Privacy Policy

1. Who we are

That Card Machine Guy provides card payment advice, card machines and merchant services support to businesses in Ely, Cambridgeshire, East Anglia and across the UK.

This Privacy Policy explains how personal information is handled when you visit this website or contact That Card Machine Guy.

The website is operated by Ben Buey trading as That Card Machine Guy.

• Legal entity: Ben Buey trading as That Card Machine Guy
• Business address (for correspondence and service of documents): Suite 802, 80A Ruskin Ave, Welling DA16 3QQ, United Kingdom
• Privacy contact email: thatcardmachineguy@gmail.com
• Telephone: 01223 230365

For UK data protection purposes, Ben Buey trading as That Card Machine Guy is the data controller for personal information processed in connection with this website and its contact enquiries.

2. Information we collect

The data controller is Ben Buey trading as That Card Machine Guy, Suite 802, 80A Ruskin Ave, Welling DA16 3QQ, United Kingdom. You can contact the controller at thatcardmachineguy@gmail.com or on 01223 230365.

We may receive information that you choose to provide when you use the contact form, request a review or contact us by email or telephone. This may include:

• your name;
• your email address;
• your telephone number;
• your business name and business details;
• information about your card machine, merchant account or processing charges;
• the contents of your message; and
• any statement or other document that you choose to upload.

We do not ask for payment card numbers, passwords or other sensitive authentication information through the contact form. Please do not include information that is not needed to deal with your enquiry.

3. Contact forms and verification

We use information submitted through a contact form to respond to your enquiry, arrange a review, provide requested information and communicate about card payment services where this is relevant to your request.

The contact form is not protected by a third-party CAPTCHA or verification widget. No third-party CAPTCHA or verification service is currently in use.

If a verification measure is introduced in future, it will be disclosed before it is used and this Privacy Policy and the Cookie Policy will be updated first.

4. Technical information processed when you visit

Technical information may be processed as part of delivering, securing and maintaining the website. This may include:

• your IP address;
• the date and time of a request;
• the requested page or asset;
• browser and device information;
• request headers, such as user-agent and referrer information;
• status and performance information; and
• security and error logs.

Astro and Vercel hosting

The website is built with Astro and hosted on Vercel. Vercel processes incoming requests as part of providing hosting, delivery, security and infrastructure services. This can include IP addresses, request information and server or access logs.

Images and other website assets are served from the website itself. The website does not use a separate image-hosting service for those assets.

Vercel may also process certain information under its own privacy terms and responsibilities. Further information is available in Vercel’s Privacy Notice and Data Processing Addendum.

5. How we use information and our lawful bases

We use or arrange for personal and technical information to be processed for the following purposes:

Our legitimate interests are to provide a functioning website, respond to genuine enquiries, protect the website and keep it secure. We consider these interests to be proportionate because processing is limited to what is reasonably necessary for those purposes.

6. Analytics

A PostHog analytics script is present in the website code. However, the configuration needed to activate it is not currently in place. As a result:

• PostHog analytics is not currently active;
• no PostHog requests are currently made;
• no PostHog analytics data is currently collected; and
• no PostHog cookies or browser storage are currently used by the website.

If analytics is enabled in future, we will review the configuration and update this Privacy Policy and our separate Cookie Policy. Where required, we will obtain consent before enabling analytics. Analytics will be non-essential and consent-gated if it is ever enabled.

7. Cookies and similar technologies

This website currently sets no cookies.

The website does not use document.cookie, local storage, session storage or tracking pixels. Please see our separate Cookie Policy for further information.

Uploaded merchant statements are received through the website's contact form, forwarded by email, and kept for up to 12 months after the review, quote or advice has been completed, then deleted.

8. Sharing and service providers

We may make personal and technical information available to the following providers where necessary to operate the website or respond to your enquiry:

Vercel

Vercel provides hosting and website infrastructure services. It may process IP addresses, request headers and server or access log information as part of providing those services.

Email and contact-form delivery

Information submitted through the contact form is sent to the business so that the enquiry can be handled. We may use service providers needed to transmit and deliver that message.

8.3 Dojo

Dojo is a trading name of Paymentsense Limited, a company registered in England and Wales under company registration No. 06730690. Copyright ©2026 Paymentsense Limited.

