Written to be read. If any part of this is unclear, that is our failing rather than yours — write to us and we will explain it, and probably rewrite it.
Version 1.0 · Effective 1 September 2026 · Kardo Ltd, England & Wales
Kardo Ltd, a company incorporated in England & Wales, trading since 2021, with its registered office at 2nd Floor College House, 17 King Edwards Road, Ruislip, London HA4 7AE, United Kingdom. Kardopal is our product; Kardo Ltd is the company behind it. In these terms “we” and “us” mean Kardo Ltd, and “you” means the person or business using Kardopal.
You accept these terms when you create an account, and again each time you sign in. If you are accepting on behalf of a business, you confirm you are authorised to bind that business.
If you do not agree with something here, do not create an account — and if you have one already, you can close it at any time and take your data with you (see Your data).
Kardopal is business management software: sales, stock, the till, purchasing, the books, people, service, commerce and the screens on your premises, on one account. It is provided as a subscription service over the internet, and on hardware where you choose to run it.
We add and change features. We will not remove something you depend on without telling you first, and we will not take the platform down to deploy — releases roll out gradually.
You are responsible for who you invite, what permissions you grant them, and what they do with the access you give. Roles and permissions are yours to set; we do not set them for you.
Keep your credentials to yourself. Tell us promptly if you think an account has been compromised.
One account can run more than one kind of business — a retail floor and a restaurant, for example — as separate locations under the same login. You do not need to buy a second account to do that.
Your business data is yours. Entering it into Kardopal does not give us ownership of it. We hold it so we can provide the service to you, and for no other purpose.
We do not sell your data. We do not share it with other customers. We do not use the contents of your records to advertise to you or to anyone else.
Each business is a separate tenant. Every record carries its owner and every query is filtered by that owner before it reaches storage, so one customer’s data is not one mistaken parameter away from another’s.
You can export your data while your account is active. If you close your account, you can take it with you first; after closure we delete it on the schedule in Keeping and deleting data.
We think you should know how your data is handled without us publishing a map of our systems for anyone who wants to attack them. So this section describes what kinds of technology we use and what they do, rather than naming specific products and versions.
Where we rely on third parties, we tell you the category of service and what it touches. The current named list of sub-processors is available to customers on request — write to support@kardopal.com and we will send it, along with notice of changes to it.
Traffic between your devices and the service is encrypted in transit. Data is encrypted at rest. Credentials are stored hashed, never in a form we could read back.
Access to production systems is limited to the people who need it to run the service, and that access is logged. Inside your own account, actions are attributed to the person who took them and recorded in an audit trail you can read.
No system is perfect. If a breach affects your data we will tell you without undue delay, tell you what we know, and tell you what we are doing about it — we would rather give you an incomplete answer quickly than a tidy one late.
We aim to keep the service running continuously and publish live status at kardopal.com/status, measured from your own connection rather than from a dashboard we control.
Some things keep working when the connection does not: the till, the kitchen screen and the queue display continue serving and reconcile when the link returns. A brief outage should cost you a sync, not a shift.
Enterprise plans may carry a specific uptime commitment; where they do, that written commitment takes precedence over this section.
Use Kardopal to break the law, to store or distribute content you have no right to, or to harm other people.
Attempt to access another customer’s data, probe or attack the service, or circumvent limits and permissions. If you are a security researcher and you find something, tell us — we would rather hear from you than from an attacker.
Resell or white-label the service except under a partner agreement with us.
Paid plans are billed in advance for the period you choose. Prices are shown before you buy and we will tell you before a price change affects you.
Free plans are genuinely free and stay free; they carry limits, and we will tell you when you reach one rather than quietly cutting you off.
You can cancel at any time. Cancelling stops the next renewal; it does not retroactively refund the period you have already used, unless the law where you are says otherwise.
While your account is active we keep your data so the service works. When you close your account we delete your business data within 30 days, except where we must keep something longer to meet a legal obligation — billing records, for example.
Backups roll off on their own schedule and are deleted within 90 days of account closure.
You can ask us for a copy of your data, or ask us to correct or delete it, at any time.
The software, its design and the Kardopal name belong to us. Your data, your catalogue, your customers and anything you create in the product belong to you.
If you send us feedback or a feature request, we may act on it without owing you anything for it. That is not us claiming your data — it is us being able to fix a bug you reported without a licence negotiation.
We provide the service with reasonable skill and care. We do not promise it will be uninterrupted or error-free, and you should keep your own copies of anything you cannot afford to lose.
Nothing here limits liability for death or personal injury caused by negligence, for fraud, or for anything else that cannot be limited under the law that applies to you. Subject to that, our total liability in any twelve-month period is limited to what you paid us in that period.
We are not liable for indirect or consequential loss — lost profits or lost business — arising from your use of the service.
We may update these terms. If a change materially affects your rights we will give you reasonable notice before it takes effect, in the app and by email to account owners.
Continuing to use Kardopal after a change takes effect means you accept the updated terms. If you do not, you may close your account and export your data.
These terms are governed by the law of England and Wales, and the courts of England and Wales have jurisdiction. If you are a consumer, this does not deprive you of the protection of the mandatory law of the country you live in.
Before going to court, please write to us. Most things are a misunderstanding that one email fixes.
Questions about these terms, your data, or anything else: support@kardopal.com. Sales: sales@kardopal.com. Post: Kardo Ltd, 2nd Floor College House, 17 King Edwards Road, Ruislip, London HA4 7AE, United Kingdom.