Terms for shops

Who these terms are for

Piña is run by Pina Digital Limited, a company registered in England and Wales, company number 17559261, registered office 12 Harrington Villas, Brighton, BN1 6RG. These terms are between Pina Digital Limited (“Piña”, “we”) and the business that sets up a shop on Piña (“you”). The person who sets up the shop confirms they are entitled to agree to these terms for that business.

You agree to these terms by choosing “Create my shop” on the sign-up page, and we record the date and the version you agreed to. Customers who tap for receipts are covered by the separate terms at mypina.co.uk/terms.

What Piña provides

Piña gives your customers a digital receipt at the till. A customer taps a Piña tag next to your card reader and their receipt opens on their device. From those receipts, your dashboard shows how many customers keep receipts, repeat rate, top products, lapsed customers and how many card payments got a receipt, and lets you export your customer summary as a CSV file at any time. Every customer appears as a code, never by name: Piña never shares a customer’s personal data with a shop.

We check each new shop before opening its dashboard, and we supply and encode the tags. The tags remain our property and we may replace them.

Pricing

Piña is free while your shop is in the trial. After the trial, shops pay a monthly fee, from £10 to £50 a month, depending on the size of your business. We will tell you by email at least 30 days before any charge begins, and you can end these terms before then at no cost. There is no charge per receipt, and customers never pay.

Your till system

To find each customer’s payment, Piña connects to your till system (Square, SumUp, Lightspeed or Clover) with the access you grant when you connect. You allow us to read your completed payments, their line items and your list of card readers for as long as the connection stands.

Piña only reads your till data, and will never take or refund a payment or change your prices, items or settings. Our code enforces this on every request. You can disconnect at any time from the Till system page, and your agreement with your till provider is unaffected by these terms.

Tags at the counter

Keep each tag next to the card reader it is linked to on the Piña tags page, and link it again if you move it to another reader. Tell customers “Tap here if you’d like your receipt”, and nothing more is needed at the till.

Do not open, copy, re-encode or lend a tag. Tell us if a tag is lost or damaged, and return the tags when you stop using Piña.

Receipts

A receipt shows what your till recorded: the items, prices, VAT and card details your till system sent us. You are responsible for your till recording the sale correctly and for the receipt being a true record for your customer.

The name, address, logo, company name, VAT number, website, Instagram handle and receipt message you add on Receipt branding appear on every receipt. They must be accurate and yours to use.

A receipt link stays open to whoever holds it for as long as Piña runs, including after you stop using Piña, because the receipt belongs to your customer as well as to you.

Your customers and their data

Piña never shares a customer’s personal data with you. For taps, device memory, customer accounts and offers, Piña is the data controller and the customer’s relationship is with us. You see each customer as a code with their visits and what they bought, and never their name, email address or how they signed in. For your till data and that customer summary, you are the controller and Piña is your processor: we hold them for you under the data processing agreement below.

When offers through Piña open, you will be able to write an offer and choose a group of at least ten of your customers, and Piña will send it to those who have agreed to hear from shops they have bought from. You will see how many were sent and how many claimed, never who. A customer claims an offer by pressing a button on their own device at your counter; honouring the offer is up to you.

Your side of this, which you agree to:

• Do not try to work out who a customer code belongs to, and do not combine Piña’s data with anything else to identify a customer.
• Do not sell or pass on the customer summary, or use it for any purpose other than running your shop.
• Have your own privacy notice that says you use Piña for receipts and may send offers through Piña, and pay the data protection fee to the Information Commissioner’s Office if your business has to.
• Tell us promptly if a customer asks you for a copy of their data, or to delete it, so we can help.

The data processing agreement

This section is the written agreement UK GDPR Article 28 requires between you, as controller of your till data and customer summary, and Piña as your processor.

Subject matter and duration: the completed payments your till system sends us and the summary of your customers built from them, held for as long as you use Piña. Nature and purpose: storing them, matching payments to taps, showing the summary on your dashboard and exporting it as CSV at your request. Types of data: each payment’s items, amount, time, card brand and last four digits, and for each customer a code, the dates they visited, their receipts and spend at your shop. Data subjects: your customers. No name, email address or sign-in method is ever part of it.

Piña will:

• Process it only on your documented instructions, which are these terms and what you do on your dashboard, unless the law requires otherwise, in which case we tell you first where the law allows.
• Make sure everyone with access to it is bound by a duty of confidentiality.
• Keep it secure: every page served over HTTPS, till access tokens encrypted at rest, hosting in London, access limited to Piña staff who need it, and the measures described in our privacy notice.
• Use only the sub-processors named in our privacy notice (currently Supabase, Vercel, Resend and Sentry), each under a written contract with the same duties. We tell you by email at least 30 days before adding or changing one, and you may end these terms if you object.
• Keep personal data in the UK or the EU, and where a sub-processor is in the United States rely on the UK extension to the EU-US Data Privacy Framework or the International Data Transfer Addendum.
• Help you answer requests from your customers about their data, and, taking into account the nature of the processing and the information available to us, help you meet your duties on security, breach notification and data protection impact assessments.
• Tell you without undue delay, and at the latest within 48 hours of becoming aware, of a personal data breach affecting your till data or customer summary, with what we know and what we are doing.
• When these terms end, keep your dashboard open for 30 days so you can export your customer summary, then end your access to it. Customers keep their own receipts and accounts with Piña, as the controller of those.
• Give you the information needed to show these duties are met, by answering reasonable written questions at most once a year, and allow an audit where the Information Commissioner requires one.
• Tell you if we think an instruction of yours breaks data protection law.

Our responsibility

We provide Piña with reasonable care and skill. We do not promise any particular scan rate, number of customers or effect on your sales, and we are not responsible for your till provider’s data, outages or changes, or for a payment your till did not send us.

Our total liability to you under these terms in any 12 months is limited to the fees you paid us in those 12 months, or £100 if you paid none. We are not liable for loss of profit, business, goodwill or data, or for any indirect or consequential loss.

Nothing here limits either side’s liability for death or personal injury caused by negligence, for fraud, or for anything the law does not allow to be limited, and nothing here removes either side’s own duties under data protection law.

Ending these terms

Either of us can end these terms at any time by email, with 30 days’ notice. We can end them at once if you break them, use customer data unlawfully or interfere with a tag or the service, and we will tell you why.

When they end, export your customer summary within 30 days and return the tags. Receipts already issued stay open to your customers at their links.

Changes to these terms

We may change these terms. For a change that affects you, we email you at least 30 days before the change applies, and the date at the top shows the current version. If you do not agree, end these terms before the change applies; carrying on after that date means you accept the new terms.

General

These terms are governed by the law of England and Wales and its courts have exclusive jurisdiction. Notices go by email, to privacy@mypina.co.uk for us and to the address you signed up with for you. These terms, the privacy notice and what you do on your dashboard are the whole agreement between us about Piña. If a court finds part of these terms invalid, the rest still applies. Neither of us may pass these terms to someone else without the other’s agreement, except that we may pass them to a company that takes over Piña, with notice to you.

Contact

Email privacy@mypina.co.uk with any question about these terms.