Data processing agreement

1. Scope and roles

The restaurant is the controller and SureTill is the processor of the personal data the restaurant enters into or collects through SureTill Cloud, such as customer names, phone numbers, addresses, order history, staff records and voice transcripts. This agreement covers that processing and is meant to satisfy Article 28 of the GDPR and UK GDPR.

2. Instructions

We process personal data only on the restaurant's documented instructions, which are the terms of service, this agreement and the settings and actions the restaurant takes in the software. We tell the restaurant if we think an instruction breaks data protection law. The subject matter is providing the point-of-sale, ordering and voice-ordering service, the duration is the subscription plus the return period below, and the data subjects are the restaurant's customers and staff.

3. Confidentiality

Only people who need access to provide and support the service can reach the data, and they are bound by confidentiality.

4. Security measures

• Each restaurant company has its own database and its own database user.
• Role-based access with optional two-factor authentication, and an audit log of administrative actions.
• Traffic encrypted in transit; hourly and nightly database backups with tested restores.
• Payment card data is handled only by Stripe or PayPal and never stored by us.
• Software updates and security fixes applied on a regular schedule.

5. Sub-processors

The restaurant gives general authorisation for the sub-processors below. We bind each to data protection terms no less protective than these, and we notify account holders by email before adding or replacing one, giving 30 days to object.

6. Helping with rights requests

If a data subject contacts us about data we process for a restaurant, we pass the request to the restaurant. We give reasonable help so the restaurant can answer requests for access, correction, deletion and portability, and we provide export and delete tools in the software.

7. Breach notice

We tell the restaurant without undue delay, and within 72 hours of becoming aware, of a personal data breach affecting its data, with the information we have and the steps we are taking.

8. International transfers

SureTill is based in Pakistan and some sub-processors are in the United States. For personal data from the UK or EEA, the standard contractual clauses (controller to processor) and the UK addendum apply, and are incorporated into this agreement.

9. Return and deletion

When the subscription ends we keep the data for 30 days so the restaurant can export it, then delete it. Database backups containing it age out within a further 12 months. We keep what the law requires us to keep.

10. Audits

We give the restaurant the information needed to show we meet these obligations and allow reasonable audits, no more than once a year unless there has been a breach, on notice and at the restaurant's cost. Questions: privacy@suretill.com.