This Privacy Policy explains how Emmi Vending ("we", "us", "our") collects, uses, stores, and protects personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This policy applies to our vending machine services, website (if applicable), cashless payment systems, and all related interactions.

Company Name: Emmi Vending Ltd
Registered Address: 61 Bridge St, Kington, HR5 3DJ
Email: enquiries@emmivending.com
Telephone: +44 (0) 161 531 2024

We are the data controller responsible for your personal data.

We may collect and process the following types of personal data:

• Payment transaction references (not full card details)
• Machine usage data (time, product type, payment method)
• Refund or support enquiries

We do not store full debit or credit card numbers.

• Name
• Job title
• Business address
• Email address
• Telephone number
• Contractual and communication records

• IP address
• Browser and device information
• Cookies and analytics data

We collect personal data through:

• Cashless vending payment providers
• Direct contact (email, phone, in person)
• Contracts and service agreements
• Website forms or cookies (if applicable)

We use personal data to:

• Process vending transactions and refunds
• Provide customer support
• Install, operate, and maintain vending machines
• Manage client relationships and contracts
• Monitor machine performance and stock levels
• Comply with legal and regulatory obligations

We process personal data under the following lawful bases:

• Contract – where processing is necessary to fulfil a contract
• Legitimate Interests – to operate and improve our services
• Legal Obligation – to comply with applicable laws
• Consent – where required (e.g. marketing communications)

All cashless payments are processed securely by third-party payment providers. These providers act as independent data controllers and have their own privacy policies.

We do not have access to, or store, full payment card details.

We may share personal data with:

• Payment processing providers
• IT, telemetry, and vending system providers
• Professional advisers (accountants, insurers, legal advisers)
• Regulatory or law enforcement bodies where required by law

We do not sell personal data to third parties.

Where personal data is transferred outside the UK, we ensure appropriate safeguards are in place, such as adequacy regulations or standard contractual clauses.

We retain personal data only for as long as necessary:

• Transaction data: up to 6 years for accounting and legal purposes
• Client contact details: for the duration of the business relationship
• Support enquiries: up to 24 months

Data is securely deleted or anonymised when no longer required.

We take appropriate technical and organisational measures to protect personal data, including:

• Secure payment systems
• Restricted access to systems
• Encrypted devices where appropriate

Under UK GDPR, you have the right to:

• Access your personal data
• Request correction of inaccurate data
• Request erasure of your data (where applicable)
• Restrict or object to processing
• Data portability
• Withdraw consent at any time

Requests can be made by contacting us using the details above.

If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO):

Website: www.ico.org.uk
Telephone: 0303 123 1113

We may update this Privacy Policy from time to time. The latest version will always be available upon request or on our website (if applicable).

Last Updated: 04/02/26