Policy

TASA Live is a Live Commerce Operating System that helps businesses, creators, and brands start, manage, and scale live selling across multiple online platforms. We are committed to protecting your privacy and handling your personal data in a transparent, secure, and lawful manner.

This Privacy Policy explains how we collect, use, store, and share your personal data when you visit our website, use our SaaS platform, mobile applications, or any other services we offer (together, the "Service"). It also tells you about your rights under the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 (DPA 2018), and the Privacy and Electronic Communications Regulations 2003 (PECR), as amended by the Data (Use and Access) Act 2025 (DUAA).

We are the data controller for the personal data we collect about you, except when we act as a data processor on behalf of our customers (for example, when we process their end-user data through our platform). In those cases, we process data only in accordance with our customer's instructions and our Data Processing Agreement.

Our contact details:

  • Business name: TASA Live
  • Website: https://tasalive.co.uk
  • Privacy and data protection enquiries: info@tasalive.co.uk
  • Customer support: info@tasalive.co.uk

2. What Personal Data We Collect

We collect several categories of personal data to provide and improve the Service.

Account and profile information includes your full name, email address, username, password (stored in encrypted form), business name, business information, profile picture, biography, social media handles, and any connected platform accounts you choose to link.

Payment and billing information covers your billing address, payment method details (processed by our payment partners — we do not store full card numbers), transaction history, subscription plan, and billing cycle.

Content and communications includes any content you upload, broadcast, or transmit through the Service — such as videos, product listings, descriptions, images, comments, chat messages — as well as your communications with us (emails, support tickets, live chat) and any feedback, reviews, or survey responses you provide.

Technical and usage data is collected automatically when you use the Service. This includes your IP address, browser type and version, device type and operating system, time zone, referring website, pages you visit, actions you take, access times, and error logs.

Live commerce data includes the products you list, orders and transaction data, viewership and engagement metrics for your live events, analytics, and attribution data from the platforms you connect.

Third-party platform data is received when you connect accounts on YouTube, TikTok, Instagram, Facebook, Whatnot, Shopify, or other platforms. This may include your platform user ID, profile information, channel or page details, content, engagement data, and access tokens necessary to deliver the Service.

AI interaction data comprises the prompts, queries, and inputs you provide to our AI features, the AI-generated content and recommendations you receive, and associated usage data.

Marketing and analytics data comes from cookies and similar tracking technologies, as described in Section 6. It includes marketing engagement (email opens, clicks, preferences), analytics from Google Analytics, and pixel data from Meta and TikTok.

We do not intentionally collect sensitive personal data such as health information, racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, or biometric data. Please do not share such information through the Service.

3. How We Collect Your Personal Data

We collect personal data in three main ways.

First, we collect data directly from you when you create an account, make a purchase, upload content, contact us, or otherwise interact with the Service.

Second, we collect data automatically through cookies, analytics tools, and logging systems as you use the Service.

Third, we receive data from third-party platforms when you connect your accounts on YouTube, TikTok, Instagram, Facebook, Whatnot, Shopify, and other services. We also receive transaction confirmations and limited billing information from our payment processors, Stripe and PayPal, and analytics and marketing data from providers such as Google Analytics, Meta Pixel, and TikTok Pixel.

4. How We Use Your Personal Data

We use your personal data only for legitimate purposes and on clear legal grounds.

To provide and manage the Service — we use your data to create and maintain your account, enable live broadcasting, process product listings, handle orders, and deliver analytics. The lawful basis for this is contractual necessity (Article 6(1)(b) of the UK GDPR).

To process payments and subscriptions — we use billing and payment data to charge you for your chosen plan and manage renewals. This is also based on contractual necessity.

To connect with third-party platforms — we use your data to integrate with YouTube, TikTok, Instagram, Facebook, Whatnot, Shopify, and others, as you authorise. This is based on contractual necessity.

