FastOrder Clover Integration Privacy Policy

Effective date: October 8, 2026 · Document version: 0.0.1

Quantek inc (“Quantek,” “we,” or “us”) provides the FastOrder Clover integration. This policy explains how we collect, use, disclose, retain, and protect personal information in connection with Clover merchant onboarding, terminal assignment, attended payments, receipts, refunds, voids, recovery, reporting, and support.

This integration-specific policy does not replace a Merchant’s customer or employee privacy notice. The Merchant determines why its business collects customer and personnel information and is generally the organization responsible for those records. Quantek processes that information for the Merchant to provide the integration, while remaining independently responsible for security, legal compliance, and its own account and support records.

1. Information we collect

Merchant and account information. Merchant identifiers, legal or trading name, business and branch details, authenticated user and staff identifiers, role and permission information, contact details, account connection status, OAuth authorization and expiry details, and records of legal acceptance.

Register and terminal information. Branch and register identifiers, Clover device identifiers, serial number, model, assignment, connectivity, health, lease, and diagnostic information.

Transaction and payment information. Order and operation references, external payment and reversal identifiers, idempotency references, currency, base amount, tip, captured and reversed amounts, timestamps, transaction state, tender type, receipt status, and limited provider response evidence needed to verify and reconcile an outcome. Card entry occurs on Clover equipment. FastOrder does not require customers to provide a full card number or card security code to Quantek through this integration.

Receipt and support information. A customer email address or phone number when a receipt is requested, plus names, contact details, transaction references, messages, and troubleshooting information supplied in a support request.

Technical and security information. IP address, browser and session information for website onboarding, request and audit metadata, timestamps, error classifications, security events, and single-use OAuth state and continuation records. We do not place Clover payment records into cross-site advertising profiles.

2. Sources of information

We receive information from the Merchant and its authorized users, the FastOrder POS and management website, Clover and its processing services, assigned Clover devices, customer receipt choices, and communications with Quantek support. The exact information varies according to the capabilities used by each Merchant.

3. How we use information

We use information to authenticate authorized users; connect and verify the correct Clover Merchant; discover and assign terminals; submit authorized payment, cancellation, refund, void, and receipt requests; recover uncertain outcomes; prevent duplicate collection; maintain terminal occupancy; reconcile captured funds, tips, and reversals; provide reports and support; investigate security or service problems; and maintain required legal and audit records.

We may also process information to comply with lawful requests, enforce agreements, detect or prevent fraud and misuse, protect Merchants, customers, Clover, and Quantek, resolve disputes, and improve the security and reliability of the integration. We do not sell personal information and do not use Clover Merchant or customer data for unrelated advertising.

4. How we disclose information

We disclose information only as needed to:

• the Merchant and its authorized FastOrder users;
• Clover, Fiserv, and the Merchant’s approved payment-processing services;
• hosting, database, communications, monitoring, and technical-support providers that assist us under appropriate contractual and security obligations;
• professional advisers, auditors, insurers, regulators, courts, law enforcement, or other parties when authorized or legally required; and
• a successor in a proposed or completed merger, financing, restructuring, or sale, subject to applicable law and continuing protection.

Clover’s own collection and use are described in the Clover Privacy Notice. Selecting Clover for a FastOrder tenant does not authorize sending that tenant’s Clover payment instructions to Paymentree.

5. Retention

We retain personal information only for as long as reasonably necessary to provide the integration, reconcile financial activity, service refunds and receipts, maintain accounting and audit history, meet legal obligations, resolve disputes, enforce agreements, and protect against fraud. Retention varies by record type and applicable Merchant requirements.

Disconnecting a terminal or stopping new payments does not automatically erase completed transaction history or unresolved operations. OAuth credentials are retained only while needed for an authorized connection or outstanding servicing obligations and are removed or rendered unusable when deletion is permitted and appropriate. A Merchant may contact us for information about retention applicable to its records.

6. Security

We use administrative, technical, and organizational safeguards appropriate to the sensitivity of the information. These include encrypted storage of Clover OAuth credentials, authenticated access, tenant and branch isolation, scoped permissions, controlled terminal assignments, audit records, and restricted logging of provider evidence. Tokens are not sent to Flutter clients or placed in URLs, queued payloads, or ordinary logs.

No method of storage or transmission is completely secure. Merchants must protect their accounts and devices, grant staff only appropriate access, and promptly report suspected unauthorized access. Do not send full card details, passwords, private keys, or access tokens in support communications.

7. Individual rights and choices

Depending on applicable law, individuals may have rights to request access to, correction of, or deletion of personal information; withdraw consent where processing relies on consent; object to or restrict certain processing; request portability; and complain to a privacy regulator. These rights may be limited by lawful financial, fraud-prevention, security, or recordkeeping requirements.

Customers and workers should normally direct requests concerning a Merchant’s records to that Merchant. Quantek will reasonably assist the Merchant and Clover with verified requests applicable to information processed through the integration. We may verify identity and authority before acting. Privacy requests and complaints may be sent to [email protected].

8. Cookies, sessions, and browser signals

The onboarding website uses essential cookies and session information to authenticate users, preserve branch context, protect OAuth setup, and prevent replay. Single-use OAuth state and continuation references support secure return to the correct branch. The integration does not use payment records for cross-site behavioral advertising. Browser “Do Not Track” signals do not disable cookies or processing required for authentication, security, and payment functionality.

9. International and interprovincial processing

The production integration is intended for Canadian Merchants. Clover and service providers may process information outside the Merchant’s province or outside Canada. Information processed in another jurisdiction may be subject to that jurisdiction’s laws and lawful access requirements. We use contractual, organizational, and technical measures appropriate to the transfer and the information involved. Contact us for information about processing arrangements relevant to a Merchant account.

10. Children

The integration is a business service intended for authorized Merchant personnel and is not directed to children. We do not knowingly invite children to create integration accounts. Information contained in Merchant transactions remains subject to the Merchant’s instructions and applicable privacy obligations.

11. Changes to this policy

We may update this policy to reflect changes to the App, our practices, or legal requirements. We will identify changes through the effective date and document version and provide notice of material changes as required. Where Clover approval is required, updated App policies will be submitted before publication through the Clover App Market.

12. Contact us

If a privacy concern is not resolved, an individual may contact the Office of the Privacy Commissioner of Canada or another regulator with jurisdiction.