Who we are
1T3chSoftware is the trading name of 1T3chSoftware LTD, a company registered in England and Wales. We provide tills, ordering websites, customer apps and back-office software to takeaways and restaurants (“shops”).
To ask anything about this policy or your data, email hello@1t3chsoftware.co.uk.
Our role: controller or processor
Under UK data protection law our role depends on whose data it is:
- Shop owners, managers and staff, and visitors to this website. We decide how this data is used, so we are the controller.
- Customers who order from a shop. When you order from a shop’s website, app or counter, that shop is the controller of your data and we process it on its behalf, as its processor. The shop’s own privacy notice applies, and requests about your data are best sent to the shop. We will help the shop answer them.
What we collect
Shops and their staff
- Names, email addresses and phone numbers of owners and managers.
- Staff names, roles and till PINs (stored only as a one-way hash, never readable).
- The shop’s business details, bank payout set-up (held by Stripe, not by us) and settings.
- A record of sensitive actions such as refunds, voids, discounts, price and role changes, for accountability.
- Technical data about tills: a device identifier and when each till was last online.
Customers of a shop (as processor)
- Name, phone number and email address given at checkout or when creating an account.
- Delivery address, if you choose delivery.
- Your orders, notes and allergy information you add to an order.
- Payment status. Card details go straight to Stripe and never reach our systems.
- Your marketing choices, and loyalty stamps if the shop runs them.
- A notification subscription, if you switch on order alerts.
Visitors to this website
This website uses no analytics and no advertising cookies. Our servers keep short-lived technical logs (such as IP address and pages requested) to keep the service secure.
Why we use it and our lawful basis
- To provide the service to shops under our contract with them (contract).
- To keep accurate financial records, such as orders, payments and Z reports, which shops must keep by law (legal obligation).
- To keep the service secure and reliable, including preventing fraud and investigating faults (legitimate interests).
- To tell shops about changes to the service they use (legitimate interests). We do not sell or rent personal data, and we do not use shop customers’ data for our own marketing.
- Marketing messages from a shop are sent only where the customer has agreed, and every message offers a way to stop them (consent).
Who we share it with
We use carefully chosen suppliers to run the service. They may only use the data to provide their service to us:
| Supplier | What they do for us | Where |
|---|---|---|
| Supabase | Database, sign-in, file storage and server functions | European Union (Ireland) |
| Stripe | Card payments, payouts to shops and card readers | UK, EU and United States |
| Resend | Sending order and account emails | United States |
| Namecheap | Server that delivers website pages (no order data is stored on it) | Varies by data centre |
| Ideal Postcodes and postcodes.io | Looking up addresses from a postcode | United Kingdom |
| Browser push services (Apple, Google, Mozilla) | Delivering notifications a customer has switched on | Worldwide |
| Meta Platforms | Publishing a shop's posts, only if the shop connects Facebook or Instagram | Ireland and United States |
| Google (Gemini) and OpenAI | Drafting marketing post text for a shop; no customer data is sent | United States |
We may also share data where the law requires it, for example with HMRC or the police with a valid request, or to protect someone’s safety.
International transfers
Our main database is in the European Union, which the UK recognises as giving adequate protection. Where a supplier handles data outside the UK and EU, we rely on UK adequacy regulations, the UK International Data Transfer Addendum to the EU standard contractual clauses, or the UK-US data bridge, as applicable.
How long we keep it
- Orders, payments and Z reports: six years from the end of the financial year they belong to, because shops must keep these records for tax purposes.
- Customer accounts: until the customer or the shop asks us to delete them, or the shop leaves the service. Order records are then kept without the customer’s contact details where the law allows.
- Staff and owner accounts: while the shop uses the service, then up to 90 days.
- Technical logs: up to 90 days, unless needed to investigate a security incident.
How we protect it
- Each shop’s data is separated inside the database, and automated tests check that one shop cannot read another’s.
- All traffic is encrypted in transit. Till PINs and passwords are stored only as hashes.
- Access to production systems is limited to the people who need it, and sensitive actions are logged.
- We take regular backups and can restore from them.
Your rights
You have the right to access your data, to have it corrected or deleted, to restrict or object to how it is used, to data portability, and to withdraw consent at any time. Shops can export or delete a customer’s data from their admin. If you ordered from a shop, contact the shop first; you can also email hello@1t3chsoftware.co.uk and we will pass the request on and help.
If you are unhappy with how your data is handled, you can complain to the Information Commissioner’s Office at ico.org.uk. We would appreciate the chance to put it right first.
Children
The service is not aimed at children under 13, and shops should not knowingly create accounts for them.
Changes to this policy
We will update this page when our practices change and show the date of the latest version at the top. Shops will be told of significant changes by email.