Privacy policy

Who we are

WalnutPOS (“Walnut”, “we”) is operated by Tahseen Dar, trading as WalnutPOS, Beeston, Nottingham, United Kingdom. We are the controller for the personal data described on this page. Contact: support@walnutpos.com · WhatsApp +44 7453 654669.

Visitors to walnutpos.com

When you arrive, we may note the page you landed on, the website that referred you (its address only, never the full link) and any campaign tags in the link you clicked (utm_*, fbclid, gclid). This is kept in your browser only after you accept advertising cookies. If you later create an account, it is stored with the account so we know which advert or channel brought you. Lawful basis: our legitimate interest in measuring our advertising (UK GDPR Art. 6(1)(f)). Retention: 24 months after signup, after which the campaign detail is deleted and only the channel name (for example “facebook”) is kept.

Advertising cookies: on our own marketing pages (the homepage, /nottingham, pricing, signup and these legal pages — never on a restaurant’s ordering or booking page) and with your consent, we load the Meta Pixel (Meta Platforms Ireland Ltd), which sets the _fbp cookie and tells Meta which pages you viewed and whether you signed up, so we can measure and target our adverts on Facebook and Instagram. If you consented, we may also send Meta the same events from our server (Conversions API) together with a hashed form of your email and phone number, your IP address and browser type, for the same purpose. Nothing is set until you choose, and you can withdraw consent at any time with “Change your cookie choice” in the footer of this page. Meta’s policy: facebook.com/privacy/policy.

Google Analytics, when configured, records page views in aggregate to help us understand how the site is used; we do not use it to target advertising.

Setup-visit and sales enquiries

If you fill in our Facebook enquiry form or message us on WhatsApp, we keep your name, phone number, restaurant name and postcode, the time you asked us to call, and what you tell us about your current till, so we can call you back and arrange your visit. Lawful basis: taking steps at your request before a contract (Art. 6(1)(b)). If you tick the optional marketing box we may also message you on WhatsApp or SMS about Walnut; reply STOP at any time. Enquiry details are deleted 12 months after our last contact unless you become a customer.

Restaurants using Walnut

When you create an account we process your name, email, phone number and password (stored hashed), your restaurant’s details, and the operational data you enter or generate while running your business (menu, orders, payments recorded, staff accounts, customers you add). We process this to provide the service (Art. 6(1)(b)) and to keep it secure and improve it (Art. 6(1)(f)). Your staff and customers’ data is yours: for that data you are the controller and we are your processor.

Sub-processors: Amazon Web Services (hosting, London region), Vercel (website hosting), Stripe (card payments you choose to take through Walnut), Meta (advertising measurement, as above), and Amazon Simple Email Service for verification and service emails.

Retention: while your account is open and for 12 months after it is closed, except where UK tax law requires transaction records to be kept for longer (6 years).

Your rights

• Access, correct or delete your personal data, or ask for a copy of it.
• Object to processing based on our legitimate interests, including advertising measurement.
• Withdraw consent for advertising cookies at any time.
• Complain to the Information Commissioner’s Office: ico.org.uk or 0303 123 1113.

To exercise any of these, email support@walnutpos.com. We reply within one month.

Changes

We will post any change to this policy here with a new date. Material changes are also emailed to account holders.