Privacy Policy

1 Who we are

Control Suite is provided by Control Suite ("we", "us", "our"), a company registered in England. If you have questions about this policy, contact us at support@controlsuite.co.uk.

2 What the app does

Control Suite is a point-of-sale and business management app. It loads a secure web interface inside a native iOS wrapper and provides native integrations for card payments (via Zettle), incoming phone calls (via CallKit), and push notifications.

3 Data we collect

• Device identifier — We use your device's vendor identifier (a unique ID assigned by Apple) to associate your device with a register in our system. This identifier is not shared with third parties and cannot be used to track you across other apps.
• Push notification tokens — If you grant notification permission, Apple provides us with a device token so we can deliver order alerts and incoming call notifications. These tokens are stored on our servers and used solely for delivering notifications to your device.
• Session data — When you log in, a session cookie is stored locally to keep you authenticated. This is standard web session management and the cookie is not used for tracking or advertising.

4 Data we do not collect

• We do not collect analytics, usage statistics, or behavioural data.
• We do not use advertising identifiers or any ad-tracking frameworks.
• We do not access your contacts, photos, or files.
• We do not sell, rent, or share your personal data with third parties for marketing purposes.

5 Third-party services

6 Permissions

The app may request the following permissions. Each is optional and only used for the stated purpose:

• Camera — Barcode scanning and video calls.
• Microphone — Phone calls via the built-in VoIP system.
• Bluetooth — Connecting to Zettle card readers.
• Local Network — Discovering Zettle card readers on your network.
• Location — Required by payment processors for card transaction compliance.
• Notifications — Order alerts and incoming call notifications.

7 Data storage and security

Your data is stored on servers located in the United Kingdom. All communication between the app and our servers is encrypted using HTTPS (TLS 1.2 or later). We retain session and device data only for as long as your register is active in our system.

8 Your rights

Under UK GDPR and the Data Protection Act 2018, you have the right to:

• Request access to the personal data we hold about you.
• Request correction or deletion of your data.
• Object to or restrict processing of your data.
• Withdraw consent at any time (e.g. by disabling notifications in iOS Settings).

To exercise any of these rights, email support@controlsuite.co.uk.

9 Children's privacy

Control Suite is a business application and is not directed at children under 16. We do not knowingly collect data from children.

10 Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top of this page will reflect the most recent revision. Continued use of the app after changes constitutes acceptance of the updated policy.