To provide AI features — we process your inputs and queries to generate AI-powered content, recommendations, and insights. This is based on contractual necessity and our legitimate interests in improving the Service (Article 6(1)(f)).

To communicate with you — we use your contact details to send service updates, support messages, and important notices. This is based on contractual necessity or legitimate interests, as appropriate.

For marketing — where you have given your consent, we send you newsletters, promotional offers, and information about new features. You may withdraw your consent at any time. This is based on consent (Article 6(1)(a)).

To improve and develop the Service — we analyse usage patterns, performance, and feedback to enhance our platform, fix issues, and develop new features. This is based on our legitimate interests.

To ensure security and prevent fraud — we monitor activity to protect the Service, our users, and our business from unauthorised access, fraud, and other threats. This is based on legitimate interests and our legal obligations (Article 6(1)(c)).

To comply with legal and regulatory obligations — we retain and disclose data when required by law, such as tax, accounting, or anti-money-laundering regulations. This is based on legal obligation.

AI Transparency Notice: We use artificial intelligence to assist with content generation, live selling support, automation, analytics, workflows, and business insights. When you use our AI features, your inputs are processed to generate responses and recommendations. We do not use your personal data to train our AI models unless you have explicitly consented to such use. We work with reputable AI service providers, including OpenAI, and have implemented appropriate data protection safeguards.

5. Sharing Your Personal Data

We share your personal data only with the categories of recipients described below, and always in compliance with UK data protection law.

Third-party platforms you authorise — when you connect accounts on YouTube, TikTok, Instagram, Facebook, Whatnot, Shopify, Amazon, eBay, or other platforms, we share the necessary data with those platforms to provide the Service (for example, to broadcast your live event, sync products, or process orders). Your use of those platforms remains subject to their own terms and privacy policies.

Service providers and sub-processors — we use trusted third-party providers to help us deliver the Service. These include cloud hosting infrastructure, payment processors (Stripe, PayPal), analytics providers (Google Analytics), marketing and advertising platforms (Meta Pixel, TikTok Pixel), email and communications services, AI service providers (OpenAI), authentication services (Google OAuth), and customer support tools. We require all these providers to process personal data in accordance with UK data protection law and to implement appropriate security measures.

Legal and regulatory disclosures — we may disclose your personal data if required by law, regulation, or legal process, or if we reasonably believe such disclosure is necessary to protect the rights, property, or safety of TASA Live, our users, or others, to enforce our Terms and Conditions, or to respond to lawful requests from public authorities.

Business transfers — if we are involved in a merger, acquisition, or sale of all or part of our business, your personal data may be transferred as part of that transaction. We will notify you of any such change and inform you of your rights.

Aggregated and anonymised data — we may share aggregated, anonymised data that does not identify you for research, analytics, and marketing purposes.

6. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience, analyse usage, and deliver targeted advertising.

Cookies are small text files placed on your device when you visit a website. They help us remember your preferences, understand how you interact with the Service, and deliver relevant content. We use the following types of cookies.

Strictly Necessary Cookies are essential for the operation of the Service — for example, for authentication, security, and session management. These are exempt from consent requirements under the DUAA 2025 amendments to PECR.

Appearance or Functionality Cookies ensure the correct display and functionality of the website. These are also exempt from consent.

Statistical or Analytics Cookies collect aggregate information to help us improve the Service. Under the DUAA 2025, these are now exempt from consent, provided we give clear information and a simple mechanism to object.

Marketing or Advertising Cookies are used to deliver targeted advertising and measure campaign effectiveness. These require your explicit consent.

Preference Cookies remember your settings and choices. These also require your consent.

When you first visit our website, you will see a cookie consent banner that allows you to accept all cookies, reject non-essential cookies, or customise your preferences. You can also manage your preferences at any time through our Cookie Preference Centre or your browser settings. Please note that disabling certain cookies may affect the functionality of the Service.

We allow third-party providers (such as Google, Meta, and TikTok) to place cookies on your device for analytics and advertising purposes. These third parties may collect data about your online activities over time and across different websites.

