Privacy Policy
Last updated: 29 June 2026
SiamEPOS ("we", "us", "our") is committed to protecting your personal data. This policy explains how we collect, use and protect information through our website and the SiamEPOS app, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who We Are
SiamEPOS is operated by SiamEPOS Ltd (Company No. 17215576), England & Wales. The SiamEPOS app is a point-of-sale and restaurant-management tool used by restaurant businesses and their staff to take orders, manage tables and bookings, process sales and run their operations. If you have any questions about this policy, please contact us at info@siamepos.co.uk.
2. Our Role
- For a restaurant's own customer data (bookings, takeaway orders, contact details), the restaurant is the data controller and SiamEPOS acts as a data processor on its behalf.
- For account, staff, billing and service data, SiamEPOS is the controller.
3. What Data We Collect
- Contact information — name, email address, phone number when you book a demo, contact us, or sign up for SiamEPOS
- Restaurant information — restaurant name and address
- Staff information — name, role, login PIN and clock-in/out and performance records, used to operate the till
- Customer information (entered in the app by a restaurant or its customers) — name, phone, email, booking and order details, allergy notes and marketing consent
- Sales & order data — items, prices, payments, VAT and reporting
- Payment information — card and online takeaway payments are processed securely by our payment provider (Stripe); we do not store full card numbers
- Usage & technical data — app version and diagnostic information needed to run and support the service
4. App Permissions
- Camera — used only to scan setup QR codes and to photograph menus or supplier invoices for the optional AI extraction features. Images are not used for any other purpose.
- Internet — to sync the till with the cloud. A copy of the restaurant's data is also stored on the device so the app keeps working offline.
5. How We Use Your Data
- Provide and improve the SiamEPOS service (orders, tables, bookings, takeaway, printing and reporting)
- Process bookings and send confirmation emails on behalf of restaurants using our platform
- Process card and online takeaway payments via our payment provider
- Provide optional AI menu and invoice extraction (which sends the relevant image to our AI provider for processing)
- Send you relevant information about SiamEPOS, and marketing only where consent is given (you can unsubscribe at any time)
- Respond to enquiries, provide customer support, and comply with legal obligations
6. Legal Basis for Processing
- Contract — to perform our contract with you as a SiamEPOS customer
- Legitimate interests — to improve our service and communicate with prospects
- Consent — for marketing communications (you can withdraw consent at any time)
- Legal obligation — where required by law
7. Data Sharing
We do not sell your personal data. We may share it with trusted third-party service providers, each contractually bound to protect it and only use it as instructed:
- Railway — cloud infrastructure and database hosting
- Stripe — payment processing
- Brevo — email delivery and marketing automation
- Anthropic — AI processing of menu and invoice images for the optional extraction features
- Make.com — workflow automation
- Netlify — website hosting
8. Data Retention
We retain your data for as long as necessary to provide the service and comply with legal obligations. Customer data is retained for 7 years for accounting purposes. Marketing data is retained until you unsubscribe. Restaurants can delete records within the app.
9. Your Rights
Under UK GDPR, you have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Request erasure of your data ("right to be forgotten")
- Object to processing for marketing purposes
- Data portability
- Lodge a complaint with the ICO (ico.org.uk)
If you are a customer of a restaurant that uses SiamEPOS, please contact that restaurant first (the data controller); we will assist them. For data we control, email info@siamepos.co.uk.
10. Cookies
We use essential cookies to make our website work. See our Cookie Policy for details.
11. Changes to This Policy
We may update this policy from time to time. We will notify you of significant changes by email or prominent notice on our website. The "last updated" date above shows the current version.