Privacy Notice

1. Scope of This Privacy Notice

This Privacy Notice describes how Front Tab, doing business as Front(“Front,” “we,” “us,” or “our”) collects, uses, discloses, stores, and otherwise processes personal information when you access or use our websites, products, services, applications, and related offerings (collectively, the “Services”).

This Notice applies when you visit fronttab.com or another Front website that links to this Notice; request information or a demonstration; create or use a Front account; interact with us as a restaurant, merchant, business owner, employee, prospective customer, partner, or other business contact; communicate with our sales, support, or marketing teams; or otherwise interact with Front where this Notice is provided.

When Front processes personal information on behalf of a restaurant, merchant, or other business customer, that business may determine the purposes and means of processing and its own privacy notice may also apply.

2. Personal Information We Collect

Information You Provide to Us

Depending on how you interact with Front, we may collect information such as your name, business or restaurant name, business address, email address, telephone number, job title or role, account and profile information, login credentials, communications and support inquiries, demo or sales request information, product and service preferences, and other information you choose to provide.

Merchant and Business Information

When you use Front on behalf of a restaurant or other business, we may collect business contact information, locations, product configurations, employee or authorized-user information, order and operational information, transaction-related information, loyalty or customer-engagement information, and other information necessary to provide and support the Services.

Information Collected Automatically

When you visit our websites or use our Services, we may automatically collect IP address, browser type, device type and operating system, device or online identifiers, pages and features viewed, referring and exit pages, dates and times of access, approximate location derived from IP address, interactions and navigation, diagnostic and performance information, and other usage data.

Information From Other Sources

We may receive information from business partners, payment and technology partners, integration providers, service providers, marketing and advertising partners, publicly available sources, and other third parties where permitted by law.

3. How We Use Personal Information

We may use personal information to provide, configure, maintain, secure, and improve the Services; create and administer accounts; authenticate users and manage permissions; facilitate orders and transactions; respond to questions and provide technical support; communicate service, account, product, and security information; understand product and website usage; develop new features; conduct analytics; measure marketing effectiveness; prevent fraud and unauthorized access; enforce agreements; and comply with legal, regulatory, tax, accounting, and other obligations.

Subject to applicable law and your choices, we may also use contact and online activity information to send or measure marketing and promotional communications about Front products, services, events, offers, or features.

4. Cookies, Analytics, and Advertising Technologies

Front uses cookies, pixels, tags, and similar technologies on our website. These technologies may include services provided by Google Analytics, Google Ads, and Meta, as well as other providers we may use from time to time.

Strictly Necessary Technologies

These support core website functionality, security, network management, form submission, and privacy preferences.

Functional Technologies

These help remember choices and provide enhanced website functionality.

Analytics and Performance Technologies

These help us understand traffic, visitor interactions, navigation, website performance, and how our Services are used. For example, we use Google Analytics for website measurement and analytics.

Advertising and Targeting Technologies

We use technologies such as Google Ads and Meta technologies to measure campaigns and, where permitted, support advertising based on interactions with our website.

These technologies may collect or receive online identifiers, device information, IP address, browsing or interaction information, and related data.

You may manage non-essential cookies through the cookie or privacy preference controls available on our website. You may also use browser controls, although blocking some technologies may affect website functionality.

5. How We Disclose Personal Information

We may disclose personal information to vendors and service providers that support hosting, cloud infrastructure, analytics, communications, email delivery, customer support, security, fraud prevention, marketing, and other operational functions.

We may also disclose information to payment, integration, hardware, software, and other technology partners when necessary to provide Services requested by a merchant.

We may disclose information at your or your business’s direction, including when integrations are enabled; when reasonably necessary to comply with law, lawful process, or government requests; to protect rights, property, safety, or security; to investigate fraud or security incidents; or in connection with a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or similar business transaction.

6. Merchant and Customer Data

Front provides technology and services to restaurants and other businesses. In providing certain Services, Front may process personal information on behalf of a restaurant, merchant, or other business customer.

Depending on the circumstances, that merchant may determine how and why certain customer or employee information is collected and used, while Front processes the information to provide the Services.

If you are a consumer or restaurant customer and your question concerns information collected directly by a restaurant or merchant using Front, you may need to contact that business regarding its privacy practices.

Front may separately process certain information for its own business purposes where permitted by applicable law and as described in this Notice.

7. Payment and Transaction Information

Front Services may enable merchants to accept and manage payments through third-party payment processors, acquiring banks, payment networks, and other payment partners, including supported processors such as Fiserv, CardConnect, and TSYS.

Depending on the services selected by a merchant, payment information may be transmitted directly to or processed by these third-party payment providers.

Those providers process information in accordance with their own privacy notices, contractual terms, security requirements, and legal obligations.

Front may receive transaction-related information needed to provide, support, secure, analyze, and improve the Services, such as transaction identifiers, transaction amounts, dates and times, payment status, merchant information, and related operational information.

Where payment card credentials are processed directly by an integrated third-party payment processor, Front does not necessarily receive or store the full payment card credentials.

