Privacy Policy

Last updated: 9 November 2026

This policy explains what personal data Fire Suite collects, why, and your rights over it. Fire Suite is operated by SafeerTec Ltd.

1. Who we are, and which hat we are wearing

SafeerTec Ltd, registered in England & Wales. Contact: info@safeertec.com.

Which role we are in depends on whose data it is, and the distinction matters because it decides who you ask about what:

• Your staff's data — your employer is the controller, and we are their processor. Hours, pay, right-to-work documents and the rest belong to the business you work for. They decide what is collected and why; we only act on their instructions. If you work for a Fire Suite customer and want to see, correct or delete your data, ask your employer first — they can do it in the app straight away. The terms governing that are in our Data Processing Agreement.
• Account and billing data — we are the controller. The name and email of whoever signs up for Fire Suite, and the billing record behind it, are ours to decide about, because we keep them to run our business. That part of this policy is about us.
• Our own three shops. SafeerTec operates its own takeaways on Fire Suite. For that staff data we happen to be both — controller as the employer, and processor as the software company.

2. What we collect

• Account data — your name, email address and business name.
• Billing data — subscription and payment status. Card payments are handled by Stripe; we do not receive or store your full card number.
• Your content — images, videos and playlists you upload to display on your screens.
• Usage & technical data — sign-in and activity logs, device and screen pairing details, IP address and basic diagnostics needed to run and secure the service.

3. How we use it

To provide and operate the service, set up and manage your account, process your subscription, send service and security emails (such as offline-screen alerts), provide support, and keep the service safe and reliable.

4. Legal bases

We process personal data to perform our contract with you, for our legitimate interests in running and securing the service, to meet legal obligations, and — where relevant — with your consent (which you can withdraw at any time).

5. Who we share it with

We use trusted providers who process data on our behalf, under contract, only to deliver the service:

• netcup (Germany) — server hosting; the application and its database run here.
• Cloudflare — media storage and delivery (R2), DNS, and counting visits to firesuite.co.uk (Web Analytics, which sets no cookies).
• Anthropic (United States) — reads the dates off a scanned certificate or right-to-work document, and reads supplier invoices, so a manager confirms a date rather than typing it. The document is sent only at the moment it is scanned, the result is always reviewed by a person before it is saved, and Anthropic's API terms provide that inputs are not used to train their models. A customer who would rather this was off can ask us to disable it for their account. If a shop switches on the rota assistant (it is off until they do), that shop's rota for the week being edited — staff names, roles, scheduling priority, availability and shift times — is also sent when a manager asks it to suggest changes; never pay, contact details or attendance records. If a restaurant switches on FireDrive's slip scanner (it is off until they do), the photo of a delivery slip (the customer's name, delivery address, phone number and order) is also sent when staff scan one, to fill in the delivery for them to check; the photo is not kept. If a shop switches on the VAT pack file sorter (it is off until they do), a file the owner adds to the VAT pack that Fire Suite cannot place by itself — typically a bank or card statement, which can show wages paid to staff by name, or a photo of a receipt — is also sent when it is added, only to say what kind of document it is, whose account and which period, so it is filed in the right place for the owner to check.
• Google LLC (Google Maps Platform, United States) — turn-by-turn directions for FireDrive drivers inside the FireDrive app, finding a delivery address on the map, and suggesting addresses while restaurant staff or FireDrive HQ type one into FireDrive: what they type and the address chosen. For a delivery a FireDrive driver navigates to: the delivery address and its map point, and the driver's location while they navigate. Never the customer's name or phone number.
• Twilio (United States) — connects calls between a FireDrive driver and your customer, where calling is switched on for your restaurant: the customer's phone number, the driver's where a call goes to their phone, and what is said on the call. Calls are not recorded. Twilio keeps its own record of each call, including those numbers. We delete each call's record from our Twilio account after the delivery: 24 hours after by default, and never more than 30 days after. Twilio may keep copies of its own beyond that.
• Stripe — payments and subscription billing. No staff data.
• Resend — sending account, payslip and alert emails.
• Backblaze (EU) — the off-site backup copy, which is encrypted before it leaves our server, so Backblaze cannot read it.
• Render and Neon — a dormant standby copy of the application and database, kept so the service can be restored quickly. Not used to serve the live service, and it holds no uploaded documents.

We do not sell your personal data, we do not use it for third-party advertising, and we do not use it to train machine-learning models. The full list, with what each one sees and where it is, is in Annex 3 of the Data Processing Agreement.

6. Cookies

We use only essential cookies needed to sign you in and keep your session secure. We do not use advertising or cross-site tracking cookies.

To count visits to firesuite.co.uk we use Cloudflare Web Analytics. It sets no cookies, stores nothing on your device and does not follow you to other sites.

7. How long we keep it

We keep your account data for as long as your account is active and for a reasonable period afterwards to meet legal, accounting and security needs, then delete or anonymise it.

8. Your rights

Under UK data protection law you have the right to access, correct, delete, restrict or object to the processing of your personal data, and to data portability. To exercise these, email info@safeertec.com. You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.

9. Security

We protect data with encryption in transit, hashed passwords, access controls and regular backups. No system is perfectly secure, but we take reasonable steps to keep your data safe.

10. International transfers

Our servers are in Germany, and some of our providers may process data outside the UK and the EEA. Where they do, appropriate safeguards (such as standard contractual clauses) are in place.

11. Children

Fire Suite is a business tool and is not directed at children. We do not knowingly collect data from anyone under 18.

12. Changes & contact

We may update this policy from time to time and will post the new version here. Questions or requests? Email info@safeertec.com.