Privacy policy

Who we are

UnitedPos is provided by United Payments Ltd, a company registered in England and Wales (number 11274512), registered office 601 Green Lanes, London N8 0RE. For the data described in this policy we are the controller.

Contact us about your data at info@upayments.co.uk or 0333 567 3568.

What this policy covers

It covers people who:

• visit unitedpos.co.uk;
• contact us or book a demo;
• run a business on UnitedPos, and its owners, managers and staff who sign in to the till or the back office.

When a restaurant uses UnitedPos, the data about its own guests (orders, bookings, customer records, allergies they tell staff about) belongs to the restaurant. The restaurant is the controller and we process that data for it, under our data processing terms. Questions about it are best sent to the restaurant first.

Personal data we collect

• Enquiries: your name, business, email, phone number and what you tell us.
• Customer accounts: the business's name and address, the names, email addresses and roles of its owners and managers, and billing details.
• Staff on the till: name, role, permissions, a PIN kept only in a form that cannot be turned back into the PIN, clock-in times and, if the business enters it, pay rate.
• Service records: which till did what and when (an audit trail), app version, device identifiers, IP addresses and error logs.
• Support: what you tell us when asking for help, and notes of calls.

Why we use it and our lawful bases

Who we share it with

We do not sell personal data. We share it only with:

• service providers who host and run UnitedPos for us (servers, databases, the back office website and email delivery), under contracts that bind them to our instructions;
• payment providers and delivery platforms the business chooses to connect, to the extent needed for that connection;
• our professional advisers, such as accountants and lawyers;
• police, regulators or courts where the law requires it.

Where the data is kept

We host UnitedPos in the United Kingdom where we can. If a provider stores or reaches data outside the UK, we only use it where the transfer is protected by UK adequacy regulations, the UK International Data Transfer Agreement or the UK addendum to the EU standard contractual clauses.

How long we keep it

• Enquiries that do not lead to a contract: 2 years.
• Customer account records: while the contract runs, then 6 years for tax and legal claims.
• Server logs: 90 days, unless needed to look into a fault or attack.
• A business's own data in UnitedPos: as set out in the data processing terms; it can be exported, then is deleted after the contract ends.

Keeping it safe

Data is encrypted between the tills, the back office and our servers, and the data kept on each till is encrypted on the device. Staff sign in with their own PIN or password, access is limited by role, and changes are recorded in an audit trail. Card numbers never pass through UnitedPos: the card machine deals with the card.

Your rights

Under UK data protection law you can ask us to:

• give you a copy of your personal data;
• correct it, or complete it;
• delete it, or limit how we use it;
• send it to you or another company in a common format;
• stop using it where we rely on legitimate interests.

Write to info@upayments.co.uk. We reply within one month. It is free unless a request is plainly unfounded or excessive.

Cookies

This website sets no cookies. The back office uses two cookies to keep you signed in. Details are in our cookie policy.

Complaints

Please tell us first and we will try to put it right. You can also complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

Changes to this policy

We will update this page when what we do changes, and tell customers about changes that matter to them by email.