Privacy Policy
This policy says what personal data Path2ai Ltd, trading as Path, holds, why, and what you can do about it.
Who we are
Path2ai Ltd, number 17255476, of Clarence Street Chambers, 32 Clarence Street, Southend-On-Sea, Essex, United Kingdom, SS1 1BD. We are registered with the Information Commissioner’s Office under registration number ZC289864.
For anything about your data, email support@pathpos.com. We have not appointed a data protection officer, because the law does not require one for a business like ours.
What we hold when you sign up
- Your email address.
- Your password, scrambled so that nobody can read it. We never store it as you typed it.
- Your business’s name, kind and type.
- That you agreed to the terms, which version, and when.
- Your internet address and the kind of browser you used.
- How you found us, if you allowed that cookie: the campaign, the page you landed on, the site you came from, and any referral code.
If you start signing up and do not confirm the code, we remove what you gave us after seven days.
What we hold while you use Path
- Your name, your business address, your VAT number and your opening hours.
- Your products, sales, receipts and reports.
- Your staff’s names, PINs, rotas and clock-in times.
- Details of your clients, if you keep them in Path. This can include bookings, notes, patch tests and, if you switch it on, health details.
You decide what goes in about your own staff and clients, and we handle it on your behalf.
Health details are a special kind of data with extra legal protection. They are off unless you switch them on. If you do, you must have your own lawful reason to hold them, usually the client’s explicit consent. We hold them only on your behalf, keep them to your own business, and use them for nothing else.
Why we use it
The law asks us to say which lawful reason applies to each use.
| What we use it for | Our lawful reason |
|---|---|
| To provide Path | It is needed for our agreement with you |
| To bill you and keep tax records | It is needed for our agreement, and the law requires the records |
| To keep Path safe, for example by stopping automated signups | Our legitimate interest in protecting Path and the shops that use it |
| To see which campaigns and pages bring us shops | Your consent, given through the cookie notice |
| To send marketing email | Your consent, given separately |
We do not send you marketing email unless you have said yes to it separately.
Who helps us
These companies handle some of this data for us.
| Company | What it does for us |
|---|---|
| Amazon Web Services | Runs our servers and databases, and sends our email |
| Runs our own email, and serves the fonts on this website | |
| Cloudflare | Checks that a signup comes from a person |
| Stripe | Takes payment of your bills. We never see your full card or bank details |
| PureSMS | Sends text messages, if you switch them on |
| Ideal Postcodes | Finds an address from a postcode |
We keep our servers and databases in the UK. Some of these companies may handle data outside the UK. When they do, we rely on a UK adequacy decision or on the safeguards the law approves, such as the UK’s international data transfer agreement.
How long we keep it
We keep data only for as long as we need it.
| Data | How long |
|---|---|
| A signup that was never confirmed | Seven days |
| Your products, sales, staff and client records | While you use Path, then 30 days after your service stops so you can take a copy. We then delete them from our live systems within 90 days |
| Your account details and what you agreed to | While you use Path, then six years, in case of a legal claim |
| Bills and invoices | Six years after the end of the financial year they belong to, as tax law requires |
| Security records, such as sign-ins and emails sent | 12 months |
| Backups | Up to 35 days, then overwritten |
Your rights
You can ask to see your data, correct it, delete it, limit how we use it, object to how we use it, or take a copy with you. Email support@pathpos.com.
You can also complain to the Information Commissioner’s Office at ico.org.uk.
Cookies
Our cookie page lists what this website stores on your device, and lets you change your choice.