Draft — pending final solicitor review. Maintained by VenueCore Ltd. Not legal advice.
Data Ownership, Export & Deletion
Version 2026-06-A · Forms part of the MSA and Privacy Policy.
1. Ownership
The Customer owns all Customer Data: menus, orders, payments, guests, bookings, staff records, recipes, financial reports and any content uploaded to the platform. VenueCore is a processor for this data (controller for limited account and billing data). VenueCore claims no licence to Customer Data beyond what is strictly necessary to provide the Services and to meet legal obligations.
2. Self-serve export (any time)
While the subscription is active, the Customer may export at any time, with no fee: menus and recipes (CSV/JSON), orders and payments (CSV), accounting ledgers (CSV), VAT returns (PDF + CSV), reservations and guest book (CSV), cash-up history (PDF), and signed legal snapshots (PDF). Exports are produced from
/app/accounting, /app/migration and the venue settings export tab.3. Termination export window
On termination (by either party, for any reason), Customer Data remains exportable for 30 days from the effective termination date at no additional cost. On written request VenueCore will extend this by a further 30 days once. After the export window closes the account moves to deletion (see §4).
4. Deletion schedule
Production data: deleted within 30 days of the export window closing. Encrypted backups: rotated out within 90 days. Logs containing personal data: 12 months maximum. Financial records VenueCore is legally required to retain (e.g. invoices, tax records under UK Companies Act / HMRC) are retained for 7 years in a restricted archive and used only for compliance.
5. Deletion certificate
On request, VenueCore will issue a written deletion certificate signed by an authorised officer once production deletion completes, identifying the systems wiped and the date of completion.
6. Data subject rights (GDPR / UK GDPR)
End-guest data subjects (your customers) may exercise access, rectification, deletion and portability rights via the Customer as controller. VenueCore will assist within 30 days of a written request from the Customer at no additional cost for reasonable volumes. See the Data Processing Addendum.
7. Portability format
Exports are machine-readable: CSV for tabular data, JSON for structured records (menu / floor plan / settings), PDF for human- readable statements. Schemas are documented and stable; breaking changes are announced 90 days in advance.
See also Business Continuity, Incident Response, Subprocessors.