Privacy Policy
Last updated: 14 November 2026
This policy explains what personal information Collection Pager Pro ("we", "us", "our") collects through Collection Pager Pro (the "Service"), why, and what your rights are. It covers two groups of people:
- Restaurant users: businesses with an account who use the dashboard and terminal.
- Customers: people who scan a restaurant's QR code to follow their order.
We have designed the Service to collect as little personal information as possible. Customers are never asked for their name, phone number or email address.
1. Who is responsible for your information
Collection Pager Pro is the controller of the personal information described in this policy, under UK data protection law (the UK GDPR and the Data Protection Act 2018). Contact us about privacy at jon@thenewmans.org.uk.
2. Information about restaurant users
| What | Why | Legal basis |
|---|---|---|
| Email address and password. The password is stored only as a one-way hash, so we can never read it. | To create and secure your account, sign you in, and send password resets and important service emails. | Contract |
| Restaurant name, social media links and product images | To show them to your customers on their order page. | Contract |
| Two-factor authentication secret (stored encrypted), if you turn 2FA on | To check your sign-in codes. | Contract |
| Stripe customer and subscription references, subscription status and renewal date. We never receive or store card details. | To manage your subscription and access to the terminal. | Contract; legal obligation (accounting records) |
| Order records: order number, and the times each order was created, opened, completed or cancelled | To run the terminal, work out average waiting times and show your statistics. | Contract |
| Support messages you send us | To answer your questions. | Contract; legitimate interests |
| Security and activity logs: sign-ins, failed sign-in attempts, IP address, browser type for terminal devices, and key account actions | To protect accounts, prevent fraud and abuse (for example locking out repeated failed sign-ins), investigate problems and help you with support. | Legitimate interests (keeping the Service secure) |
3. Information about customers
When you scan a restaurant's QR code, we process only what is needed to show your order and tell you when it is ready:
- A random order code (in the link you opened), your order number, and the times the order was opened and completed. This order record is linked to the restaurant, not to you as a person.
- Push notification subscription, only if you choose "Yes, notify me". Your browser gives us a unique delivery address on its push service (run by Google, Apple, Mozilla or Microsoft depending on your browser) and encryption keys. We use these only to send you a "your order is ready" alert for that order, and we delete them shortly after the order is completed or cancelled. You can block notifications at any time in your browser settings. Legal basis: consent.
- Your notification choice is remembered in your browser's local storage so we don't ask again for the same order. This stays on your device.
- Technical information such as your IP address and browser type is processed by our web server and hosting provider when you load the page, as with any website. It is used to deliver the page and keep the Service secure. Legal basis: legitimate interests.
The restaurant can see order numbers and times, but nothing that identifies you. If you have questions about the restaurant itself, such as your food order or any information you gave them directly, please contact the restaurant.
4. Who we share information with
We do not sell personal information or use it for advertising. We share it only with service providers who help us run the Service:
- Stripe processes subscription payments. Stripe collects your payment details directly on its own secure pages. See Stripe's privacy policy.
- Google reCAPTCHA protects sign-in, registration and password reset forms from automated abuse. It collects hardware and software information, such as device and app data, and sends it to Google for analysis. Your use of reCAPTCHA is subject to Google's Privacy Policy and Terms of Service.
- Browser push services (Google, Apple, Mozilla, Microsoft) deliver notifications to customers who opt in. We send them only a signal to wake your browser. The message text is fetched directly from us.
- Our hosting and email providers store the Service's data and deliver emails on our behalf.
- Authorities, if the law requires it, or to protect our rights, our users or the public.
Some of these providers, such as Stripe and Google, may process information outside the UK. Where they do, they use legally recognised safeguards, such as the UK International Data Transfer Addendum or Standard Contractual Clauses, or rely on UK adequacy regulations.
5. Cookies and similar technologies
We use only the cookies needed for the Service to work. There are no advertising or analytics cookies.
| Name | Purpose | How long |
|---|---|---|
cpp_sid | Keeps you signed in as you move between pages, and protects forms against forgery. | Until you close your browser |
cpp_term | Keeps a terminal device signed in, even after it is switched off. Set only when terminal mode is started. | Until "Log out" is pressed on the terminal |
| Google reCAPTCHA cookies | Set by Google on sign-in and registration pages to detect bots. | See Google's policy |
| Local storage (customer page) | Remembers whether you chose to receive a notification for your order. | Until you clear your browser data |
| App cache (restaurant app only) | Stores the app's design files so the installed app loads quickly. Contains no personal information. | Until the app is updated or removed |
Because these are strictly necessary for the Service, they do not need your consent. If you block them, parts of the Service will not work.
6. How long we keep information
- Restaurant accounts: for as long as your account is open. When you delete your account, your account details, orders, statistics, images and terminal sessions are deleted immediately.
- Billing records: Stripe and we keep invoice and payment records for as long as tax and accounting law requires (usually 6 years in the UK).
- Security and activity logs: 180 days, then automatically deleted.
- Failed sign-in records (used for IP lockouts): up to 2 days.
- Password reset links: expire after 1 hour and are deleted shortly afterwards.
- Customer push subscriptions: deleted shortly after the order is completed or cancelled.
- Support emails: kept for as long as needed to deal with your request and any follow-up.
- Backups made by our hosting provider may keep copies for a short extra period before they are overwritten.
7. How we protect information
We use encrypted connections (HTTPS), one-way password hashing, encrypted storage of two-factor secrets, optional two-factor authentication, automatic lockout after repeated failed sign-ins, bot protection, strict input checking, and careful processing of uploaded images, which removes hidden data such as photo location (EXIF). Access to the system's administration area is restricted and protected by additional security. No system is completely secure, but we work to protect your information and will tell you and the Information Commissioner's Office if the law requires it after a breach.
8. Your rights
Under UK data protection law you have the right to:
- access the personal information we hold about you;
- have inaccurate information corrected;
- have your information deleted. Restaurant users can do this instantly from Account → Delete account;
- restrict or object to how we use your information, including where we rely on legitimate interests;
- receive your information in a portable format (data portability);
- withdraw consent at any time, for example by turning off notifications in your browser.
To use any of these rights, contact us using the details below. We will respond within one month. You also have the right to complain to the Information Commissioner's Office (ico.org.uk, 0303 123 1113). We would appreciate the chance to put things right first.
9. Children
Restaurant accounts are for adults acting for a business. The customer page does not ask anyone for personal details, so it can be used by people of any age without them giving us information about themselves.
10. Changes to this policy
We may update this policy from time to time. We will change the "Last updated" date above and, for significant changes, tell restaurant users by email.
11. Contact us
Collection Pager Pro
jon@thenewmans.org.uk