In plain English: we collect the data we need to run the service, we keep it safe, we never sell it. The detail follows.
Last updated: 1 January 2026
Barlo ("we", "us", "our") provides a software-as-a-service platform for bar and hospitality inventory management at barloapp.co.uk. We are the data controller for personal data collected through our website and product.
We collect: (a) account data — name, email, venue name, role; (b) product data — stock counts, sales, supplier and order data that you input or sync from your POS; (c) technical data — IP address, browser, device, cookie identifiers, log files; (d) communications — emails, support tickets and demo requests you send us.
To provide and improve the service, process your subscription, send service notifications, respond to support requests, comply with legal obligations, and (with consent) send product updates. We do not sell your data. We do not use your operational data to train third-party AI models.
We process personal data under contract (to deliver the service you've subscribed to), legitimate interests (to secure and improve the service), legal obligation (tax, accounting) and consent (marketing emails — opt-in only).
Your data is stored on servers in the United Kingdom and European Economic Area. Backups are encrypted. Where data leaves the UK/EEA (e.g., sub-processors), we rely on Standard Contractual Clauses or adequacy decisions.
Account and operational data: for the life of your account plus 12 months after closure. Tax/accounting records: 6 years. Support emails: 3 years. You may request earlier deletion subject to legal retention rules.
You have the right to access, rectify, erase, restrict, port and object to processing of your personal data, and to withdraw consent for marketing at any time. To exercise these rights, email us at support@barloapp.co.uk. We respond within one calendar month.
We use strictly necessary cookies to keep you signed in and analytics cookies (with consent) to understand product usage. You can manage cookie preferences in your browser at any time.
We use a small number of trusted sub-processors for hosting, email delivery, payments and analytics. A current list is available on request from hello@barloapp.co.uk.
Data is encrypted in transit (TLS 1.2+) and at rest. Access is role-based and logged. We carry out regular security reviews and notify affected customers and the ICO within 72 hours of a qualifying breach.
If you're not happy with how we handle your data, please tell us first at support@barloapp.co.uk. You also have the right to complain to the Information Commissioner's Office (ico.org.uk).
Service emails (trial reminders, invoices, security alerts) are sent from noreply@barloapp.co.uk. Replies to that address aren't monitored — please use support@barloapp.co.uk for support or hello@barloapp.co.uk for everything else.
We'll update this policy when we change how we handle data. The "Last updated" date below tells you when. Material changes are notified in-app or by email.