Privacy Policy

Last updated: 02/10/24

At Retail Systems Technology, doing business as RSTEPOS.COM ("RSTEPOS", "we", "us", "our"), we are committed to protecting your personal information and your right to privacy. If you have any questions or concerns about this privacy notice, or our practices with regards to your personal information, please contact us at support@rstepos.com.

When you visit our website rstepos.com (the "Website"), and more generally, use any of our services (the "Services", which include the Website), we appreciate that you are trusting us with your personal information. We take your privacy very seriously. In this privacy notice, we seek to explain to you in the clearest way possible what information we collect, how we use it, and what rights you have in relation to it. We hope you take some time to read through it carefully, as it is important. If there are any terms in this privacy notice that you do not agree with, please discontinue use of our Services immediately.

This privacy notice applies to all information collected through our Services (which, as described above, includes our Website), as well as any related services, sales, marketing, or events.

Please read this privacy notice carefully as it will help you understand what we do with the information that we collect.

TABLE OF CONTENTS

  1. WHAT INFORMATION DO WE COLLECT?

  2. HOW DO WE USE YOUR INFORMATION?

  3. WILL YOUR INFORMATION BE SHARED WITH ANYONE?

  4. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?

  5. HOW LONG DO WE KEEP YOUR INFORMATION?

  6. HOW DO WE KEEP YOUR INFORMATION SAFE?

  7. WHAT ARE YOUR PRIVACY RIGHTS?

  8. CONTROLS FOR DO-NOT-TRACK FEATURES

  9. DO WE MAKE UPDATES TO THIS NOTICE?

  10. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?

  11. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?

  12. COMPLAINTS TO THE ICO

WHAT INFORMATION DO WE COLLECT?

Personal Information You Disclose to Us
In short: We collect personal information that you provide to us.

We collect personal information that you voluntarily provide to us when you register on the Website, express an interest in obtaining information about us or our products and Services, when you participate in activities on the Website, or otherwise when you contact us.

The personal information that we collect depends on the context of your interactions with us and the Website, the choices you make, and the products and features you use. The personal information we collect may include the following:

  • Personal Information Provided by You: We collect names, phone numbers, email addresses, mailing addresses, usernames, passwords, contact preferences, contact or authentication data, billing addresses, and other similar information.

  • Payment Data: We may collect data necessary to process your payment if you make purchases, such as your payment instrument number (such as a credit card number) and the security code associated with your payment instrument. All payment data is stored by Stripe. You may find their privacy notice here: Stripe Privacy Policy.

All personal information that you provide to us must be true, complete, and accurate, and you must notify us of any changes to such personal information.

Information Automatically Collected
In short: Some information – such as your Internet Protocol (IP) address and/or browser and device characteristics – is collected automatically when you visit our Website.

We automatically collect certain information when you visit, use, or navigate the Website. This information does not reveal your specific identity (like your name or contact information), but may include device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, information about how and when you use our Website, and other technical information. This information is primarily needed to maintain the security and operation of our Website, and for our internal analytics and reporting purposes.

Like many businesses, we also collect information through cookies and similar technologies.

HOW DO WE USE YOUR INFORMATION?

In short: We process your information for purposes based on legitimate business interests, the fulfilment of our contract with you, compliance with legal obligations under UK data protection laws (including the UK GDPR and the Data Protection Act 2018), and/or your consent.

We use personal information collected via our Website for a variety of business purposes described below. The lawful basis for each type of processing is outlined next to each purpose.

We use the information we collect or receive for the following purposes:

  • To provide services and fulfil orders (e.g., processing transactions, shipping, and managing accounts):
    Lawful basis: Performance of a contract with you.

  • To send administrative information (e.g., product, service, and new feature information or updates to our policies):
    Lawful basis: Legitimate business interests (to keep you informed about our services) and, where legally required, consent.

  • To send marketing and promotional communications:
    Lawful basis: Consent. You may opt out of marketing communications at any time.

  • To protect our services (e.g., fraud monitoring and prevention, maintaining security):
    Lawful basis: Legitimate business interests (to ensure the security of our Website and services) and legal obligations.

  • To enforce our terms, conditions, and policies:
    Lawful basis: Legitimate business interests and, in some cases, legal obligations.

