Privacy Policy

This policy applies to:

• The GPOS Bar website and website contact forms;
• The GPOS Bar Manager app;
• The connected GPOS Bar Desktop and Back Office systems; and
• Customer support, installation, training, and related communications.

For information about a venue’s customers, members, reservation guests, or bottle-storage customers entered by the merchant into GPOS Bar, the merchant determines why that information is used. GPOS processes the information to provide the system to the merchant under the applicable instructions and agreements.

The information collected depends on how the service is used and the permissions assigned to the account. It may include:

We do not access device photos, files, or the camera beyond the content and permissions selected by the user for the relevant function.

We may use information to:

• Create, operate, and administer GPOS Bar accounts;
• Authenticate users and enforce role-based access;
• Provide ordering, table, reservation, membership, bottle-storage, inventory, payment, and reporting functions;
• Synchronize and display relevant information across Desktop, Back Office, and GPOS Bar Manager;
• Provide support, respond to questions, and troubleshoot issues;
• Detect errors, prevent unauthorized access, and protect the service;
• Improve the service’s reliability, performance, and user experience;
• Fulfil contracts and comply with legal, accounting, tax, audit, or regulatory requirements; and
• Send necessary service communications and, where legally permitted or consented to, marketing communications.

Depending on the circumstances, we process personal data when necessary to:

• Perform a contract or take steps requested before entering into a contract;
• Comply with a legal obligation;
• Pursue legitimate interests of GPOS, the merchant, or users without overriding the data subject’s rights;
• Prevent or suppress danger to life, body, or health; or
• Act on consent where required. Consent may be withdrawn at any time.

We may disclose information, only as necessary, to:

• Store owners, account administrators, and staff authorized by the merchant;
• Providers of cloud hosting, storage, security, notifications, technical support, and app distribution;
• Payment providers or partners selected by the merchant for the relevant transaction;
• Professional advisers and auditors subject to confidentiality obligations;
• Government agencies, courts, or lawful authorities when disclosure is required; and
• Parties involved in a merger, restructuring, or transfer of business, subject to appropriate safeguards.

We do not sell or rent personal data for advertising.

Some service or infrastructure providers may operate outside Thailand. Where information is transferred internationally, we will comply with applicable data-protection law and use appropriate safeguards.

• Account and service information is retained while the account or service agreement remains active.
• Merchant operational records may be retained as necessary for service delivery, contracts, accounting, tax, audit, security, and legal obligations.
• When information is no longer required, we will delete, destroy, or anonymize it using appropriate procedures.
• Backup copies may remain temporarily until replaced or deleted through the normal backup cycle.

We use appropriate technical and organizational safeguards, such as authentication, role-based permissions, access controls, secure data transmission, event logging, and backups, to reduce the risk of loss, unauthorized access, misuse, alteration, or disclosure.

No system can guarantee complete security. Users should keep their login details confidential and notify us promptly if they detect suspicious activity.

Subject to applicable law, a data subject may have the right to:

• Access and obtain a copy of personal data;
• Correct inaccurate or incomplete data;
• Request deletion, destruction, or anonymization;
• Restrict processing;
• Object to processing;
• Receive or transfer data where required by law;
• Withdraw consent without affecting prior lawful processing; and
• Submit a complaint to Thailand’s Personal Data Protection Committee.

Some rights may be limited by law or may affect our ability to provide the service. We may request additional information to verify the requester’s identity.

GPOS Bar Manager is a business tool for business owners, venue administrators, and authorized staff. It is not designed for children or minors. If information about a minor has been collected without an appropriate legal basis, please contact us.

The website or app may link to or integrate with third-party services. Their handling of information is governed by their own privacy policies. Users should review the policies of the services they choose to use.

We may update this policy when the service, law, or our practices change. The latest effective date will be displayed on this page. We will provide appropriate notice of material changes.