Privacy Policy

1. Information We Collect

When you submit forms, we collect contact details and business information you provide to process enquiries, trials, and subscriptions.

2. How We Use Information

We use data to contact you, deliver requested services, support account setup, and improve the reliability and performance of our platform.

3. Data Sharing

We do not sell personal data. Data may be shared with trusted service providers where required for hosting, billing, and service delivery.

4. Security and Retention

We apply technical and organisational controls to protect data and retain information only as long as needed for operational and legal purposes.

5. Your Rights

You can request access, correction, or deletion of your personal information by contacting us.

6. Website Analytics

We use Cloudflare Web Analytics to understand how this website is used. It records page views, the site that referred you, and your country. It does not use cookies, does not collect or store information that identifies you, and does not track you across other websites. No advertising or marketing profile is built from it.

7. The Loyalty247 Mobile App

This section covers the Loyalty247 app for iPhone and Android, which is used by customers of businesses that run epos247. Everything in it is in addition to the sections above.

7.1 What the app collects

When you create a Loyalty247 account we collect your name, your email address and a password. The password is handled by Google Firebase Authentication and is never visible to us or to the businesses you visit.

7.2 What the app shows you

The app links you to businesses that already hold a customer record with your email address, and shows you what that business holds: your stamp cards, loyalty points, club account balance and top-ups, gift cards, table bookings, event tickets and your purchase history with them. That information belongs to the business, is created by the business on its own till, and is shown to you through the app — it is not gathered by us.

7.3 What the app does not do

The app contains no advertising, no advertising identifiers and no third-party tracking or analytics. It does not track you across other apps or websites, does not access your contacts, camera, photos or location, and no data from it is ever sold.

7.4 Who processes the data

Account and business data is stored on Google Firebase (Authentication and Cloud Firestore) acting as our processor. Data is transmitted over encrypted connections.

7.5 Deleting your account

You can delete your Loyalty247 account at any time from inside the app: open your profile from the icon in the top corner, then choose Delete Account. This permanently removes your sign-in and the record of which businesses you are linked to. You can also request deletion at epos247.com/delete-account.html.

Deleting your Loyalty247 account does not delete the customer record each business holds about you. That record — including your stamps, points, balance and purchase history with them — is the business's own record of your trade with them, and they are the data controller for it. To have that removed, contact the business directly; they can delete it from their epos247 back office.

7.6 Children

The app is not directed at children and we do not knowingly create accounts for anyone under 13.

8. The Rota247 Staff App

This section covers the Rota247 app for Android and the staff portal at rota.epos247.com, both used by staff of businesses that run epos247. Everything in it is in addition to the sections above.

8.1 What the app collects

When you register — using a PIN issued by your employer — we create a sign-in holding your name, your email address and a password. The password is handled by Google Firebase Authentication and is never visible to us or to your employer.

When you clock in or out, the app records the time. If, and only if, you allow location access, it also records the approximate location of the device at that moment, so your employer can confirm where a shift was started or ended. Location is optional: if you decline the permission the app still clocks you in and no location is recorded. Location is read only at the moment you clock in or out — never in the background.

If you choose to add a profile photo, the app uses your camera to take one and stores it on your staff record so that you can be identified on the rota. Taking a photo is optional.

8.2 What the app shows you

Your shifts, your holiday entitlement and requests, your tips, to-do lists assigned to you, memos from your employer, and your clock-in history. That information belongs to your employer, is created in their epos247 back office, and is shown to you through the app — it is not gathered by us.

8.3 What the app does not do

The app contains no advertising, no advertising identifiers and no third-party tracking or analytics. It does not track you across other apps or websites, does not access your contacts or photo library, and does not track your location in the background. No data from it is ever sold.

8.4 Who processes the data

Account and staff data is stored on Google Firebase (Authentication and Cloud Firestore) acting as our processor. Data is transmitted over encrypted connections.

8.5 Deleting your account

You can delete your Rota247 sign-in at any time from inside the app: scroll to the bottom of the staff screen and choose Delete account, then confirm with your password. This permanently removes your sign-in and the record of which businesses it is linked to. You can also request deletion at epos247.com/delete-account.html.

Deleting your Rota247 sign-in does not delete the staff record your employer holds about you — your shifts, holiday requests, clock-in times and any locations recorded with them, tips and your staff photo. Those are your employer's employment records and your employer is the data controller for them. To have them removed, speak to your manager; they can delete your staff record from their epos247 back office.

8.6 Children

The app is not directed at children. Accounts are created only for people employed by a business that uses epos247.

9. The Stock247 Scanner App

This section covers the Stock247 app for Android handhelds and barcode scanners, used by staff of businesses that run epos247. Everything in it is in addition to the sections above.

9.1 What the app collects

You sign in with the email address and password of an epos247 account issued by your employer. The app records which account performed a stock count, delivery or return, so the business has an audit trail of who changed what.

9.2 What the app shows you

Your employer's product, supplier and stock records, and the counts, deliveries and returns raised against them. It shows business data, not personal data about customers.

9.3 What the app does not do

It does not use the advertising identifier, does not track your location, and does not sell or share data with advertisers. The camera has two uses: reading barcodes, where frames are analysed on the device and never stored or sent anywhere; and photographing a product, where the picture you choose to take is uploaded and saved against that product in your employer's catalogue.

9.4 Who processes the data

Data is held in Google Firebase on behalf of Basicly Ltd, acting as our processor. Data is transmitted over encrypted connections.

9.5 Deleting your account

Your Stock247 sign-in is the epos247 account your employer issued. To have it deleted, ask your employer to remove it in their epos247 back office, or request deletion at epos247.com/delete-account.html. Deleting your sign-in does not delete the stock records your employer holds; those belong to the business.

9.6 Children

The app is not directed at children. Accounts are created only for people employed by a business that uses epos247.

10. Contact

Privacy enquiries: sales@epos247.com.