Privacy Policy

This Privacy Policy describes how AceUps (ABN 96 403 880 523) (“AceUps”, “we”, “us” or “our”) handles personal information in connection with the Epos Plus website at https://www.eposplus.com.au (the “Website”) and the DigiPOS hospitality platform that AceUps operates under the Epos Plus brand (the “Service”). AceUps seeks to handle personal information responsibly and in accordance with applicable Australian privacy law.

By using the Website or the Service, or by sending us an enquiry, you acknowledge that we will handle your personal information as described in this policy.

1. Who we are

AceUps operates the Epos Plus service and provides DigiPOS, an all-in-one hospitality platform covering POS, kitchen display, self-order kiosk, customer display, online ordering and admin tools. The Service is accessed at app.digipos.com.au and on compatible devices in your venue.

Privacy questions, requests and complaints can be sent to the AceUps Privacy Contact at hello@eposplus.com.au.

2. Information we collect

Information you give us

When you contact us or book a demo through the Website, we collect the details you enter in the form: your name, business name, email address, phone number, venue type, number of locations, preferred contact time and anything you write in the message field.

If you email us directly, we collect your email address and the contents of your message.

Account and subscription information

When you sign up for the Service, we collect the information needed to create and administer your account and subscription: your business or organisation name, the name and contact details of the account holder and any staff users you add, your login credentials, your chosen plan, and the status of your subscription and trial.

Payment details are collected directly by Stripe, our payment processor, through Stripe-hosted checkout and billing pages. AceUps does not receive or store your full card number. We receive confirmation of payment status, the last few digits and expiry of the payment method where Stripe provides them, and billing records such as invoices and receipts.

Information processed on behalf of venues

The Service stores and processes the operational information a venue enters or generates while using DigiPOS, such as menus, orders, staff accounts, device details and reports. It also processes information about a venue’s own customers where a customer places an online order, receives an email receipt, or uses a kiosk or order-status feature — for example a name, contact details and order details.

The venue controls this information and decides how it is collected and used. AceUps processes it in order to provide the Service to the venue, in accordance with the venue’s instructions and our Terms of Service. If you are a customer of a venue that uses DigiPOS and have a question about your information, please contact the venue in the first instance. We will assist the venue with your request where required.

Technical information and cookies

The Website is a static site. It does not currently use analytics tools, advertising pixels or cookies of its own. Our web hosting provider’s server logs may record standard technical information when you visit, such as your IP address, browser type, the pages you request and the time of the request. We use this information only for security, troubleshooting and capacity planning.

The Service uses cookies or similar technologies that are necessary to keep you signed in and to keep your account secure. If we introduce analytics or advertising tools on the Website or in the Service in the future, we will update this policy before they take effect.

3. Why we collect and use personal information

We collect and use personal information to:

• respond to your enquiries and arrange demonstrations and trials of the Service;
• create, verify and administer your account and subscription, and process billing through Stripe;
• provide, operate, support, secure and improve the Website and the Service;
• send you service communications, such as billing notices, security alerts and notices about changes to the Service or our terms;
• let you know about Epos Plus products and updates where you have asked us to or would reasonably expect us to — you can opt out at any time by contacting us or using any unsubscribe link we provide;
• detect, investigate and prevent fraud, abuse and security incidents; and
• comply with our legal obligations and resolve disputes.

We do not sell personal information.

4. Who we share personal information with

We share personal information only where it is necessary for the purposes above, with the following kinds of recipients:

• Web3Forms — processes enquiry and demo-booking submissions from the Website forms and delivers them to us by email.
• Stripe — processes payments and manages subscription billing for the Service. Stripe collects your payment details directly and handles them under its own privacy policy.
• Hosting and infrastructure providers — the Website is hosted with Crazy Domains, and the Service runs on cloud infrastructure provided by Oracle Cloud Infrastructure. These providers store data on our behalf.
• Email delivery providers — used to send account, billing and support emails from us, and receipts or notifications from the Service on behalf of venues.
• Payment terminals and other integrations a venue chooses to connect — where a venue enables a third-party integration in the Service, information is shared with that provider as needed for the integration to work, under that provider’s terms.
• Professional advisers and authorities — our accountants, lawyers, insurers and other advisers, and regulators, courts or law-enforcement bodies where disclosure is required or authorised by law.

We may also share personal information in connection with a sale, merger or reorganisation of our business, subject to the recipient agreeing to handle it consistently with this policy.

5. Overseas processing

Some of the providers listed above may store or process information on servers located outside Australia. Stripe operates globally and may process information outside Australia, including in the United States. Web3Forms may process enquiry submissions on infrastructure outside Australia. Where we use overseas providers we take reasonable steps to ensure they handle personal information in a way that is consistent with this policy, including through the provider’s contractual commitments and security practices.

6. Security

We take reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification and disclosure. These steps include encrypting connections to the Website and the Service in transit (HTTPS/TLS), limiting access to personal information to people who need it for their role, using reputable hosting and payment providers, and relying on Stripe-hosted pages so that card details do not pass through our systems.

No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If we become aware of a data breach that is likely to cause serious harm, we will notify affected people and any relevant authority where required by law.

7. How long we keep personal information

We normally keep enquiry and contact-form information for up to 24 months from the date of your enquiry, after which we delete or anonymise it, unless it needs to be kept longer for legitimate business, legal, accounting, security or dispute-resolution purposes.

We keep account and subscription information for as long as your account is active and for a reasonable period afterwards where we need it for the purposes above — for example to meet accounting and tax record-keeping obligations or to resolve a dispute. Information a venue stores in the Service is kept in accordance with the venue’s instructions and our Terms of Service.

8. Access and correction

You can ask us for access to the personal information we hold about you, or ask us to correct it, by emailing the AceUps Privacy Contact at hello@eposplus.com.au. We may need to verify your identity before acting on a request. We aim to respond within 30 days. If we cannot give you access or make a correction, we will tell you why.

If you hold an account in the Service, you can update your account details directly in the Service’s settings and your billing details through the billing portal.

9. Questions and complaints

If you have a question or complaint about how we have handled your personal information, please contact the AceUps Privacy Contact at hello@eposplus.com.au. We will acknowledge your complaint, investigate it and respond to you. If you are not satisfied with our response, you may also be able to raise your concern with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.

10. Changes to this policy

We may update this policy from time to time. The current version will always be published on this page with its “last updated” date. If a change materially affects how we handle Service customers’ information, we will also notify account holders by email or through the Service before the change takes effect.

11. Contact

AceUps Privacy Contact
AceUps (ABN 96 403 880 523)
hello@eposplus.com.au