Privacy notice

Who is responsible

Croeso Pubs LTD is responsible for personal information used in Croeso Supercomputer, our workplace app for authorised staff and managers. Contact info@croesopubsltd.co.uk about this notice or your information. This notice covers Supercomputer, including its separate review/demo workspace, rather than the public company website.

Information we use

• Accounts: name, email address, account identifier, account status, role and venue/page permissions. Details are supplied by you or the administrator who creates your account.
• Workplace records: notes, replies, actions, campaign information, music and maintenance requests, reports and files submitted by authorised users or imported from connected business systems. Records may identify their author and when they were created, viewed or changed.
• Attachments: documents and images selected for upload. The app does not automatically upload your photo library. Only submit personal information needed for the relevant business task.
• Notifications: device/browser notification identifiers, subscription details and associated account information, used to deliver workplace alerts.
• Service information: technical error records and operational/security audit information used to run, protect and troubleshoot the service.

Financial and wage reporting is restricted to authorised users. Venue totals are business information; any identifiable personal information included in submitted reports or attachments is handled as part of the relevant workplace record.

Why we use it

We use information to sign you in, apply access permissions, provide reports, coordinate work, deliver workflow emails and notifications, maintain accountability and investigate service problems. We rely on our legitimate interests in managing venues and operating a secure workplace service, taking account of staff rights. Where records are necessary to meet accounting, tax or other statutory duties, we rely on those legal obligations. Essential account information is needed to provide access; optional attachments and notification permission can be controlled separately.

Supercomputer does not use the declared app data for advertising or tracking you across other companies’ apps and websites. It does not make solely automated decisions about employment with legal or similarly significant effects.

Access and service providers

Authorised colleagues can access workplace records according to their permissions. Workflows may email records to their configured business recipients. Amazon Web Services supports authentication, hosting, storage, email and notification services; Apple supports iOS notification delivery. Enabled Notion and Microsoft integrations process information required for the connected features. We may also disclose necessary records to professional advisers or authorities where required by law.

We require service providers handling personal information on our behalf to protect it, limit its use to the services they provide and apply appropriate security. Core AWS services used by the app are configured in the London region. Service providers and connected services may also process information outside the UK. Applicable UK transfer protections are required for such processing. Contact us for information about the providers, destinations and safeguards relevant to your records.

Device security and choices

On supported iOS devices, biometric sign-in uses Apple’s device authentication and protected Keychain storage. Supercomputer receives the authentication result, not your face image or fingerprint template. You can sign out and control notification permissions in device settings. Turning off notifications does not remove the underlying workplace record or close your account. External websites opened from the app have their own privacy notices.

How long information is kept

Our Data Retention and Deletion Policy, adopted on 20 October 2026, sets the following schedule:

• Disable access when it is no longer authorised; remove unnecessary account/profile information within 90 days after access ends.
• Keep routine operational records for 24 months after closure.
• Keep necessary accounting evidence for six years from the relevant company financial year-end, or longer where legally required.
• Keep technical diagnostic logs for 90 days and security/access logs for 12 months.
• Attachments follow the necessary parent record; temporary duplicates have shorter periods.

The full policy explains payroll records, review accounts, notification subscriptions, emails, backups and documented legal holds.

These are the adopted retention rules. Automatic deletion across all connected systems has not yet been enabled. Records require controlled administrative review and disposal; adopting this policy does not itself erase existing records. Copies in email, connected systems or backups require separate handling. Contact us to request a review or deletion of your information.

Your rights and requests

Email info@croesopubsltd.co.uk to request access, correction, deletion, restriction, or to object to use based on legitimate interests. Data portability applies where its legal conditions are met. These rights are subject to applicable exemptions; we will explain any information that must be retained. We may need proportionate identity verification. We normally respond within one month, with extensions only where the law permits and with an explanation.

You can request closure of your Supercomputer account through the same address or your administrator. Closure removes access but does not automatically erase records required for business or legal purposes. You may complain to the Information Commissioner’s Office; you do not need to contact us first.

Review/demo workspace

The separate demo workspace uses fictional venue data and separate authentication. Sample notes and requests remain in the open demo session and do not send live emails or update production records. The reviewer’s account details are still personal information and follow the account rules above.

Changes to this notice

We will update this notice when relevant features or data practices change and identify the effective date above. Material changes will be communicated to affected users.