8. Data Retention

We retain personal information for as long as reasonably necessary for the purposes described in this Notice, including to provide the Services, maintain appropriate business and transaction records, comply with legal, tax, accounting, and regulatory requirements, resolve disputes, enforce agreements, prevent fraud and abuse, and protect legal rights.

Retention periods vary depending on the nature of the information, why it was collected, the Services involved, our relationship with you, and applicable requirements.

When information is no longer reasonably necessary, we may delete, anonymize, deidentify, or securely dispose of it as appropriate.

9. Data Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure.

However, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.

Users are responsible for maintaining the confidentiality of their account credentials and using appropriate security measures when accessing the Services.

10. Your Privacy Rights and Choices

Depending on where you reside and applicable law, you may have rights to request access to personal information; obtain information about collection, use, or disclosure; correct inaccurate information; request deletion; obtain a portable copy of certain information; withdraw consent where applicable; object to or restrict certain processing; opt out of certain targeted advertising; opt out of certain sales or sharing of personal information; or appeal certain privacy-request decisions.

We may need to verify your identity before processing a request. Authorized agents may be required to demonstrate authority to act for you.

Rights are subject to exceptions and limitations under applicable law, and Front will not unlawfully discriminate against you for exercising applicable privacy rights.

11. U.S. State Privacy Rights

Residents of certain U.S. states may have additional rights under applicable state privacy laws.

Depending on the state and circumstances, these may include rights to access, correct, delete, or obtain a portable copy of personal information; opt out of targeted advertising or certain sales or sharing; limit certain uses of sensitive personal information where applicable; and appeal certain privacy decisions.

Where required by law, Front will provide mechanisms to exercise applicable rights. Requests may be submitted using the contact information below or applicable privacy controls made available on our website.

12. California Privacy Disclosures

For California residents, the categories of personal information Front may collect, depending on the interaction, include identifiers; customer-record information; commercial or transaction information; internet or other electronic network activity; approximate geolocation derived from IP address; professional or employment-related information; audio, electronic, or visual information where applicable; and inferences derived from other information.

We use and disclose these categories for the business and commercial purposes described in this Notice.

Subject to applicable law, California residents may have rights to know or access personal information, request correction or deletion, receive certain information about sources and disclosures, obtain a copy of certain information, opt out of certain sale or sharing, limit certain uses of sensitive personal information where applicable, and exercise rights without unlawful discrimination.

13. Targeted Advertising, Sale, and Sharing

Front does not sell personal information for money.

Some U.S. privacy laws define “sale,” “sharing,” and “targeted advertising” broadly.

As a result, the use of certain advertising technologies, including technologies associated with Google Ads or Meta, may be considered a sale, sharing, or targeted advertising under some state laws even when no money is exchanged for personal information.

Where required by applicable law, Front provides mechanisms to opt out of covered processing through the privacy or cookie preference controls available on our website and through other methods required by law.

14. Global Privacy Control and Preference Signals

Certain browsers and extensions allow users to send privacy preference signals, such as Global Privacy Control (“GPC”).

Where required by applicable law and where we can reasonably detect and process a recognized signal, Front will treat the signal as an applicable opt-out request for the browser or device sending it.

Because preference signals may be browser- or device-specific, you may need to enable them separately on each browser or device you use.

15. Children's Privacy

Our general websites and Services are not directed to children under 13, and we do not knowingly collect personal information directly from children under 13 through our general websites or Services.

If we learn that we collected personal information from a child in violation of applicable law, we will take reasonable steps to delete or otherwise address the information as required.

Restaurants or merchants using Front may interact with consumers of different ages and may have separate responsibilities regarding information they collect through their businesses.

16. Third-Party Services and Integrations

Our Services may contain links to or integrations with third-party websites, applications, delivery platforms, payment providers, technology providers, or other services.

Front does not control the independent privacy practices of those third parties. When you interact directly with a third-party service, that provider's privacy notice and terms may apply.

17. International Data Transfers

Front and our service providers may process or store information in the United States and other locations where we or our service providers operate.

Where personal information is transferred across national borders, we will take steps required by applicable law to provide appropriate protections.

18. Deidentified and Aggregated Information

Where permitted by law, we may create aggregated, anonymized, or deidentified information from personal information and use it for analytics, research, product development, business planning, security, and improvement of the Services.

Where required by law, we will maintain deidentified information in deidentified form and will not attempt to reidentify it except as permitted by law.

19. Marketing Communications

You may opt out of promotional email communications from Front at any time by using the unsubscribe mechanism included in those communications or by contacting us.

Even if you opt out of marketing, we may continue to send non-promotional communications such as account notices, transactional messages, security alerts, product or service notices, and responses to support requests.

20. Changes to This Privacy Notice

We may update this Privacy Notice from time to time to reflect changes in our Services, technologies, business practices, or legal requirements.

When we update it, we will revise the “Last Updated” date at the top of this page. Where required by applicable law, we may provide additional notice of material changes.

21. Contact Us

If you have questions about this Privacy Notice, our privacy practices, or would like to exercise an applicable privacy right, contact us at: