FortiPOS Privacy Policy
Effective date: July 17, 2026
This Privacy Policy explains how Fortitag IT Service LTD., referred to as Fortitag, we, us, or our, provides products and services under the FortiPOS brand and collects, uses, discloses, and otherwise processes personal data on behalf of merchants that use FortiPOS.
This policy applies to FortiPOS services, including the FortiPOS Terminal Link and FortiPOS Handheld applications, which run on Clover devices, and related FortiPOS restaurant POS, web-admin, Staff, KDS, kiosk, reporting, support, and integration services.
FortiPOS generally processes personal data for and on behalf of the merchant that uses the service. This Privacy Policy is not a substitute for any privacy policy or notice that a merchant may need to provide to its own customers, staff, contractors, or other individuals.
If this Privacy Policy conflicts with a written customer agreement between Fortitag and a merchant, that agreement will control to the extent permitted by law.
Information FortiPOS collects
The personal data and operational data FortiPOS receives can vary by merchant configuration, enabled features, staff actions, and Clover or third-party integration settings.
- Payment and transaction metadata, such as order number, amount, tip, tax, refund or void status, authorization status, Clover payment identifiers, merchant and location identifiers, date and time, items purchased, and limited card details Clover returns to FortiPOS, such as card brand and last four digits when available. FortiPOS does not intentionally store full payment card numbers or card security codes.
- Customer information entered by the merchant, staff, kiosk, QR ordering, loyalty, receipt, delivery, or support workflows, such as name, phone number, email address, address, order history, loyalty activity, notes, receipt preferences, and delivery details.
- Merchant personnel information, such as staff names, roles, permissions, login identifiers, activity records, sales attribution, tip information, shifts where enabled, and support or audit records.
- Merchant account, business, location, tax, menu, device, printer, terminal, integration, configuration, log, diagnostic, support-bundle, and security information needed to operate and support FortiPOS.
How we use the information
FortiPOS uses information to provide, secure, maintain, support, and improve FortiPOS and the functionality requested by merchants.
- Process and sync restaurant orders, payments, refunds, tips, taxes, receipts, reports, menu settings, kitchen routing, kiosk and QR orders, loyalty activity, and staff operations.
- Configure and support Clover terminal integrations, device links, diagnostics, support requests, incident review, security controls, and service reliability.
- Send service notices, security alerts, support messages, product updates, and other operational communications.
- Comply with applicable law, enforce agreements, protect Fortitag, FortiPOS, merchants, users, and others, and detect or prevent fraudulent, harmful, unauthorized, unethical, or illegal activity.
How we share information
Fortitag does not sell merchant customer data. Fortitag may share personal data and operational data only as needed for the purposes described in this policy.
- With the merchant that provided the information or on whose behalf FortiPOS collected it.
- With Clover, Fiserv, and Clover POS services where needed for Clover app operation, payment-terminal integration, device linking, refunds, reporting, support, or compliance.
- With service providers that help Fortitag host, secure, maintain, support, monitor, or improve FortiPOS, subject to appropriate confidentiality and data-protection obligations.
- With third parties when directed by the merchant, when required by law or legal process, during a business transaction involving Fortitag, or when reasonably necessary to protect rights, safety, security, service integrity, or prevent fraud and abuse.
Your rights and choices
Customers, staff, and other individuals whose information is processed through a merchant's use of FortiPOS should contact the merchant directly for privacy requests related to that merchant's use of FortiPOS.
Where Clover is responsible for responding to a request under applicable law, individuals may contact Clover as explained in Clover privacy notices. Fortitag will reasonably assist merchants or Clover with requests where required by applicable law and contract.
Merchants may contact Fortitag about privacy questions, complaints, access requests, correction requests, deletion requests, or similar privacy-law requests using the contact information below.
Updates
Fortitag may update this Privacy Policy from time to time. Updates will be posted by changing the effective date on this page or by another reasonable notice method.
Contact us
Contact Fortitag about this Privacy Policy or FortiPOS privacy practices: Fortitag IT Service LTD., 4663 11th Ave West, Vancouver, BC V6R 2M6, Canada; telephone 604-345-2715; email info@fortitag.com.
Additional information for merchants located in Europe
For merchants located in Europe or the United Kingdom, Fortitag generally acts as a processor for personal data processed through FortiPOS on behalf of the merchant. The merchant is generally the controller for data it decides to collect and use through FortiPOS, and Clover may be a controller in some circumstances.
Fortitag processes personal data as directed or permitted by the merchant and as needed to provide FortiPOS. The merchant is responsible for establishing the legal basis for processing personal data through FortiPOS where the merchant controls the processing.
Where Fortitag transfers personal data outside Europe or the United Kingdom, Fortitag will use transfer mechanisms permitted by applicable law, such as standard contractual clauses or another lawful basis where required.
Subject to Fortitag's agreement with the merchant and applicable law, Fortitag retains personal data for as long as reasonably necessary to provide FortiPOS, comply with legal obligations, resolve disputes, enforce agreements, protect the service, and maintain operational records.
Your California privacy rights
California residents may have rights under the California Consumer Privacy Act and related laws, including rights to request information, access, correction, deletion, and non-discrimination. These rights are not absolute and may be subject to verification, exceptions, and the role of the merchant as the business that controls the relevant information.
Fortitag does not sell personal information as defined by the CCPA. Individuals should direct requests about information collected through a merchant's use of FortiPOS to that merchant. Merchants may contact Fortitag for reasonable assistance with requests related to FortiPOS.