Privacy Policy

Last updated: 28/5/25

At Retail Systems Technology, doing business as RSTEPOS.COM ("RSTEPOS", "we", "us", "our"), we are committed to protecting your personal information and your right to privacy. If you have any questions or concerns about this privacy notice, or our practices with regards to your personal information, please contact us at support@rstepos.com.

When you visit our website tapatable.com or rstepos.com (the "Website"), and more generally, use any of our services (the "Services", which include the Website), we appreciate that you are trusting us with your personal information. We take your privacy very seriously. In this privacy notice, we seek to explain to you in the clearest way possible what information we collect, how we use it, and what rights you have in relation to it.

This privacy notice applies to all information collected through our Services (which, as described above, includes our Website), as well as any related services, sales, marketing, or events.

TABLE OF CONTENTS

  1. What information do we collect?

  2. How do we use your information?

  3. Will your information be shared with anyone?

  4. Do we use cookies and other tracking technologies?

  5. How long do we keep your information?

  6. How do we keep your information safe?

  7. What are your privacy rights?

  8. Controls for Do-Not-Track features

  9. Do we make updates to this notice?

  10. How can you contact us about this notice?

  11. How can you review, update, or delete the data we collect from you?

  12. Complaints to the ICO

  13. Tapa Table Reservations

1. WHAT INFORMATION DO WE COLLECT?

Personal Information You Disclose to Us

We collect personal information that you voluntarily provide to us when you register, request information, participate in activities, or contact us. This may include:

  • Names, contact details, mailing addresses

  • Usernames, passwords, authentication data

  • Payment data (processed securely by Stripe)

Information Automatically Collected

We collect technical and usage data automatically, such as:

  • IP address, browser, device characteristics

  • Usage behaviour, referring URLs

  • Cookies and similar tracking technologies

2. HOW DO WE USE YOUR INFORMATION?

We use your data for the following purposes under lawful bases:

  • Service delivery and fulfilment (Contract)

  • Administrative communication (Legitimate interest / Consent)

  • Marketing and promotions (Consent)

  • Customer support (Contract / Legitimate interest)

  • Security, fraud prevention (Legitimate interest / Legal obligation)

  • Compliance with legal duties (Legal obligation)

3. WILL YOUR INFORMATION BE SHARED WITH ANYONE?

We only share your data:

  • With your consent

  • To comply with legal obligations

  • To perform a contract

  • With trusted third parties under GDPR-compliant contracts

  • In the context of a business transfer or acquisition

4. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?

Yes. We may use cookies and similar tools to improve performance and functionality. You may control cookies via browser settings. See our Cookie Policy for more details.

5. HOW LONG DO WE KEEP YOUR INFORMATION?

We retain data only as long as necessary:

  • Customer accounts: up to 7 years

  • Booking/reservation records: up to 12 months

  • Marketing data: until consent is withdrawn

6. HOW DO WE KEEP YOUR INFORMATION SAFE?

We implement organisational and technical safeguards. While no system is 100% secure, we take reasonable steps to protect your data.

7. WHAT ARE YOUR PRIVACY RIGHTS?

Under UK GDPR, you have the right to:

  • Access, correct or delete your data

  • Restrict or object to processing

  • Data portability

  • Withdraw consent at any time

  • File a complaint with the ICO

To exercise your rights, contact us at support@rstepos.com.

8. CONTROLS FOR DO-NOT-TRACK FEATURES

We currently do not respond to DNT browser signals due to the lack of a uniform standard.

9. DO WE MAKE UPDATES TO THIS NOTICE?

Yes, we update this notice periodically. The latest version is always available on our website. Significant changes may be announced directly.

10. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?

Email: support@rstepos.com

11. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?

To make a data access, correction, or deletion request, contact support@rstepos.com. We will respond within 30 days.

12. COMPLAINTS TO THE ICO

If you believe we are unlawfully processing your personal data, you can file a complaint with:

Information Commissioner’s Office (ICO)
Website: www.ico.org.uk
Phone: 0303 123 1113
Address: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

13. TAPA TABLE RESERVATIONS

When you make a booking using Tapa Table, either via our website or an embedded widget, we collect personal data such as:

  • Your name

  • Contact details (email/phone)

  • Reservation details (date, time, party size)

  • Special requests (e.g. dietary requirements)

Purpose of Processing

  • To confirm and manage your booking

  • To contact you regarding your reservation

  • To enhance your service experience

Legal Basis

  • Contractual necessity: to provide the service you requested

  • Legitimate interest: to improve and operate our reservation services

Data Retention

Reservation records are stored for up to 12 months before deletion or anonymisation, unless otherwise required for operational or legal purposes.

Third-Party Access

If reservations are supported by a third-party booking system, those providers act under GDPR-compliant agreements and only process your data as instructed by us.

Cookies

When using an embedded widget, essential session cookies may be used to support booking functionality. These do not track you across other websites and generally expire after your session.