Privacy policy

Last updated 12 August 2026.

Restockd is a supplier-ordering service for restaurants, cafés and bars. Restockd is operated by Crossand Ltd, a company registered in England and Wales, company number 17117244. In this policy “we”, “us” and “Restockd” mean Crossand Ltd and “you” means the business using Restockd.

For the personal data described here, Crossand Ltd is the data controller. Contact us at hello@getrestockd.co.uk.

The short version

We collect only the data needed to operate, secure and support Restockd. We do not sell your data, use it for advertising or use it to train an AI model. Your order history is yours and you can export it as CSV at any time, including on the day you leave.

What we collect and why

Your account

When you create an account we collect your business name, chosen web address, name and email address. Where WordPress creates a password, it is stored as a hash and is never readable by us. Email users normally sign in to Restockd with a one-time code. We use this information to create and run your site and to contact you about the service. If you request a discovery call or extension access, we also collect the business and contact details you enter on the marketing site so we can reply, assess fit and arrange onboarding.

We also record when your account was created, when it was verified and which subscription plan it is on.

What you put into Restockd

Your suppliers and their contact details, product catalogue, sections, staff access levels and every order you build and send are part of the service. We also store approval records, audit records and delivery queries. If you attach photos to a delivery query, Restockd stores them privately with that query and sends them to the relevant supplier and copied business recipients. Before storage or sending, Restockd re-encodes accepted images and removes EXIF, XMP, IPTC and comment metadata. A retained ICC colour profile may still contain limited device information. Photos are retained until the query is resolved, then for 90 days.

Staff who sign in with a PIN have a name, a PIN stored as a hash and a set of permissions. No email address is held for a PIN user.

Order emails

When you send an order, we email each supplier the products, quantities, delivery date, your account number with them and any notes you added. Prices are never included in a supplier order email.

Supplier replies come back through an address at `restockdorders.co.uk` and are relayed to your account email. We check that a reply genuinely came from the supplier’s own mail domain before relaying it.

Technical records

We log sign-ins, failed PIN attempts and changes to suppliers, products, settings and orders so that authorised users can see what happened and we can investigate problems. Web server logs, including IP addresses, are kept by our hosting provider.

The browser extension

The Restockd browser extension is optional. It exists for suppliers who take orders on their own website rather than by email.

What it stores in your browser: your Restockd site address, a device name you choose and the access and refresh tokens that keep you connected. The access token lasts fifteen minutes and the refresh token can last up to thirty days. Signing out removes Restockd tokens and connection details. The configured site address and device label may remain until the extension is reset or removed.

What it sends and where: the extension communicates with your connected Restockd site and supplier websites used for requested ordering or catalogue tasks. It does not use that access for general browsing analytics.

To your own Restockd site it sends the configured supplier hostname, product details you choose to import, catalogue search or price results you ask to review and order-placement status. Pairing also records the device name, client version and technical browser details needed to identify the connection.

On a configured supplier website, the extension reads the pages needed for the search, import, price-check or basket task you requested. It sends requested product or price results to your Restockd site for review. Basket preparation runs in your signed-in supplier session and stops before checkout.

What it does not do: it does not ask for or store your supplier passwords. It does not use page access to track general browsing and it never completes checkout or places an order. Supplier operations are restricted at runtime to configured HTTPS supplier origins, even if you choose the broader optional permission.

Permissions: a fresh install has no supplier-site access. You may grant one configured HTTPS supplier origin when needed or choose a broad all-HTTPS permission for supplier search and product-page tools. You can review or remove those permissions in your browser settings. A broad grant allows technical page access across HTTPS websites, while Restockd’s runtime checks restrict supplier operations to configured origins.

The use of information received from Google APIs will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements.

The tablet app

The Restockd tablet app holds sign-in tokens encrypted with a key managed by the Android system. It keeps supplier website logins as ordinary WebView sessions on that tablet. No supplier password is stored by us or sent to us. Signing out of the app clears its supplier cookies, web storage, cache and browsing history.

Who else sees your data

We use a small number of providers to run the service. We do not sell data to anyone. These providers may not use your data for their own purposes.

About the last one. Optional AI features use different data for different jobs. Product-name suggestions send the source product title. AI price matching sends an unmatched line description and a shortlist of candidate product names. PDF price-list or invoice reading sends the uploaded document. These features may depend on the plan, a separate release grant and account settings. Restockd does not apply an AI price result until an authorised person reviews and applies it.

We will disclose data if we are legally required to. If Restockd is ever sold, your data would transfer with it and we would tell you first.

How long we keep it

We keep account data while the account is open. Enquiry data from people who do not become customers is deleted or anonymised 24 months after our last contact. When you close the account we delete the site and its data within 30 days, except where records must be kept longer for accounting or legal reasons. Deleted data may remain in backups until those backups are overwritten, which we currently target within 90 days. Delivery-query photos are deleted 90 days after the query is resolved.

You can export your products and your full order history as CSV at any time, including after you have given notice.

Your rights

Under UK data protection law you can ask us for a copy of the personal data we hold about you, ask us to correct it, ask us to delete it, object to how we use it or ask us to send it to somebody else. Email hello@getrestockd.co.uk and we will respond within one month.

Our lawful basis for handling account and order data is performance of our contract with you. We rely on legitimate interests to respond to business enquiries, protect the service, prevent misuse and keep appropriate operational records.

If you are not happy with how we have handled your data you can complain to the Information Commissioner’s Office at ico.org.uk.

Cookies

Restockd sets cookies to keep you signed in and remember your dashboard preferences. We do not use advertising or tracking cookies. There is no third-party analytics on your Restockd dashboard.

Children

Restockd is a business tool and is not intended for anyone under 18.

Changes

If we change this policy we will update the date at the top and, where the change is significant, tell account holders by email.