Privacy Policy

Who this policy covers

This policy applies to the LaventTech website at laventtech.com, and to the LaventTech platform used by merchants and their staff. For any privacy question, or to exercise a right described below, email info@laventtech.com.

It does not replace the privacy policy of a café that uses LaventTech. When you buy from a café, that café decides how it handles your personal data, and its own policy applies.

Our two roles

For our own business data — website enquiries, merchant accounts and billing — LaventTech is the organisation responsible for the personal data.

For a café's own customer data held in the platform, the café is the responsible organisation and LaventTech acts as a data intermediary, processing that data on the café's instructions in order to run the service the café has configured.

Website visitors and enquiries

When you submit a demo request or contact form, we collect the details you choose to give us: your name, business name, email address, phone number, number of outlets, current system and your message.

We use those details only to answer your enquiry, arrange a demo, and follow up about it. Enquiry records are stored separately from any café's live customer data.

Merchant account and billing data

For a merchant we hold business details (business and legal name, outlet details, billing contact), the plan and subscription record, invoices and payment references, and support correspondence.

We use this to provide and support the service, to invoice, to meet our record-keeping obligations, and to contact the merchant about the service.

Staff and user data

Merchants create accounts for their own staff. Depending on the modules a merchant uses, this can include name, role, contact details, access credentials, sign-in records, time-clock and roster records, and an audit trail of actions taken in the platform (for example who applied a discount or voided a bill).

Access credentials are stored in hashed form, not as readable passwords or PINs. The merchant decides which staff have accounts and what each role may access.

Café customer data processed for merchants

Where a merchant enables the relevant modules, the platform processes that café's own customer records: name and contact details, orders and order history, reservations, loyalty points and rewards, stored credit and vouchers, receipts, and notes the merchant records.

This data belongs to the merchant's relationship with its customers. LaventTech does not use it for our own marketing, does not sell it, and does not combine it across merchants.

Communications

We send merchants service and account emails. On behalf of merchants, and only where the merchant has enabled it, the platform can send that café's customers transactional messages such as order confirmations, digital receipts, reservation notices and loyalty updates, and messaging-channel notifications.

Marketing messages to a café's customers are the merchant's responsibility: the merchant is responsible for having a lawful basis, honouring opt-outs, and complying with the Do Not Call provisions of the PDPA where they apply.

Cookies and analytics

This marketing website does not use advertising cookies, tracking pixels or third-party analytics.

The LaventTech platform uses strictly necessary cookies to keep a signed-in session secure and to keep the different areas of the product (point of sale, management, staff portal and customer-facing pages) separated from one another. These are required for the service to work and are not used for advertising or profiling.

Payment data

LaventTech does not store full card numbers, card expiry dates or security codes on its servers.

Where a card payment is taken online, card details are entered into the payment provider's own secure components and are handled by that provider under its own terms. Where a physical payment terminal is used, card details are captured by the terminal and the payment provider, not by LaventTech.

What we hold is the outcome of a payment — for example the amount, currency, date, payment method type, and the provider's transaction reference — so that orders, receipts and reports reconcile.

Service providers we use

We use a small number of service providers to deliver the platform: cloud hosting and managed database services, transactional email delivery, payment processing, messaging channels where a merchant enables them, and AI features where a merchant enables them.

They may access personal data only as needed to perform their service for us, under contractual obligations of confidentiality and security. We do not sell personal data and we do not share it for third-party advertising.

A current list of the service providers used for a merchant's configuration is available on request from info@laventtech.com.

Where data is held

The platform's application servers and primary database are hosted in Singapore.

Some service providers described above may process limited data outside Singapore. Where that happens, we take steps intended to ensure the data receives a standard of protection comparable to that required under the PDPA.

Tenant isolation

Each merchant's data is separated at the architecture level. Requests are scoped to a single merchant, so one merchant cannot reach another merchant's data through the platform.

How long we keep data

We keep personal data only for as long as it is needed for the purposes described here, or for as long as we are required to keep it by law — for example, records that support invoicing and accounting.

Website enquiry records are kept while the enquiry is live and for a reasonable follow-up period afterwards.

A merchant's platform data is retained for the duration of the subscription. On termination the merchant may export its data; after the export window agreed in the merchant's order, the data is deleted or anonymised.

Security

We apply reasonable technical and organisational measures to protect personal data, including tenant isolation, role-based access control, hashed credentials, encrypted connections and server-side handling of secrets. Our Security page describes this in more detail, including what we do not claim.

Your rights

Subject to the PDPA, you may ask us for access to the personal data we hold about you, ask us to correct it, or withdraw a consent you have given. Email info@laventtech.com and we will respond within a reasonable time.

If your request concerns data held by a café that uses LaventTech, we will direct you to that café, which is the organisation responsible for it.

Deleting your data

You may request deletion of personal data associated with your use of LaventTech at any time, by emailing info@laventtech.com.

Our Data Deletion page explains how to make the request, what we need in order to identify the relevant account, and what happens once a request is verified.

Children

The LaventTech platform is a business tool and is not directed at children. We do not knowingly collect personal data from children for our own purposes.

Changes to this policy

We may update this policy as the service develops or as the law requires. The current version is always published on this page with the date it was last updated. Where a change is material for merchants, we will also notify them directly.

Contact

Privacy and data-protection queries: info@laventtech.com. Postal correspondence can be arranged on request.