Privacy Policy | NosHQ

1. Who we are

NosHQ is a restaurant management platform that helps hospitality businesses manage orders, kitchen operations, floor plans, staff scheduling, stock control, and reporting. When we say "NosHQ", "we", "us", or "our", we mean the NosHQ platform and its operators.

2. Information we collect

We collect information that you provide directly to us:

Account information: name, email address, and password when you create an account.
Restaurant data: menu items, orders, stock levels, floor plans, staff details, and other operational data you enter into the platform.
Payment information: transaction records processed through the platform. We do not store card numbers directly — payment processing is handled by third-party providers.
Usage data: how you interact with the platform, including pages visited, features used, and device information.

3. How we use your information

To provide, maintain, and improve the NosHQ platform.
To process orders and transactions on behalf of your restaurant.
To send important service notifications (e.g. security alerts, account changes).
To generate reports and analytics to help you run your business.
To respond to your support requests.
To comply with legal obligations.

4. Data sharing

We do not sell your personal information. We may share data with:

Service providers: hosting (Vercel), database (Supabase), and payment processors that help us operate the platform.
Your restaurant team: staff members you invite can access restaurant data according to their assigned role and permissions.
Legal requirements: when required by law, court order, or to protect the safety of our users.

5. Data security

We use industry-standard security measures including encrypted connections (TLS), secure authentication, row-level security policies on our database, and regular security reviews. However, no system is 100% secure, and we cannot guarantee absolute security.

6. Data retention

We retain your data for as long as your account is active or as needed to provide services. If you close your account, we will delete your personal data within 90 days, except where we are legally required to retain it.

7. Your rights

Under UK and EU data protection law, you have the right to:

Access the personal data we hold about you.
Request correction of inaccurate data.
Request deletion of your data.
Object to or restrict processing of your data.
Request a portable copy of your data.

To exercise any of these rights, contact us at privacy@noshq.co.uk.

8. Cookies

We use essential cookies to keep you signed in and remember your preferences. We do not use third-party advertising or tracking cookies.

9. Changes to this policy

We may update this policy from time to time. We will notify you of significant changes by email or through a notice on the platform.

10. Contact us

If you have questions about this privacy policy or how we handle your data, please contact us at privacy@noshq.co.uk.