Acceptable Use Policy

1. Prohibited Activities — All Services

You must not use any YEW Technologies product or service to:

• Violate any applicable local, national, or international law or regulation.
• Process, store, or transmit data in a way that infringes any person’s intellectual property rights, privacy rights, or other legal rights.
• Conduct fraudulent activity, including processing fraudulent transactions, issuing fraudulent receipts, or misrepresenting business data.
• Introduce or transmit malware, viruses, ransomware, spyware, or any other malicious code.
• Attempt to gain unauthorised access to any YEW Technologies system, database, or infrastructure, or the systems of any other client.
• Use automated tools to scrape, crawl, extract, or overload our systems without prior written authorisation.
• Reverse engineer, decompile, or disassemble any software component of the Services.
• Attempt to circumvent any security controls, authentication mechanisms, or data access restrictions.
• Resell, sublicense, or otherwise make the Services available to third parties without our express written consent. For the avoidance of doubt, this prohibition does not apply to multi-site or franchise operators using the Services across their own branches or locations under a single client account — provided all such use remains within the same legal entity or franchise group and is not made available to unaffiliated third parties. Operators running multiple sites should contact us to ensure their account is configured appropriately.
• Share account credentials with individuals outside your organisation. Each named user account is for the exclusive use of the individual to whom it is assigned. You must not share login credentials, access tokens, or session details with any other person. If multiple users within your organisation require access, separate user accounts must be provisioned. YEW Technologies reserves the right to suspend accounts where concurrent or suspicious multi-location logins indicate unauthorised sharing.

2. YEW EPOS & Online Ordering Portal

In addition to the general prohibitions above, clients using the YEW EPOS system or online ordering portal must not:

• Process payments for goods or services that are illegal in the United Kingdom.
• Use the system to collect payment for goods or services that are not genuinely offered or cannot be fulfilled.
• Enter false, misleading, or fabricated transaction records.
• Store payment card data (PAN, CVV, expiry) within the system in contravention of PCI DSS requirements.
• Use the online ordering portal to list items that are prohibited by law (e.g., age-restricted goods without appropriate age verification controls in place).

3. DCReceipt — Document Management

Clients using DCReceipt must not upload, store, or process:

• Documents containing malware or embedded malicious code.
• Personal data relating to third parties where the client does not have a lawful basis to process that data under UK GDPR.
• Documents subject to legal privilege or professional duty of confidentiality that are disclosed without proper authorisation.
• Content that is illegal, defamatory, obscene, or that infringes copyright or other intellectual property rights.

4. Hosted Websites

Clients for whom YEW Technologies hosts a website must not publish or cause to be published:

• Content that is unlawful, defamatory, or fraudulent.
• Content that infringes the intellectual property rights of any third party.
• Content that violates any applicable advertising standards or consumer protection regulations.
• Spam, phishing content, or pages designed to harvest personal data without consent.

5. Data & Security

You are responsible for maintaining the security of any login credentials or API keys issued in connection with the Services. You must:

• Keep login credentials confidential and not share them with unauthorised individuals.
• Notify YEW Technologies immediately if you suspect that credentials have been compromised.
• Ensure that staff and users accessing the Services on your behalf are aware of and comply with this AUP.

6. Consequences of Violation

A violation of this AUP may, at YEW Technologies’ sole discretion, result in one or more of the following actions:

• A formal written warning.
• Temporary suspension of access to the affected Service(s).
• Permanent termination of the service agreement in accordance with the Terms & Conditions.
• Referral to law enforcement authorities where the violation constitutes a criminal offence.
• Legal action to recover damages arising from the violation.

YEW Technologies will act reasonably and proportionately in responding to AUP violations, and will generally give notice before suspending or terminating services unless the violation is serious or ongoing.

7. Reporting a Violation

If you become aware of a violation of this AUP, please contact us immediately with details of the suspected violation.

8. Changes

We may update this AUP from time to time. Continued use of the Services after an update constitutes acceptance of the revised policy.