Privacy

Who we are

Cheekypayments is a trading name of Cheeky Payments Limited, a company registered in England and Wales.

You can reach us at hello@cheekypayments.com.

What we hold about you

Only what is needed to know who is signing in and which account is yours:

• —Your email address and the business name you gave us when you signed up.
• —An identifier for the Stripe account we created for you, so your dashboard shows your takings and nobody else’s.
• —Ordinary server logs — the pages requested and when — which are kept short and are not used to build a profile of you.

There is no database of your trade behind this site. Your payments, payouts, customers and disputes are read from Stripe live each time you open a page, and are not copied into a store of ours.

If you register interest in Cheeky Till

The form on our EPOS page asks for your email address, your business name, the kind of place you run, how many venues you have and, if you choose to tell us, which till and card machine you use now and your postcode. We keep those answers, the date you sent them, and a scrambled version of the network address the form came from that we use only to stop the form being flooded. We do not keep the address itself.

We use them for one thing: to send you one email when the till is ready, and to decide what to build first and where to visit. The lawful basis is your consent, which is the box you ticked. We delete the list within three months of launch, and we delete your row sooner if you ask by email.

What passes through us but is not kept

Setting up an account means answering the identity questions the card schemes require: names, dates of birth, addresses, company details and the bank account your payouts land in. Those answers go straight to Stripe as you submit them.

Your sort code and account number are exchanged with Stripe for a token before they touch anything else. They are not written to any store of ours, and they are deliberately kept out of our logs. The only copy that outlives the moment you press save is Stripe’s.

Card numbers never reach us at all. Payments through the app, the card reader, payment links and online checkout are processed by Stripe, a certified PCI Service Provider Level 1. Payments on a countertop card machine are processed by Verofy on your own Verofy account. Cheekypayments never sees or stores full card numbers.

Why we are allowed to hold it

• —To provide what you asked for — performing our contract with you covers your account and your dashboard.
• —To meet legal obligations — identity and anti-money-laundering checks are a legal requirement for taking card payments, not a preference of ours.
• —Our legitimate interests in keeping the service secure and working, which covers the logs and the record of when you accepted the terms.

Who else sees it

• —Stripe processes the payments and runs the identity checks. For that information Stripe is a data controller in its own right, not simply acting on our instructions, and its own privacy policy governs what it does with it.
• —Verofy, if you apply for a countertop or portable card machine: the details needed to open an account with them go to Verofy, which is a data controller in its own right for that account.
• —Supabase hosts the sign-in system that holds your email address, and the Cheeky Till waitlist if you joined it, and acts on our instructions.
• —Nobody else. We do not sell your information, and we do not share it for advertising.

How long we keep it

Your account details for as long as you have an account, and for a period afterwards where we are required to keep records. Information held by Stripe is kept under Stripe’s own retention rules, which are shaped by the same financial-record obligations.

Your rights

You can ask for a copy of what we hold, ask us to correct it, ask us to delete it, or object to how we use it. Email hello@cheekypayments.com and we will answer within a month.

Some of it we cannot delete on request — identity records tied to a payment account are kept because the law requires it, and we will say so plainly rather than quietly refusing.

If you think we have handled your information badly you can complain to the Information Commissioner’s Office at ico.org.uk. We would rather you told us first so we can put it right.