Privacy Policy

getclap.nl | Based in the Netherlands | Contact: privacy@getclap.nl.

From restaurant partners: business name, contact details, POS system and configuration data, menu and pricing data, bank/payout details (processed via our trusted payment provider).

From diners: no account is required to use Clap. When you scan a table code and pay, we process transaction data (amount, items, timestamp) and device/browser information needed to complete the payment. Card and payment details are collected and processed directly by our licensed, PCI-DSS compliant payment service provider — we do not store your full payment card details ourselves.

To process payments, operate the restaurant dashboard, provide customer support, improve the product, and comply with legal and tax obligations.

Processing is based on performance of a contract, legitimate interest (product improvement, fraud prevention), and consent where required.

Our trusted payment provider (PCI-DSS compliant payment processing), our hosting/database provider, and the restaurant's own POS system for order and menu sync. We do not sell personal data to third parties.

Transaction records are kept as long as required by Dutch tax law (currently 7 years). Other data is kept only as long as needed for the purpose collected, or until deletion is requested where applicable.

Under GDPR, you have the right to access, correct, delete, restrict, or port your data, and to object to certain processing. Contact privacy@getclap.nl to exercise these rights. You may also lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

We use only essential cookies required for the payment flow to function. We do not use analytics or marketing cookies at this time.

We use industry-standard measures to protect data, including encrypted connections and restricted access. No system is 100% secure, and we cannot guarantee absolute security.

We may update this policy. Material changes will be posted on this page with an updated date.