Paymentsense Limited receives the shared enquiry information and uploaded merchant statements as an independent data controller. This means it decides its own purposes and means of processing that information, is responsible for its own compliance with data protection law, and provides its own privacy notice to individuals.

9. International transfers

Our website, email and infrastructure providers may process information outside the United Kingdom. Where personal information is transferred outside the UK, we will use a lawful transfer mechanism and appropriate safeguards required by UK data protection law, such as a UK adequacy decision, the UK International Data Transfer Agreement, or approved contractual safeguards.

10. How long information is kept

We keep contact enquiries, correspondence and documents only for as long as reasonably necessary to respond to you, provide the requested service, maintain appropriate business records, resolve disputes and comply with legal obligations.

Technical information and logs may be retained by Vercel for the period needed to provide its services, maintain security, investigate misuse, comply with legal obligations and resolve disputes.

11. Data minimisation

We aim to collect and use only the personal information that is reasonably necessary for the purposes described in this Privacy Policy.

12. Your data protection rights

Subject to applicable legal conditions and exceptions, you may have the right to:

• access your personal information and receive a copy of it;
• rectify inaccurate or incomplete personal information;
• erase your personal information;
• restrict how your personal information is processed;
• object to processing based on legitimate interests;
• receive or request transfer of certain personal information in a structured, commonly used and machine-readable format;
• withdraw consent where processing is based on consent; and
• complain to the Information Commissioner’s Office.

To exercise a right, contact us using thatcardmachineguy@gmail.com, or write to Ben Buey trading as That Card Machine Guy, Suite 802, 80A Ruskin Ave, Welling DA16 3QQ, United Kingdom, or telephone 01223 230365. We may need to verify your identity before responding. We normally respond to a valid request within one month, although this period may be extended where permitted by law if a request is complex or numerous.

13. Complaints

You have the right to complain to the Information Commissioner’s Office if you believe your personal information has been handled unlawfully or that your data protection rights have not been respected.

The ICO’s website is https://ico.org.uk/make-a-complaint/.

You can contact the Information Commissioner’s Office by telephone on 0303 123 1113 or by post at:

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

We would appreciate the opportunity to address your concerns first, but you are entitled to contact the ICO directly.

14. Security

We take reasonable technical and organisational measures to protect information processed through the website. These measures include using HTTPS, restricting access where appropriate and relying on established infrastructure providers.

No website or internet transmission can be guaranteed to be completely secure. You should use an up-to-date browser and take reasonable steps to protect your own device and connection.

The specific security controls used by the business and its service providers should be reviewed before publication:

Please do not send passwords or full card details by email or through the contact form.

15. Children’s privacy

This website is designed for businesses and is not directed at children. We do not knowingly collect personal information from children. If you believe that a child has provided personal information to us, please contact thatcardmachineguy@gmail.com.

16. Changes to this Privacy Policy

We may update this Privacy Policy when the website, the information we process, our service providers or applicable legal requirements change.

The latest version will be published on this page. The “Last updated” date at the top of the policy shows when it was most recently revised.

17. Contact

For privacy questions or requests, contact:

Ben Buey trading as That Card Machine Guy
Business address (for correspondence and service of documents): Suite 802, 80A Ruskin Ave, Welling DA16 3QQ, United Kingdom
Telephone: 01223 230365
Email: thatcardmachineguy@gmail.com

18. Data controller

That Card Machine Guy is responsible for the personal information processed in connection with this website and the enquiries made through it.

19. Automated decision-making

We do not use personal information collected through this website for automated decision-making or profiling that produces legal or similarly significant effects.

20. Third-party websites

This website may contain links to third-party websites. Those websites operate under their own privacy notices, and we are not responsible for their content or privacy practices.

21. Further information

If you need further information about this Privacy Policy, please contact us using the details in section 17.

• whether the retention periods set out in section 10 remain accurate and are being followed in practice;
• whether the service providers and data protection roles described in this policy remain accurate;
• whether the website’s technical configuration continues to match the descriptions in this policy; and
• whether this policy continues to reflect the information processed and the applicable legal requirements.