Privacy Notice

This Privacy Notice explains how The Solution ("we", "us") collects and uses personal data when you use our hospitality operations platform (the "Service").

1. Data controller

The Solution is the data controller for personal data processed through the Service. You can contact us via the support channel inside the app.

2. Personal data we collect

• Account data: name, email, login credentials, staff PINs.
• Business data you enter: menu items, inventory, sales records, rota, staff details.
• Support messages you send us.
• Usage and telemetry: pages viewed, actions taken, error logs.
• Device and technical data: IP address, browser type, device identifiers.

Payment card details are collected and processed by Stripe, not by us.

3. Purposes and legal bases

• Providing the Service and your account — performance of a contract.
• Billing, tax and invoicing (via Stripe) — performance of a contract and legal obligation.
• Security, fraud prevention and abuse detection — legitimate interests.
• Product improvement and analytics — legitimate interests.
• Customer support — performance of a contract.
• Marketing emails — only with your consent, which you may withdraw at any time.

4. Who we share data with

• Stripe — our Merchant of Record for the sale of subscriptions, payments, tax compliance, invoicing and refunds.
• Hosting and infrastructure providers — Supabase and Cloudflare, who host our database, storage and application runtime.
• Support and analytics tooling — used to operate and improve the Service.
• Professional advisers — legal and accounting, where necessary.
• Authorities — where required by law.

5. International transfers

Some of our providers are located outside the UK/EEA. Where data is transferred internationally, we rely on adequacy decisions or Standard Contractual Clauses as appropriate safeguards.

6. Retention

We keep personal data for as long as your account is active and for a reasonable period afterwards to meet legal, tax and accounting obligations. Data that is no longer needed will be deleted or anonymised.

7. Your rights

Under UK GDPR you have the right to access, rectify, erase, restrict, port and object to processing of your personal data, and to withdraw consent. You may also lodge a complaint with the UK Information Commissioner's Office (ico.org.uk). We aim to respond within one month.

8. Security

We use appropriate technical and organisational measures, including encryption in transit, access controls and role-based permissions, to protect personal data.

9. Cookies

We use essential cookies and local storage to keep you signed in and to remember your preferences. We may use limited analytics cookies to understand usage. You can manage cookies via your browser settings.

10. Changes

We may update this notice from time to time. Material changes will be notified in-app or by email.