  • To respond to legal requests or comply with legal obligations:
    Lawful basis: Legal obligations (for example, complying with a court order).

  • To respond to user inquiries and provide customer support:
    Lawful basis: Performance of a contract (for users who have an ongoing relationship with us) or legitimate interests (in providing customer support for prospective users).

  • To deliver targeted advertising and personalised content:
    Lawful basis: Legitimate interests (to promote our products and services), with your consent where required by law.

WILL YOUR INFORMATION BE SHARED WITH ANYONE?

In short: We only share information with your consent, to comply with UK laws, to provide you with services, to protect your rights, or to fulfil business obligations.

We may process or share your data based on the following legal bases:

  • Consent: We may process your data if you have given us specific consent to use your personal information for a particular purpose.

  • Legitimate Interests: We may process your data where it is reasonably necessary to achieve our legitimate business interests, such as improving our services or responding to your inquiries.

  • Performance of a Contract: Where we have entered into a contract with you, we may process your personal information to fulfil the terms of our contract, such as fulfilling an order.

  • Legal Obligations: We may disclose your information where we are legally required to do so to comply with applicable UK laws, governmental requests, or legal processes (such as responding to a court order or a request from the Information Commissioner’s Office).

  • Vital Interests: In rare situations involving life and death, we may process your information to protect your vital interests or those of another person. This legal basis only applies in emergency scenarios where we need to act urgently to prevent harm.

More specifically, we may need to process your data or share your personal information in the following situations:

  • Business Transfers: We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.

DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?

In short: We may use cookies and other tracking technologies to collect and store your information.

We may use cookies and similar tracking technologies (like web beacons and pixels) to access or store information. Specific information about how we use such technologies and how you can refuse certain cookies is set out in our Cookie Notice.

HOW LONG DO WE KEEP YOUR INFORMATION?

In short: We keep your information for as long as necessary to fulfil the purposes outlined in this privacy notice unless otherwise required by law.

We will only keep your personal information for as long as it is necessary for the purposes set out in this privacy notice, unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements). When we have no ongoing legitimate business need to process your personal information, we will delete or anonymise it.

HOW DO WE KEEP YOUR INFORMATION SAFE?

In short: We aim to protect your personal information through a system of organisational and technical security measures.

However, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure, and we cannot guarantee that hackers, cybercriminals, or other unauthorised third parties will not be able to defeat our security and improperly collect, access, steal, or modify your information.

WHAT ARE YOUR PRIVACY RIGHTS?

In short: In the UK, you have rights that allow you greater access to and control over your personal information.

You may review, change, or terminate your account at any time. In some regions (like the UK), you have certain rights under applicable data protection laws, including the right to:

  • Request access and obtain a copy of your personal information

  • Request rectification or erasure

  • Restrict the processing of your personal information

  • Data portability

  • Object to the processing of your personal information

To make such a request, please contact us at support@rstepos.com.

If you believe we are unlawfully processing your personal information, you also have the right to complain to the Information Commissioner’s Office (ICO) in the UK.

CONTROLS FOR DO-NOT-TRACK FEATURES

Most web browsers and some mobile operating systems and mobile applications include a Do-Not-Track ("DNT") feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. At this stage no uniform technology standard for recognising and implementing DNT signals has been finalised. As such, we do not currently respond to DNT browser signals.

DO WE MAKE UPDATES TO THIS NOTICE?

In short: Yes, we will update this notice as necessary to stay compliant with relevant laws.

We may update this privacy notice from time to time. The updated version will be indicated by an updated "Last updated" date, and the updated version will be effective as soon as it is accessible. If we make material changes to this privacy notice, we may notify you either by prominently posting a notice of such changes or by directly sending you a notification.

HOW CAN YOU CONTACT US ABOUT THIS NOTICE?

If you have questions or comments about this notice, you may email us at support@rstepos.com.

HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?

To request to review, update, or delete your personal information, please email us at support@rstepos.com. We will respond to your request within 30 days.

COMPLAINTS TO THE ICO

If you believe we are unlawfully processing your personal data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK's data protection supervisory authority.

You can contact the ICO at:
Website: www.ico.org.uk
Telephone: 0303 123 1113
Address: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF