In short: your restaurant’s data belongs to your restaurant. We keep it in its own database, use it only to run Cabin POS for you, and never sell it.
Who we are
Cabin POS is a restaurant point-of-sale service provided by Elevare Digital Solutions (“we”, “us”), based in Sri Lanka. This policy explains what personal data we handle when you visit this website or use Cabin POS, and how we protect it.
We aim to follow Sri Lanka’s Personal Data Protection Act, No. 9 of 2022, and good international practice.
Your data, our role
When a restaurant uses Cabin POS, the restaurant decides what to record about its customers, staff and business. For that information the restaurant is responsible for it (the “controller”) and we process it on the restaurant’s behalf (the “processor”), only to provide the service.
For information about the restaurant’s own account with us (contact person, billing), and for visitors to this website, we are responsible for it.
What we collect
- Restaurant account details: restaurant name, contact person, phone number, email, the web address and domain you use, and your subscription and payment records with us.
- Staff logins: names, email addresses and roles of the people the restaurant adds. Passwords are stored only in hashed form; we cannot see them.
- Business records the restaurant enters: orders, menu, stock, suppliers, expenses (including bill photos), cash and bank entries, and customer details such as names, phone numbers, birthdays and credit balances.
- Technical data: basic server logs (such as IP address, browser and time of request) used to keep the service secure and working.
- This website: we do not use advertising or tracking cookies. If you contact us on WhatsApp or by email, we receive what you send us.
How we use it
- To provide Cabin POS: running orders, reports, receipts, reminders and the other features the restaurant switches on.
- To set up and support your restaurant, and to answer your questions.
- To manage your subscription, including payment reminders and, if a payment is overdue, pausing access as described in our Terms.
- To keep the service secure, prevent misuse, and fix problems.
- To meet legal obligations, for example keeping financial records.
We do not sell personal data, and we do not use restaurant or customer data for advertising.
WhatsApp messages
Restaurants can send receipts, credit reminders, birthday wishes and supplier orders on WhatsApp. These messages are sent from the restaurant’s own WhatsApp number, either by opening WhatsApp on the restaurant’s device or through a WhatsApp account the restaurant links. The restaurant is responsible for having its customers’ permission to message them, and WhatsApp’s own terms and privacy policy apply to those messages.
Who we share it with
We share personal data only when it is needed to run the service or required by law:
- Hosting and infrastructure providers that store and run Cabin POS for us, under obligations to keep the data secure and confidential.
- Google Fonts, which serves the fonts on this website and receives your IP address when the page loads.
- Authorities, where we are legally required to disclose information.
How we protect it
- Each restaurant has its own separate database; restaurants never share tables or records.
- Logins only work for the restaurant they belong to, and each person sees only what their role allows.
- Passwords are hashed, connections to the service use HTTPS, and access to our servers is restricted.
- No system is perfectly secure. If we learn of a breach that affects your data, we will tell you without undue delay.
How long we keep it
We keep a restaurant’s data for as long as its account is active. If a restaurant stops using Cabin POS, we keep its data for up to 90 days so it can come back or ask for a copy, then delete it, unless the law requires us to keep certain records longer. Backup copies are removed on their normal schedule.
Your rights
Depending on the law that applies to you, you may ask to:
- see the personal data we hold about you and get a copy;
- correct data that is wrong or incomplete;
- have your data deleted, or its use restricted;
- withdraw consent you have given, and object to some uses.
If your data was entered by a restaurant (for example, you are its customer), please contact that restaurant first; we will help them respond. You can also complain to the Data Protection Authority of Sri Lanka.
Children
Cabin POS is a business tool and is not meant for children. We do not knowingly collect personal data from children, other than what a restaurant may record about its customers.
Changes to this policy
We may update this policy as Cabin POS changes. We will post the new version here with a new date, and tell restaurants about important changes in advance.
Contact us
Questions about privacy, or a request about your data: Elevare Digital Solutions, Sri Lanka · elevarecloud.com · or the WhatsApp contact on our home page.