Privacy Policy

1.1 Run It is a digital due diligence record-keeping application for licensed premises. It is operated by Avela Tech Ltd ("we", "us", "our").

1.2 This policy explains what we do with personal data for which we are the data controller. It applies to our website, to the Run It application, and to our dealings with customers, prospective customers and enquirers.

1.3 Our details are:

1.4 We have not appointed a Data Protection Officer, and are not required to do so. Privacy queries should be sent to the address above.

1.5 This policy was last updated on 7 September 2026.

2.1 Run It handles two different kinds of personal data, and our legal role differs between them.

2.2 Data we control. When you create an account, pay for a subscription, contact our support team or receive our emails, we decide how and why that data is used. We are the data controller for it, and this policy explains what we do with it.

2.3 Data our customers control. The records our customers create inside Run It — temperature logs, refusal logs, and the staff accounts used to complete them — belong to the venue. The venue decides what is recorded and why, in order to meet its own food safety and licensing obligations. For that data we act only as a data processor on the venue's instructions, and this policy does not govern it.

2.4 If you are a member of staff at a venue that uses Run It, or a member of the public who has been refused service and recorded in a venue's refusal log, the venue is responsible for that data, not us. You should contact the venue directly. Where we receive a request that relates to a venue's records, we will pass it to that venue and tell you that we have done so.

2.5 Our handling of customer-controlled data is governed by the Data Processing Agreement we enter into with each venue, not by this policy.

3.1 Account data. The name of the venue, the name of the person who sets up the account, and an email address for each user login.

3.2 Billing data. Billing name, billing address, subscription plan, transaction history, and the last four digits and card type of the payment method. We do not receive or store full card numbers. Payment card details are collected directly by Stripe.

3.3 Support data. Any correspondence you send us, including emails to admin@therunitapp.co.uk.

3.4 Technical data. IP address, browser and device type, log records of when accounts sign in, and usage information (pages viewed and when). This is generated automatically when the application is used.

3.5 Marketing data. Your email address and your marketing preferences, where you have opted in.

3.6 Cancellation data. If you cancel your subscription, we retain your email address so that we can ask you why. You can decline to answer and ask us to delete it at any time.

3.7 Enquiry and demo request data. Your name, email address, phone number (where you provide it) and venue or company name, when you contact us or ask for a demo through the forms on our website.

3.8 We do not sell personal data, and we do not share it with third parties for their own marketing purposes.

4.1 We process the personal data described in clause 3 for the following purposes and on the following legal bases:

4.2 Where we rely on legitimate interests, we have considered whether our interest is overridden by your rights and freedoms and concluded that it is not, because the processing is limited in scope, is what a customer would reasonably expect, and can be objected to at any time. You may request a copy of our assessment.

4.3 Where we rely on consent, you may withdraw it at any time. Every marketing email contains an unsubscribe link. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.

4.4 We do not use automated decision-making or profiling that produces legal or similarly significant effects on you.

5.1 Run It uses cookies that are strictly necessary to operate the application, including keeping you signed in, keeping your session secure, and remembering your preferences. These do not require your consent.

5.2 Our hosting provider, Base44, records basic usage information when you use Run It, such as which pages are viewed and when. We use this only to understand how the Service is used and to improve it, under our legitimate interests. We do not use advertising cookies or share this information with advertisers.

6.1 We share personal data with the following service providers, who act on our instructions:

6.2 If you choose to sign in or register using “Continue with Google”, Google acts as an independent controller of the data it processes to authenticate you, in accordance with Google's own privacy policy. We receive your name and email address from Google in order to create and manage your Run It account.

6.3 We may also disclose personal data where required to do so by law, by a court order or by a regulator, and to professional advisers such as accountants and lawyers where necessary.

6.4 If our business is sold or transferred, personal data may be transferred to the buyer, who would be required to continue to protect it in accordance with this policy.

6.5 We keep the lists in clauses 6.1 and 6.2 current. If we engage a further provider that handles personal data, we will update this policy.

7.1 Run It is hosted on the Base44 platform, whose servers are located in the United States. Stripe also processes data in the United States. If you sign in using Google, Google may also process data outside the United Kingdom. Your personal data is therefore transferred outside the United Kingdom.

7.2 The United States does not benefit from a full United Kingdom adequacy decision. We rely on the following safeguards:

1. (a) the UK International Data Transfer Agreement, or the UK Addendum to the European Commission's Standard Contractual Clauses, as incorporated into our agreements with these providers; and
2. (b) where applicable, the provider's certification under the UK Extension to the EU-US Data Privacy Framework.

7.3 A transfer risk assessment for each of these transfers is being completed and will be documented before this policy is treated as final.

7.4 You may request a copy of the safeguards we rely on by emailing admin@therunitapp.co.uk.

8.1 We retain personal data for the following periods:

8.2 Records created inside the application by our customers, including temperature logs and refusal logs, are retained according to the terms of the customer's plan and the customer's own legal obligations. Those periods are set out in the Data Processing Agreement.

9.1 We apply technical and organisational measures appropriate to the risk, including:

1. (a) encryption of data in transit using TLS, and encryption of data at rest;
2. (b) individual named user accounts, so that access and activity are attributable;
3. (c) access separation, so that each venue can access only its own records;
4. (d) restricting internal access to personal data to those who require it;
5. (e) regular automated backups; and
6. (f) assessing our providers' security arrangements before engaging them.

9.2 No system is completely secure. Where a personal data breach is likely to result in a risk to your rights and freedoms, we will report it to the Information Commissioner's Office within 72 hours of becoming aware of it, and will notify you directly where the risk to you is high.

10.1 Under United Kingdom data protection law you have the right to:

1. (a) request a copy of the personal data we hold about you;
2. (b) request correction of data that is inaccurate or incomplete;
3. (c) request erasure of your data, in certain circumstances;
4. (d) request restriction of processing, in certain circumstances;
5. (e) object to processing carried out on the basis of legitimate interests;
6. (f) receive your data in a portable format, or ask us to transmit it to another provider; and
7. (g) withdraw consent where we rely on it.

10.2 To exercise any of these rights, email admin@therunitapp.co.uk. We will respond within one month. That period may be extended by up to two further months for complex requests, and we will tell you if it is. There is no charge unless a request is manifestly unfounded or excessive.

10.3 We may ask you to confirm your identity before acting on a request.

10.4 Where your request concerns records held inside a venue's account, clause 2.4 applies and you should contact the venue.

11.1 If you are unhappy with how we have handled your personal data, please tell us first at admin@therunitapp.co.uk so that we can try to resolve it.

11.2 You also have the right to complain to the Information Commissioner's Office:

12.1 Run It is a business tool for licensed premises and is not intended for use by anyone under 18. We do not knowingly collect personal data from children through our own account registration.

13.1 We may update this policy from time to time. The date in clause 1.5 shows when it was last changed.

13.2 Where we make a significant change, we will notify account holders by email before it takes effect.

14.1 Avela Tech Ltd, 124-128 City Road, London, England, EC1V 2NX.

14.2 admin@therunitapp.co.uk