Privacy Policy

Important information and who we are

This privacy policy gives you information about how Opsyte Online Ltd collects and uses your personal data through your use of our website (www.opsyte.com), application and associated services (“Services”) including any data you may provide when you register with us, sign up to our newsletter and/or purchase a product or service.

Our Services are not intended for children and we do not knowingly collect data relating to children.

Controller

We are part of the Hospitality Solutions Group, and the group has access to the data of the subsidiary, Opsyte. Opsyte Online Ltd is the controller and is responsible for your personal data (collectively referred to as “Opsyte”, "we", "us" or "our" in this privacy policy). We are part of the Hospitality Solutions Group.

We have appointed a data protection officer (“DPO”) who is responsible for overseeing questions in relation to this privacy policy. Please contact Matt Taylor – on our support channels (see our Resources tab). If you have any questions about this privacy policy, including any requests to exercise your legal rights (paragraph 9), please contact us using the information set out in the contact details section (paragraph 10).

Certain services are delivered in partnership with specialist providers, including Troncbox, as described in the ‘Disclosures of your personal data’ section below.

The types of personal data we collect about you

Personal data means any information about an individual from which that person can be identified.

We may collect, use, store and transfer different kinds of personal data about you which we have grouped together as follows:

• Identity Data – first name, last name, previous names, username or similar identifier, marital status, title, date of birth and gender.
• Contact Data – billing address, delivery address, email address, telephone numbers.
• Financial Data – bank account and payment card details.
• Transaction Data – details about payments to and from you and other details of products and services you have purchased from us.
• Technical Data – IP address, login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, device ID and other technology.
• Profile Data – username and password, purchases or orders made by you, interests, preferences, feedback, survey responses.
• Usage Data – information about how you interact with and use our website, app, products and services.
• Marketing and Communications Data – preferences in receiving marketing from us and our third parties and communication preferences.

We also collect aggregated data such as statistical or demographic data which does not directly or indirectly reveal your identity.

How is your personal data collected?

• Your interactions with us – personal data you give us by filling in online forms or corresponding with us.
• Automated technologies or interactions – Technical Data collected automatically as you interact with our Services.
• Third parties or publicly available sources – data from analytics providers, advertising networks, payment providers, public sources like Companies House.

How we use your personal data

We rely on one or more legal bases for processing: performance of a contract, legitimate interests, legal obligation, and consent.

Purposes for which we will use your personal data

The table below describes the purposes, data types, and legal basis:

Purpose	Type of Data	Legal Basis
Register you as a new customer	Identity, Contact	Performance of a contract
Process and deliver services	Identity, Contact, Financial, Transaction, Marketing & Comms	Performance of a contract; Legitimate interests (recover debts)
Manage our relationship with you	Identity, Contact, Profile, Marketing & Comms	Performance of a contract; Legal obligation; Legitimate interests
Prize draws/competitions/surveys	Identity, Contact, Profile, Usage, Marketing & Comms	Performance of a contract; Legitimate interests
Administer and protect our business	Identity, Contact, Technical	Legitimate interests; Legal obligation
Deliver relevant content and ads	Identity, Contact, Profile, Usage, Marketing & Comms, Technical	Legitimate interests
Data analytics	Technical, Usage	Legitimate interests
Marketing communications & recommendations	Identity, Contact, Technical, Usage, Profile, Marketing & Comms	Legitimate interests
Market research	–	Legitimate interests

Direct marketing

You will receive marketing communications if you have requested information or purchased from us and have not opted out.

Third-party marketing

We will get your express consent before sharing your data with third parties for their marketing purposes.

Opting out of marketing

You can opt out via unsubscribe links or by contacting us. Service-related communications will still be sent.

Cookies

For more on cookies, see our cookie policy.

Disclosures of your personal data

We may share your data with group entities, potential business buyers/mergers, and required third parties, ensuring they respect your data security.

Integrated partners – Troncbox

Where customers enable tronc, payroll, or related compliance features, Opsyte may share relevant personal and operational data with Troncbox, a specialist tronc and tipping compliance platform. The data shared may include employee identifiers, rota information, pay and tronc-related data, and reporting data, strictly to the extent necessary to provide tronc compliance, reporting, and integrated services. Troncbox acts as a data processor on Opsyte’s instructions (or separate controller where legally required), and is contractually required to process personal data in accordance with UK GDPR and applicable data protection laws.

International transfers

We do not transfer your data outside the UK.

Data security

We have implemented security measures and restricted access to authorised personnel only.

Data retention

We retain your data only as long as necessary for the purposes collected, considering legal, regulatory, and operational requirements.

Your legal rights

• Access your data
• Correct your data
• Request erasure
• Object to processing
• Data transfer
• Withdraw consent
• Restrict processing

No fee is usually required. We may request ID verification before processing requests.

Contact details

Email: See our support channels (see our Resources tab)

Postal: Opsyte Online Ltd, Westmead House, GU14 7LP, United Kingdom

Complaints

You can complain to the ICO (www.ico.org.uk), but we encourage contacting us first.

Changes to the privacy policy

Last updated: 22/05/2024. Please keep us informed of changes to your data.

Third-party links

Our site may contain links to external sites. We are not responsible for their privacy policies.