Legal
This policy explains what personal information Aster IT Ltd collects through the Epos One website, apps and platform, why, who we share it with, and what choices you have. We have tried to keep it plain. If anything is unclear, email us at hello@eposone.net.
Aster IT Ltd runs Epos One (“we”, “us”). We are the controller of the personal information described in sections 3 to 5, which means we decide how and why it is used. We are registered in England and Wales, company number 17491204, ICO registration number C2051752.
Epos One is software that businesses use to run their shops, cafes and restaurants. That means we handle personal information in two ways.
When we are the controller. This covers visitors to our website, people who sign up for an account, and the staff and owners who use a business account. This policy covers that information.
When we are the processor. A business using Epos One puts its own customers’ information into the platform: sales records, loyalty and gift card details, and table booking details such as a diner’s name, phone number or email. For that information the business is the controller and we only process it on its instructions. If you are a customer or diner and want to see, correct or delete your details, please contact the business first. If you contact us, we will pass your request on to them.
When you visit our website our servers record standard technical information such as your IP address, browser type, the pages requested and the time. We use this to keep the site secure and working. We do not use advertising or analytics cookies (see our cookie notice).
We do not sell personal information, and we do not use the information businesses put into Epos One for our own marketing.
If a restaurant switches on booking text messages or emails, we send confirmations, reminders and deposit links to the diner on the restaurant’s behalf. We pass the phone number or email address to our messaging provider to deliver the message. For billing and fault finding we keep a log that records the kind of message, when it was sent, whether it succeeded and only the last four digits of the number.
We use trusted service providers who handle information only to help us run Epos One, under agreements that require them to protect it:
We may also share information if the law requires it, to protect our rights or safety or those of others, or as part of a sale or reorganisation of our business (in which case the new owner must honour this policy).
Where a business uses Epos One with a reseller, the reseller can see that business’s account so it can support it.
Some of our providers, such as Stripe, Twilio and Google, may process information outside the UK. Where they do, we make sure an approved safeguard is in place, such as a UK adequacy decision, the UK International Data Transfer Agreement or the UK Addendum to the EU standard contractual clauses.
We use measures such as encrypted connections, scrambled password and PIN storage, access controls so each business sees only its own data, and records of important actions. No system is perfectly secure, so please also keep your own passwords and staff PINs private, and tell us straight away if you think an account has been misused.
Under UK data protection law you can ask us to give you a copy of your information, correct it, delete it, restrict or object to how we use it, and in some cases move it to another provider. Where we rely on your consent you can withdraw it at any time. To use these rights, email hello@eposone.net. We may need to check who you are first, and we will reply within one month.
You can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113. We would appreciate the chance to put things right first.
Epos One is built for businesses and is not aimed at children. We do not knowingly collect information about children for our own purposes.
If we make an important change we will update the date above and, for account holders, tell you by email or in the product before it takes effect.
Aster IT Ltd, hello@eposone.net.