Privacy Policy

covrsPOS is a pre-launch point of sale product for independent cafes and restaurants, operated by Tyler Abass trading as covrs. We are based in Northwest England and are currently trading as a sole trader (not yet incorporated).

For the purposes of UK data protection law, Tyler Abass is the data controller for personal data collected through covrspos.com. A registered business address will be published here once the business is incorporated.

Questions or data requests: tyler@covrspos.com

This policy explains how we handle personal data when you visit covrspos.com, join the waitlist, or contact us. It applies to this marketing and waitlist website. If you access our password-protected POS preview area separately, additional operational data may be processed for access control — that is outside the scope of this public site policy unless stated otherwise.

On this website, we currently collect:

• Email address — when you submit the waitlist form.
• IP address — when you submit the waitlist form, stored temporarily to prevent abuse and rate-limit repeated submissions.

We do not use analytics, advertising, or social-media tracking cookies on this site. We do not knowingly collect special category data or information about children.

We use personal data for the following purposes:

• Waitlist email addresses — to contact you about early access, product updates, and pre-launch communications. Lawful basis: consent (you choose to submit the form).
• IP addresses (waitlist submissions) — to protect the waitlist from spam and abuse through rate limiting. Lawful basis: legitimate interests (keeping the service secure and usable).

Submitting the waitlist form is optional. If you do not join the waitlist, we do not collect your email address.

Waitlist data is stored in a secure, encrypted database hosted by a reputable cloud database provider with infrastructure in the UK and/or the European Economic Area. Access is restricted to Tyler Abass and is protected by technical and organisational measures appropriate to the data we hold.

Data is transmitted over HTTPS. We do not sell your personal data.

We use trusted third-party providers to operate this website, including:

• A secure database provider (UK/EU infrastructure) to store waitlist sign-ups and related security logs.
• A website hosting provider to deliver covrspos.com.

These providers process data on our instructions and only for the purposes described in this policy. We do not name specific vendors publicly here, but you may request further details by contacting us.

• Waitlist email addresses — kept while covrsPOS is in pre-launch development and for a reasonable period afterwards (typically up to 24 months from your last meaningful contact with us), unless you ask us to delete them sooner.
• IP addresses linked to waitlist submission attempts — stored to prevent abuse. Only attempts from the last 15 minutes are used for rate limiting. We delete these records within 30 days unless a longer period is needed to investigate abuse.

When data is no longer needed, we delete it or anonymise it. You may request deletion at any time (see Your rights below).

Under UK PECR, we inform you about cookies and similar technologies used on this site.

covrs_cookie_consent — a strictly functional cookie set only if you click Accept on the cookie notice. It stores the value 1 to remember that you have acknowledged the notice. It expires after one year, uses SameSite=Lax, is scoped to this site, and includes the Secure flag when you visit over HTTPS.

Dismissing the banner without accepting does not set this cookie. The site remains usable either way. We do not set tracking, analytics, or third-party marketing cookies on covrspos.com.

For more detail, see the cookie notice on the site or read our Terms of Service.

If you are in the UK or EEA, you have the following rights in relation to your personal data (subject to applicable exceptions):

• Right of access — request a copy of the personal data we hold about you.
• Right to rectification — ask us to correct inaccurate data.
• Right to erasure — ask us to delete your data in certain circumstances.
• Right to restrict processing — ask us to limit how we use your data.
• Right to data portability — receive your data in a structured, commonly used format where applicable.
• Right to object — object to processing based on legitimate interests.
• Right to withdraw consent — where processing is based on consent (such as the waitlist), you may withdraw consent at any time.
• Right to complain to the Information Commissioner's Office (ICO) — if you believe we have handled your data unlawfully.

To exercise any of these rights, email tyler@covrspos.com. We will respond within one month, as required by law. The ICO can be contacted at ico.org.uk.

We may update this policy as covrsPOS develops or as legal requirements change. We will revise the “Last updated” date at the top of this page when we do. Material changes may also be communicated by email to waitlist subscribers where appropriate.