Processing...
This Privacy Policy explains how Mintcom Ltd ("Mintcom", "we", "us") collects, uses, shares and protects personal data when you use our website (mintcompos.com), the Mintcom POS app, the Mintcom admin app, the online dashboard, and our support and community services (together, the "Services"). Please read it together with our Terms of Service.
Mintcom Ltd is a company registered in England and Wales. Our company details are shown at the end of this policy. We follow the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
We decide how and why personal data is used, so we are the controller, for:
Businesses that use Mintcom (our "merchants") enter data about their own customers and staff, for example loyalty members, customers who ask for an emailed receipt, and staff working records. For this data the merchant is the controller and Mintcom is its processor. We use it only to provide the Services to that merchant and only on its instructions, under our Data Processing Agreement.
If you are a customer of a business that uses Mintcom and want to access, correct or delete your data, please contact that business first. If you contact us instead, we will pass your request to the business and help it respond.
If you choose to sign in or create an account with Google or Apple, we receive limited profile information from that provider after you approve it on their consent screen:
When you subscribe or add a card, you type your card details into a secure field provided by Stripe, and they go directly to Stripe. Mintcom never receives the full card number or security code (CVV). We then ask Stripe to confirm the card, and we keep only:
When you remove a saved card from your account, we also remove it from Stripe.
When you and your staff use the POS, dashboard and apps, we store the data needed to run your business, including:
We do not ask for special category data, such as health information, religious beliefs or biometric data. Please do not enter it in notes, support tickets or AI prompts.
We receive information directly from you when you register, use a feature, contact us, or choose to provide it. We also receive information from the business that manages your access, including its owner or administrators, when it creates your staff account or sets your role and permissions. If you choose a sign-in provider or connect another service, we receive the information described for that connection. Our website, apps and security systems also generate the technical and activity information described in this section.
We tell you which information is required when we ask for it. We need enough account, sign-in and business information to create and secure your account and provide the features you ask for. If you do not provide information that a particular feature requires, we may be unable to provide that feature. Optional profile information, marketing choices and optional device permissions are not conditions of using unrelated core features. Where the law requires us to collect information, we explain this when the requirement applies.
The Mintcom apps ask only for the device permissions a feature needs, and only when you use that feature. You can turn off any permission at any time in your device settings.
UK GDPR requires a legal basis for each use of personal data. These are the purposes we use it for, and the legal basis for each:
Where we rely on legitimate interests, we have weighed them against your rights and interests. You can object at any time (see section 10).
We do not make decisions about you based solely on automated processing that have legal or similarly significant effects on you.
We never sell personal data.
Mintcom supports several locations, brands, owners, admins and employees in one account. Who can see which data depends on their role, the location selected and the permissions they are given:
Our main database and servers are in Germany, in the European Economic Area (EEA). UK law recognises the EEA as giving adequate protection, so this transfer needs no extra safeguards.
Some providers in section 6 process data in the United States or other countries outside the UK and EEA. When personal data goes to those countries, we protect it with one of the following: the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or the provider's certification under the UK Extension to the EU-US Data Privacy Framework. To learn more or get a copy of these safeguards, email privacy@mintcompos.com.
We use technical and organisational measures to protect personal data, including:
If a personal data breach occurs, we assess it promptly and notify the competent authority, affected merchants, and affected individuals where required by the applicable law and within its time limits. Where UK GDPR or EU GDPR requires notification to a supervisory authority, the relevant controller must normally notify within 72 hours after becoming aware of the breach, unless the applicable risk exception applies. Other laws may require different thresholds or shorter notification to individuals or other recipients. Where we act as processor, we notify and assist the merchant under the DPA without undue delay so that it can meet its obligations.
No method of sending or storing data over the internet is 100% secure, so we cannot guarantee absolute security.
We keep personal data only for as long as we need it for the purposes in this policy. How long depends on the type of record, whether the account or feature is still in use, your instructions, any switching or retrieval period, security needs, and legal duties or claims:
Your business is responsible for keeping any records the law requires it to keep, such as sales and tax records. Please download them before you delete a location or your account.
Once we have confirmed the request, the timing described above applies.
Under UK GDPR you have the right to:
To use any of these rights, email privacy@mintcompos.com. We may need to confirm your identity first. We reply within one month, and there is normally no fee.
If you wish to make a data protection complaint, please email privacy@mintcompos.com. We will acknowledge receipt within 30 days and respond without undue delay. You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113, your EU supervisory authority if you live in the EU, or your local data protection regulator (such as the Personal Data Protection Unit in Jordan).
Where US state privacy laws (such as the California Consumer Privacy Act) apply, we do not "sell" personal information, we use advertising cookies only with your consent, and our website honours browser Global Privacy Control (GPC) signals by keeping marketing cookies off.
Mintcom is a service for businesses. Our public marketing and owner-account registration are not directed at children. A merchant's customer or staff records may nevertheless relate to a person under 18. Where we process those records on the merchant's behalf, the merchant must establish the applicable lawful basis, provide age-appropriate information, and obtain any authorisation the law requires. We process that information only under lawful instructions and help the merchant with related rights requests.
We do not knowingly ask children for personal information through a service directed at them. If you believe a child has given us information in circumstances that do not comply with the law, contact privacy@mintcompos.com so that we can investigate and take appropriate action. We do not automatically erase a merchant's lawful records just because they concern a person under 18. We consider the applicable law, the merchant's role and the individual's rights.
We may update this policy. We will post the new version on this page with a new "Last updated" date, and the Policy Changelog lists past changes. If we make important changes, we will tell account owners by email or in the Services before they take effect. We give merchants notice before adding a new sub-processor, as our Data Processing Agreement describes.
This Privacy Policy is governed by the laws of England and Wales, unless mandatory local law requires otherwise.
For any question about this policy or your personal data, email privacy@mintcompos.com. For anything else, email support@mintcompos.com.
Mintcom Ltd
Registered in England and Wales, company number 17544555. Registered office: 4th Floor Office, 205 Regent Street, London, England, W1B 4HB.