We comply with PECR as amended by the DUAA 2025. From 5 February 2026, we do not require consent for cookies used for ensuring correct website appearance or functionality, or for collecting aggregate statistical information for service improvement, provided we offer clear information and a means to object. All other non-essential cookies require your consent.

7. How We Store and Protect Your Personal Data

We take the security of your personal data seriously and implement industry-standard measures to protect it.

Data storage is on secure cloud infrastructure. Hosting locations will be confirmed as we scale, but we ensure that any storage complies with UK data protection law.

Security measures include encryption of data in transit (using TLS/SSL) and at rest, secure authentication and access controls, regular security monitoring and vulnerability assessments, staff training on data protection and security, and incident response procedures.

Data retention is limited to what is necessary for the purposes for which the data was collected. We retain account data for the duration of your active account and for a reasonable period after account closure to comply with legal obligations and legitimate business purposes. Transaction data is retained as required by tax and accounting laws (typically six to seven years). Content and broadcast data is kept while you maintain your account, unless you request deletion. Marketing data is retained until you withdraw your consent or unsubscribe. Log and analytics data is kept for a limited period to analyse and improve the Service. After the retention period expires, we securely delete or anonymise your personal data.

8. International Data Transfers

We may transfer your personal data to countries outside the United Kingdom, including to service providers located in the United States and other jurisdictions.

Where we transfer personal data outside the UK, we ensure appropriate safeguards are in place. These may include the UK International Data Transfer Addendum to the standard contractual clauses, adequacy decisions (where the European Commission has recognised a country as providing adequate protection), or binding corporate rules (where applicable). You can request a copy of the safeguards we have implemented by contacting us at info@tasalive.co.uk.

9. Your Data Protection Rights

Under the UK GDPR, you have the following rights regarding your personal data.

  • Right of access — you can request a copy of the personal data we hold about you.
  • Right to rectification — you can ask us to correct inaccurate or incomplete personal data.
  • Right to erasure(also known as the "right to be forgotten") — you can ask us to delete your personal data, subject to certain exceptions.
  • Right to restriction — you can ask us to restrict processing of your personal data in certain circumstances.
  • Right to data portability — you can request to receive your personal data in a structured, commonly used, and machine-readable format.
  • Right to object — you can object to processing based on legitimate interests or for direct marketing purposes.
  • Right to withdraw consent — where we rely on your consent, you can withdraw it at any time.
  • Right to lodge a complaint— you have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data protection rights have been violated.

To exercise any of these rights, please contact us at info@tasalive.co.uk. We will respond within one month of receiving your request. We may ask for identification to verify your identity. There is no charge for exercising your rights, except in certain circumstances (for example, manifestly unfounded or excessive requests).

10. Children's Privacy

Our Service is not intended for children under the age of 13 (or the minimum age required by applicable law in your jurisdiction). We do not knowingly collect personal data from children. If we become aware that we have collected personal data from a child without parental consent, we will take steps to delete that data promptly.

11. Third-Party Links and Services

The Service may contain links to third-party websites, platforms, and services. This Privacy Policy does not apply to those third parties. We are not responsible for the privacy practices of third-party platforms, including YouTube, TikTok, Instagram, Facebook, Whatnot, Shopify, Stripe, PayPal, or any other platform you connect through the Service. We encourage you to review the privacy policies of those third parties.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or regulatory guidance. We will notify you of material changes by email, through the Service, or by posting a notice on our website. The "Last Updated" date at the top of this policy indicates when it was last revised. Your continued use of the Service after any changes constitutes acceptance of the updated policy.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data protection practices, please contact us:

TASA Live
Email: info@tasalive.co.uk
Website: https://tasalive.co.uk

If you are in the UK and wish to lodge a complaint, you can contact the Information Commissioner's Office (ICO):

  • Website: https://ico.org.uk
  • Telephone: +44 7743339105
  • Address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF