Terms of Service for Businesses

Version 2026-09-23. Effective 2026-09-23.

These terms are between your business ("you") and Stampomat, operated by Daniel Ilievski, Ljubljana, Slovenia, SI ("Stampomat", "we"). Company registration: pending. Contact: hello@stampomat.com.

They govern every product you use from us: the Stampomat loyalty platform (Annex A), a Stampomat website with or without pickup ordering (Annex B), and the fees for both (Annex C). The Data Processing and Joint Controller Terms, version 2026-09-15 (the "DPA"), are part of this agreement (section 8).

Your customers and members are not bound by these terms. Their relationship with us is governed by the Terms of Service for Customers and the Privacy Policy.

1. Who these terms are for

Shops. A business that runs a stamp card or a points programme with us.
Organisations. A club, school, association or other body that runs membership cards, events and partner benefits with us. We call a shop or an organisation a "business" or "you".
Site owners. A business for which we build and host a website, with or without pickup ordering.
Team members. The people you let use your account. They act for you. You are responsible for what they do.
Benefit partners. A business that an organisation names as a provider of a member benefit. A partner accepts the separate Partner Terms for Benefit Providers, version 2026-09-23, by pressing Accept on the page its invitation letter opens. These terms apply to a partner only if it also holds its own business account.

You confirm that you use our products for your trade, business or profession and not as a consumer. A sole trader is a business under these terms.

2. How this agreement is formed

Acceptance. You accept these terms and the DPA by clicking the acceptance button that the dashboard shows you after you open the full text. We record what you accepted: the document, its version and language, a hash of the exact text, the surface, the time, your business and the signed-in person who clicked. We keep that record for as long as either of us could bring a claim under this agreement. Footer links and use of the platform are not acceptance.
First sign-in. Whether we set you up in person, through an invite link or through a written offer, you see this gate the first time you or a team member signs in, and you cannot use the dashboard before accepting.
Authority. The person who accepts confirms that they are entitled to bind your business. If a team member accepts, they accept for you.
Written offer. A written offer is a proposal we send you (email counts) that you accept in writing. It sets your fees and any special conditions. Signing or accepting a written offer that refers to these terms is also acceptance of these terms.
Order of precedence. If documents conflict, this order applies: (a) a written offer accepted by both of us, (b) the DPA for anything about personal data, (c) the Annexes, (d) sections 1 to 18. A written offer can never lower the protection the DPA gives to the people whose data we process.
Copies. You can open, save and print every version of these terms from the changelog page on our website. On request we send a countersignable PDF of the current version.
Later versions. The gate appears only to an account that has never accepted: on the dashboard once for your business, in the merchant portal once for each person who signs in. A later version of these terms or the DPA does not bring it back and does not ask you to accept again; it reaches you by the notice in section 14 and applies as that section describes.

3. Words we use

Platform: the software, websites, apps, APIs, dashboards, cashier screens and documentation we provide.
Customer: a person with a Stampomat wallet who collects stamps or points with you or holds a membership with you. "Member" means a customer of an organisation.
Order customer: a person who places a pickup order on your site.
Your data: everything you enter, upload or generate on the platform: your business details, card and menu settings, content, photos, notes, broadcasts and the records of your programme.
Customer data: personal data of customers, members and order customers that the platform holds because of your programme or your site.
Content: text, images, menus, prices, testimonials, branding and other material shown on your card, your passes, your cashier screens, your emails or your site.
Written: in text form, including email to the addresses in section 15.

4. What we provide

Loyalty. A digital loyalty programme in one of three modes that we assign with you at setup: stamps, points or membership. Annex A describes what each mode includes.
Websites and ordering. A website we build from your material on one of our templates, hosted at a Stampomat subdomain or at your own domain, with pickup ordering when your written offer includes it. Annex B describes it.
Onboarding. We set you up with you, in person or remotely, in about thirty minutes for a loyalty programme. Websites are built from the material you give us and go live after your approval.
Support. Write to hello@stampomat.com. We answer by email, usually within one working day. We do not promise a response time.
Languages. The platform, these terms and the customer-facing documents exist in English, Macedonian, Slovenian and German. For businesses, the English version of these terms prevails over a translation if they differ.
Our own operations. Our staff, and an AI assistant that acts under our instructions, can see and change data across the platform to onboard you, support you, keep the platform secure and run the service. Every action our assistant takes on your account is logged with its own actor name. The Privacy Policy describes this in detail.

5. Your account, your team and security

Sign-in. You and your team members sign in with a Google account. We store the name, email address and Google identifier of each person who signs in. We do not see your Google password.
Team members. You add a team member by email and choose a role. A team member is a natural person, at least 16 years old, whom you have authorised. We send the person a short notice that they were added, who added them and what we hold about them.
Roles. Loyalty accounts have three roles you can assign: admin (everything in your programme) and, at a membership organisation, management (everything the account owner can do except rename or act on the account owner) and operator (event and attendance work, no settings). A retired read-only role is no longer offered; an account that still carries it can look but not change anything, and cannot export. Site accounts have one role today: owner of the site in the merchant portal. Give each person the smallest role that does the job.
Leavers. Remove a team member the day they leave. Removal takes effect on their next request. On a site account, use "Sign out all devices" after removing someone who used a shared device.
Credentials are yours to protect. The cashier password, trusted cashier devices, integration tokens and API tokens let anyone who holds them act in your name. Keep them inside your business. Tell us at once if one leaks; we revoke it. We show a new token in full only once.
Shared devices. A cashier tablet stays trusted for up to 365 days after you enter the cashier password on it, until you change the password or revoke the device in the dashboard. Staff screens show the names of today's visitors and, only if you switch it on, their email addresses. Point these screens away from the public.
Accuracy. Keep your business details, contact address and the identity data on your site current. We rely on the email address on your account for every notice under this agreement.

6. Acceptable use and content rules

This section describes the restrictions we apply to what you publish and do through the platform, how we enforce them, and how you can contest a decision.

6.1 What you must not do

Issue stamps, points, rewards, attendance or memberships that were not earned, or manipulate the programme to deceive customers, partners or us.
Publish content that is illegal, infringes someone's rights, is misleading about your goods, prices or identity, or is defamatory, hateful or pornographic.
Use broadcasts, newsletters or any other channel we provide to send unsolicited messages, messages about a business other than the one named as sender, or messages without a working way to stop them.
Run a prize game, lottery, raffle, "like and tag to win", random reward or any promotion whose outcome depends on chance through the platform. The platform does not support chance-based promotions. In North Macedonia they need a permit from the Ministry of Finance and published rules; elsewhere they are regulated too. Deterministic rewards (every stamp earns a stamp, every purchase earns points) are fine.
Record health, religion, ethnicity, political views, sexual orientation, criminal matters or other sensitive details about a person in customer notes, order notes, membership records or anywhere else on the platform.
Copy, scrape, reverse engineer, resell or rent the platform, probe its security, interfere with other businesses' programmes or sites, or load it with traffic it was not built for.
Use the platform to sell alcohol, tobacco, medicines or age-restricted goods online, or to sell anything that needs a licence you do not hold. Pickup ordering does not support age checks.
Publish testimonials, reviews or ratings that are not genuine, or use a person's name, quote or photo without their consent.
Use a third party's brand, logo or badge (a delivery service, a card scheme, a marketplace) on your site unless you are an active, confirmed partner of that service and the badge is the official one, used unmodified.

6.2 How we moderate

We do not review your content before it goes live, except site pages we build ourselves (Annex B).
We do not use automated content moderation or algorithmic decisions about your content. The only automated measures on the platform are security and anti-fraud controls (rate limits, stamp cooldowns and manual-code locks) that the Privacy Policy describes.
A person reviews every report we receive (section 18) and every suspected breach we notice ourselves.
Depending on the seriousness we may: ask you to fix the content, remove or hide the content, pause a feature (for example broadcasts or ordering), suspend the account (section 13), or end the agreement.

6.3 Statement of reasons and how to contest

When we remove or restrict content, pause a feature or suspend your account, we tell you by email what we did, which rule or law it concerns, the facts we relied on, whether a report from someone else triggered it, and how to contest. You can contest by replying within 15 days. We review your reply afresh and answer within 15 days. If you disagree with the outcome you keep your right to go to court (section 16).

6.4 Correcting records

We may correct stamp, point, reward, attendance and redemption records to fix technical errors or fraud, at your request or on our own initiative. We keep an audit trail of every correction. Where a correction affects a customer, the customer terms give that customer a human review path.

7. Intellectual property and licences

Ours stays ours. The platform, its code, design, templates, documentation, the Stampomat name and logo and all improvements belong to us or our licensors. Nothing in this agreement transfers them. You get the licence in point 2 and nothing more.
Your licence to use the platform. For the term of this agreement we grant you a non-exclusive, non-transferable licence to use the platform for your own business in the way the dashboards and the documentation allow.
Yours stays yours. Your content and your data remain your property. You grant us a non-exclusive, worldwide, royalty-free licence to host, store, copy, resize, display, transmit, back up and adapt your content and your data as needed to provide the products to you, including on your card, your passes, your cashier screens, your customers' wallets, the emails we send for you and your site. This licence ends when your data is deleted after termination, except for backups until they rotate and for records we must keep by law.
Site templates and code. The template, layout and code behind your site are ours. You may not reuse them outside the platform. Your text, photos, menu and brand are yours and you can take them with you (section 13).
Third-party components. The platform includes open-source software and fonts under their own licences, listed on our licences page. Google Wallet, Google sign-in and Google Maps (where you use a map) run under their providers' terms, which we name in the Privacy Policy and the sub-processor list.
Feedback. If you suggest improvements, we may use the suggestion without owing you anything. We will not name you as its source without your consent.
Our marks. You may say that you use Stampomat and show the Stampomat mark on the materials we give you (cards, passes, counter displays, the "Powered by Stampomat" credit). You may not alter the mark or use it in a way that suggests we endorse your goods.

8. Data protection

8.1 Roles

Data protection law gives each of us a role for each kind of data. The DPA sets the roles out in full and is binding on both of us. In short:

For a customer's activity with you (stamps, points, visits, rewards, feedback, customer notes you write, and pickup orders placed on your site), you and we are joint controllers. We inform customers through the Privacy Policy, we answer their requests as the contact point, we secure the platform and we tell you when you need to act. You are responsible for what happens in your shop and for every copy you take out of the platform.
For an organisation's roster, attendance, levels, leaderboards and partner benefits, we are your processor: you supply the data and decide who is a member. Once a member signs in, we are joint controllers for their wallet account.
For contact form submissions and newsletter signups on your site, and for hosting your content, we are your processor. You are the controller and, for the newsletter, the sender.
For your own account, your team members' accounts, platform security, aggregate statistics and our own operations, we are the sole controller.
Benefit partners are separate controllers for what they learn at the door. The organisation is responsible for the arrangement with its partners.

8.2 The DPA is part of this agreement

The Data Processing and Joint Controller Terms, version 2026-09-15, are incorporated into this agreement. They contain the processor terms, the joint controller arrangement with the responsibility matrix, the sub-processor authorisation, the security measures, the assistance and audit terms, and the deletion and return terms. You accept them together with these terms. We change the DPA only in the way section 14 describes; we never change it by merely publishing a new text.

8.3 Your duties with customer data

Use customer data only to run your programme or your site on the platform. Do not use it for unrelated marketing, and never sell it or pass it to a third party.
If you want to contact customers outside the platform, you need your own lawful basis. A CSV export from Stampomat is not consent.
Keep every export, screenshot, order email and note secure, share it inside your business only with people who need it, and delete it when you no longer need it. Delete all of it when this agreement ends.
Forward any privacy request a customer makes to you (access, correction, deletion, objection) to hello@stampomat.com without delay, and do what the DPA asks of you to help answer it.
Tell us at hello@stampomat.com within 48 hours if customer data in your hands is lost, leaked or accessed by someone who should not have it. We tell you within 48 hours when the same happens on our side, as the DPA sets out.
Only add people to a roster, a team or a mailing list when you may lawfully do so. When you enrol a member from a roster, we send that person a notice in your name that tells them who gave us their details and why.
If a member asks you never to enrol them again, honour it, including when you next import or retype a list. The platform does not block that address for you: the list is yours, so keeping the person off it is yours to do, whatever address they use and however the request reaches you.
Do not record sensitive details (section 6.1, point 5). A customer can ask for a copy of the notes you wrote about them, and we will give it. The same applies to the reason you type when you put a membership on hold or when you remove a member from a roster: the member reads it. A hold reason is emailed to them, shown on their card and sent to Google with their wallet pass; a removal reason is emailed to them in your name. Neither is the place for an accusation.

8.4 Who sees which data

You see, through your dashboards and exports: customer names, email addresses, stamp and point balances, purchase amounts entered at your till, visit history, rewards, feedback with the customer's name, membership status and attendance, security events about your programme, and for orders the customer's name, phone number, order lines and note.
We see everything on the platform, including your data and customer data, for the purposes in section 4, point 6, and the Privacy Policy.
Third parties receive data only as the sub-processor list states: our hosting and email provider, our edge network, Google (sign-in, Wallet passes, and Maps where a visitor loads a map), browser push services when you enable notifications, and the AI assistance provider we use under a processor agreement. We do not sell data and we do not share customer data with other businesses on the platform.
Customers see their own balances, history, passes and the name of your business, and can ask us for a copy of everything we and you hold about them, including your notes.

8.5 Sub-processors

The public sub-processor list names every provider that processes personal data for us. We tell you by email at least 15 days before we add or replace one. You can object on reasonable data protection grounds within that period; the DPA sets out what happens then. One provider is switched on by a visitor's own choice rather than by us: Google Maps on your site (Annex B, section B.9). Google Wallet pass objects are created only when a member asks to save a pass (Annex A, section A.12).

9. Marketing consent and references

We show your business name, logo, card, site or partner names in our own marketing (the featured slots on stampomat.com, showcase pages, blog posts, screenshots, sales material) only after you have given us a written marketing consent that states what we may show and where. We record the consent with its date and scope and check it before anything renders.
You can withdraw the consent at any time by email. We remove the reference from live pages within 15 days; printed or already distributed material is not recalled.
A blog post about your business that our assistant drafted carries a line saying that it was drafted with AI assistance and approved by a named person at Stampomat. You approve the facts before we publish.
We may name you as a customer to a prospective customer in private conversation only with the same consent.

10. Confidentiality

Each of us keeps confidential the non-public information the other shares under this agreement: your business figures, customer data, your written offer and fees, our security details, our roadmap and anything marked confidential. Cashier passwords, device trust, integration tokens and API tokens are confidential.
Each of us uses the other's confidential information only to perform this agreement and shares it only with people and providers who need it and are bound to keep it confidential.
The duty does not cover information that is public through no fault of the receiving party, that the receiving party already had lawfully, or that must be disclosed by law or by a court or authority (with notice to the other party where lawful).
The duty lasts for the term of this agreement and three years after it ends. For customer data it lasts as long as the data exists.

11. Availability, changes to the platform, backups

Availability. We run the platform on shared hosting behind an edge network. We keep it online as a matter of course, but interruptions happen: maintenance, provider outages, attacks, our own mistakes. We do not promise uninterrupted or error-free operation. Plan for a short outage at the counter: a customer can collect a stamp later, and you can take an order by phone.
Maintenance. We may take the platform down for maintenance. We try to do it outside your opening hours and to give notice for anything longer than a few minutes.
Changes to features. We improve the platform continuously. We may add, change or withdraw features. When a change removes or materially reduces a feature you use, we give you at least 30 days notice by email and you may terminate before it takes effect (section 13, point 1).
Backups. We take a daily backup of the database and keep it for 14 days. Backups exist so that we can recover the platform after a failure. They are not an archive you can ask us to restore individual records from, and they are not a substitute for your own records of rewards owed or orders taken.
Your records. Keep your own record of anything you need for tax, accounting or disputes: fiscal receipts, invoices, order tickets. The platform is not an accounting system.
Third-party services. Google Wallet, Google sign-in, Google Maps and browser push services depend on their providers. If a provider changes or withdraws a service we will look for an alternative, but we are not responsible for the provider's decisions.

12. Warranties, liability and indemnity

12.1 What each of us promises

We promise to provide the platform with reasonable skill and care, as described in this agreement and the documentation, and to comply with the DPA.
You promise that your business details are accurate, that you hold every right and licence you need for your content and your trade, that you have a lawful basis for every person you add to the platform, that you honour the rewards, prices and promises your programme and your site make, and that you comply with the laws that apply to your trade, including food, consumer, tax and data protection law.
Neither of us promises business results. Loyalty programmes and websites help, but retention, repeat visits, order volume and revenue depend on your business.

12.2 What we are not responsible for

Your content, prices, allergen data, opening hours, order handling and the fulfilment of rewards and orders are yours. We are not the seller, the food business operator or a party to any sale.
Data that leaves the platform through your exports, order emails, screenshots or team members is outside our control.
Decisions of third-party providers about their own services (section 11, point 6).
Events beyond our reasonable control (section 17, point 6).

12.3 Limits on liability

Neither of us is liable to the other for indirect or consequential loss, lost profit, lost revenue, lost goodwill or loss of anticipated savings.
Our total liability to you under or in connection with this agreement, in any twelve-month period, is limited to the greater of the fees you paid us in the twelve months before the event giving rise to the claim and EUR 500.
These limits do not apply to liability for intent or gross negligence, for death or personal injury, for a breach of section 10 (confidentiality), or for a party's own breach of its data protection duties under the DPA. They do not limit anything that the law does not allow to be limited.
Your liability to us for fees due and for your indemnity in section 12.4 is not limited by point 2.

12.4 Indemnity

You will compensate us for the loss we suffer from a claim by a third party (a customer, an order customer, a partner, a rights holder, an authority) that arises from: your content or the material you gave us; wrong or missing allergen, ingredient, price or identity data; your failure to honour rewards, orders or promises; your breach of section 6 (acceptable use); or your breach of your data protection duties. This includes fines, damages, settlement amounts and reasonable legal costs.
We tell you promptly about the claim, let you take over the defence if you wish and cooperate with you. You do not settle in a way that admits fault on our behalf without our written consent.
We will compensate you for the loss you suffer from a claim by a third party that the platform, as we provide it and as you use it under this agreement, infringes that third party's intellectual property rights. We can end this duty by procuring the right for you to continue, by changing the platform so it no longer infringes, or by terminating the affected product and refunding prepaid fees for the period after termination. The duty does not cover your content, your customisations or use in breach of this agreement.

13. Suspension, termination and what happens to data

13.1 Ending the agreement

Either of us may end this agreement, or one of the products under it, at any time with 30 days written notice.
You may also end it with immediate effect within 30 days after we notify a change to these terms, the DPA, a feature you use or the fees (section 14 and Annex C), if you do not accept the change.
We may end it with immediate effect if you commit a serious breach that you do not fix within 15 days of our notice, if you breach section 6.1 point 1, 2, 4 or 8 or section 10, if an insolvency procedure is opened over your business, or if the law or a provider we depend on requires it.

13.2 Suspension

We may suspend your account, or a feature, without notice where necessary to protect customers, other businesses, the platform or ourselves: unpaid invoices after the reminder in Annex C, serious or repeated breach of sections 6 or 8, a security risk, a legal requirement or a well-founded report of illegal content. We tell you the reasons as section 6.3 describes.
Suspension blocks the dashboard, the merchant portal, cashier screens and ordering. Your customers' earned data is preserved, but stamps, points and redemptions with you pause while the suspension lasts. Fees keep accruing during a suspension caused by your breach.
We lift a suspension as soon as its reason is gone.

13.3 What happens after the end

Access ends. Your dashboards, cashier devices, tokens and the merchant portal stop working on the end date. Your site goes offline and any custom domain is detached from our edge network (Annex B).
Export. Within 30 days after the end date you can ask us for an export of your data: your programme records, your site content and menu, and the customer data you are entitled to under the DPA. We deliver it in a common machine-readable format.
Deletion. We delete your data and the customer data of your programme or site 90 days after the end date, except for records we must keep by law (invoices, the acceptance record, audit rows in pseudonymised form) and for backups until they rotate.
Your customers. Customers keep their Stampomat accounts. The stamps, points, rewards and memberships they earned with you are deleted with your data, because they exist only in your programme. Rewards earned before the end date keep their terms until that date. You decide how to honour rewards that are still open after it, and you tell your customers in good time. Google Wallet passes of your members are expired.
Your copies. Delete every export, order email, screenshot and note that holds customer data, unless the law requires you to keep it (for example order records for tax purposes).
Fees. Invoices issued for the period before the end date remain due. If we end the agreement without cause, we refund any prepaid fees for the period after the end date.
Survival. Sections 7, 8, 10, 12, 13.3, 16 and 17 survive the end of the agreement.

14. Changes to these terms and the DPA

Notice. We notify every change by email to your account address, on a durable medium, with a summary of what changed and a link to the new version and the changelog.
Notice period. A change takes effect no earlier than 30 days after the notice for a material change (fees, liability, data protection, a feature you use, the law and forum clause) and no earlier than 15 days for any other change. Where a change requires you to adapt your technical setup or your processes, we give longer notice.
Your right to leave. You may end the agreement with immediate effect before the change takes effect (section 13.1, point 2). You do not need to accept the new version anywhere: if you keep using the platform after the notice period, the new version applies.
No retroactivity. A change never applies to the period before it takes effect.
Exceptions. We may make a change with shorter notice only when the law requires it or when the change is solely in your favour. We still notify it.
The DPA. The same rules apply to the DPA. The sub-processor list changes as section 8.5 describes.
Versions. Every version carries its date. The changelog page lists every published version with its effective date and a one-line summary.

15. Notices and communications

We send notices to the email address on your account. You send notices to hello@stampomat.com, and data protection matters to hello@stampomat.com.
A notice by email is received on the working day it is sent, or the next working day if sent after 17:00 Central European Time or on a non-working day in Ljubljana.
We may also show operational messages in the dashboard, but a change under section 14 always goes by email.
Contract communications are in English unless we agree otherwise. The dashboards and the customer-facing documents exist in the languages in section 4, point 5.

16. Governing law and disputes

This agreement is governed by the law of the Republic of Slovenia.
Before starting proceedings, each of us tries to settle the dispute by writing to the other and meeting or speaking within 30 days.
The courts of Ljubljana, Slovenia, have exclusive jurisdiction over disputes arising from or in connection with this agreement. We may nonetheless seek injunctive relief or collect unpaid fees before the courts of your seat.
Mandatory rules of your own country that apply regardless of the chosen law remain unaffected.

17. General

Entire agreement. These terms, the Annexes, the DPA, the sub-processor list and your written offer are the whole agreement between us and replace earlier discussions and drafts.
Severability. If a clause is invalid or unenforceable, the rest stands, and the invalid clause is replaced by the valid clause that comes closest to its purpose.
Assignment. You may not transfer this agreement or your account without our written consent. We may transfer it to a legal entity that takes over our business, with notice to you; your rights are unchanged by the transfer.
No waiver. Not enforcing a clause once does not waive it.
Independent parties. We are independent contractors. Nothing creates a partnership, agency or employment.
Force majeure. Neither of us is responsible for a failure caused by events beyond reasonable control (power or network outages, hosting or edge provider failure, natural disasters, epidemics, war, government action), provided the affected party works to restore performance promptly. Payment duties are not excused.
Subcontracting. We may use providers to run the platform. We remain responsible to you for them. Personal data goes only to the providers on the sub-processor list.
Electronic form. This agreement is concluded electronically. The acceptance record in section 2 is our proof that it exists and of its content.
Counterparts. On request we sign a paper or PDF copy of these terms; the electronic acceptance remains binding whether or not the copy is signed.

18. Contact and reporting illegal content

Point of contact. For you, for customers and for authorities: hello@stampomat.com. This mailbox is read by a person; it is not automated.
Reporting content. Anyone can report content on the platform or on a site we host that they believe is illegal or infringes their rights, by email to hello@stampomat.com with the subject "Report content". A useful report contains: why the content is illegal or infringing, the exact address (URL) of the content, the reporter's name and email address, and a statement that the report is made in good faith and is accurate. We acknowledge receipt, a person reviews the report, we decide without undue delay, and we tell the reporter the outcome. If the content is yours, section 6.3 applies.
Authorities. We may have to identify your business to a competent authority on a lawful request and to cooperate with lawful orders about content on your site.

Annex A: Loyalty

This Annex applies when you run a loyalty programme with us. Your mode (stamps, points or membership) is set with you at setup and shown in your dashboard.

A.1 What the loyalty product includes

Stamps mode. A digital stamp card that customers collect by scanning a QR code at your counter; reward tiers; reward expiry; optional welcome-bonus stamps; a card editor (logo, colours, tiers, cooldown, expiry); a customer list; redemption history; customer feedback; analytics; broadcasts; customer notes; a cashier screen and a customer-facing kiosk for your tablet; team accounts.
Points mode. Everything in stamps mode, with points instead of stamps: points as a percentage of the purchase amount that you set, entered by your staff on a paired till at the moment of sale and carried to the customer on a printed or on-screen slip (section A.4); a reward catalogue; vouchers that customers convert points into, labelled in your currency and valid only at your business.
Membership mode. For organisations: member rosters, join links, membership passes with Google Wallet, events with attendance by scan or register, levels, approvals and adjustments, an officer leaderboard, partner benefits, broadcasts, member notes and team accounts.
Cashier surfaces. A cashier tablet screen, a customer-facing kiosk screen and a staff monitor of today's visitors. Each tablet is trusted with your cashier password (section 5, point 6).
Integration with a Stampomat site. If you also have a site with pickup ordering, a completed order can award a stamp to an order customer who linked their wallet (Annex B, section B.11).

A.2 Cards, stamps and rewards

You define the card and the rewards; we record the promise; you deliver it. You must honour the rewards your customers earn. Customer claims about rewards are between you and the customer.
Changes go forward only. You may change the card at any time for future stamps. Stamps and rewards already earned keep the terms under which they were earned.
Welcome bonus. If you enable welcome-bonus stamps, they can never reach the first reward tier on their own.
Cooldowns and locks. The platform enforces the cooldown you set between stamps on the same device and locks a customer's manual-code entry after repeated failures. These are anti-fraud measures; the customer terms describe them and give the customer a way to ask for human review. You cannot lift a lock yourself; ask us.
Reward tokens. Redemption uses one-time tokens that expire. An expired token is not a lost reward; the customer can present the reward again.

A.3 Points, vouchers and the catalogue

Points are earned as the percentage of the purchase amount that you set. Your staff enter the amount at the till, and the slip the customer scans credits the points (section A.4).
Customers spend points on catalogue items you define or convert them into single-business vouchers with a currency label. Vouchers have no cash value and give no change. When a voucher expires unused, the platform refunds its points to the customer automatically.
You must honour catalogue items and vouchers at the value shown, and you must not present a points reward as a price reduction unless the price rules for reductions in your country are met.
You may not use points to give customers cash, credit outside your business or anything you are not licensed to sell.

A.4 Sale slips and paired tills

Slips. At a points business your staff enter the purchase amount on a paired till tablet, and the till hands the customer a slip, printed or shown on its screen. The slip's code carries the amount, the points and the till that issued it, signed by that till. The slip identifies nobody and is not a fiscal receipt; you still issue the fiscal receipt as your tax law requires.
Claiming. The customer scans the slip with their own phone and the points land on their card. A slip can be claimed once and expires seven days after it is printed. A slip pays the points printed on it, even if you change your rate after printing.
Voids and reversals. If a sale is cancelled before its slip is claimed, void the slip; it then pays nothing. If you cancel or refund a sale after its slip was claimed, you can reverse the points; the reversal is recorded with a reason and appears in the customer's history. Reverse points only on the grounds the customer terms allow.
Paired tills. Pair only tablets that belong to your business, using the one-time pairing code from your dashboard, and give each till a name you will recognise. Retire or revoke a till you stop using; a revoked or retired till stops working on its next request and its unclaimed slips stop being honoured. Tell us at once if a till tablet is lost or stolen. Where a revocation catches a customer's honest slip, put it right at the counter or ask us to.

A.5 Memberships and organisations schedule

Roles. For rosters, attendance, levels, leaderboards, approvals, adjustments and benefits, you are the controller and we are your processor under the DPA. You decide who is a member, what a membership is worth, how long it is valid and what an event is. Once a member signs in to their wallet, we are joint controllers for that account.
Enrolment. You may enrol a member by typing their name and email address only when you have that person's data lawfully for membership purposes. We send them an invitation in your name that names you as the source and links the Privacy Policy (section 8.3, point 6). A person who never signs in does not receive broadcasts (section A.7) and does not get a Google Wallet pass (section A.12). The customer terms a member accepts when they join say plainly that you can put their card on hold and that you can end their membership, and we record that acceptance with the version of the terms in force. That acceptance covers the platform side only. It does not relieve you of your own rules, nor of any notice, ground or right of appeal that your statutes, your by-laws or the law of your country owe a member you suspend or expel.
Join links. A join link lets a person enrol themselves. Keep live links to the people you want to join; revoke a link that has leaked. The platform limits how many links are live at once (section A.11).
Attendance. Attendance is recorded by a scan at the door, by your register, or by a member's self-scan that you approve. Members can dispute an attendance record; you answer the dispute, and we can help.
Levels and leaderboards. Levels and the officer leaderboard use real member names and attendance counts. They are visible to your officers, never to partners and never to the public.
Sensitive organisations. If membership of your organisation itself reveals a sensitive characteristic (a political party, a religious community, a trade union, a health-related group), you may enrol members only with their explicit consent given at joining, you must tell us before setup, and you must not use the leaderboard.
Member disputes and adjustments. You may adjust a member's status, level or attendance. Every adjustment is logged with who made it. Members can see their own history.
A hold is the one adjustment that stops a card working, and it is the only one that lifts again. The member keeps their place on your roster and every point they earned, and cannot record attendance or use a benefit until you resume them. We email the member when you place the hold and again when you lift it, with your reason if you typed one, and that reason is also shown on their card and, where they saved one, on their Google Wallet pass. A hold deletes nothing. Where you mean "not for now", this is the control to use, or the Alumni status; point 8 is not.
Removal. You can remove a member from your roster at any time, under your own rules, whether their membership is active or on hold; a hold is not something you have to lift first. Only the account owner and a team member with the management role can do it, not any other team member, and the platform limits how many removals one account can make in a day (section A.11). A removal is not a hold: it deletes records that nothing but the undo window below can bring back.
What is deleted: the membership, every attendance record, the private note you wrote about them, and the bookkeeping we keep to pace your mail to them. What is anonymised: the points they earned by attending, which keep their amount and their event and stay in your totals and your per-event figures with the member's name taken off them. What stays: the counts and times of benefits they redeemed, without a name, and their Stampomat account and their cards at other businesses, which are never yours to delete.

The pass stops working straight away. If the member had saved it to Google Wallet, we expire the pass object at Google at once and blank the name and member number on it. Google lets us expire a pass, not delete one, so the pass stays in the member's own wallet as an expired pass until they remove it themselves.

We email the member in your name, telling them the membership has ended, giving your reason if you typed one, and saying that their Stampomat account is untouched. That letter is not optional and you cannot switch it off.

You can undo a removal for 7 days, from the Members page. After that it is final and we cannot recover the records. An undo does not unsend the letter and does not un-expire the Google Wallet pass.

Removing a member changes your figures. The leaderboard and the podium for a season that has already finished are recalculated without that member, so a published result can change.

If the member asked you never to enrol them again, honour it yourself; the platform does not block the address for you (section 8.3, point 7).

A.6 Partner benefits

You may name partner businesses that offer a benefit to your members. For each benefit you type the partner's name and, where you choose, its email address, website, address, social links and a description members see. The benefit itself is your arrangement with the partner; we record it and provide the tools described here.
Confirmation. When you type a partner's email address, we send the partner one letter in your name asking it to accept or deny the benefit, and a benefit you create with an address starts switched off. The partner accepts the Partner Terms for Benefit Providers, version 2026-09-23, by pressing Accept, which switches on a benefit that was held for the partner's answer. We email you the answer either way. Once a partner has accepted, you cannot change its address.
Checking a member. You choose for each benefit how the partner checks a member: by looking at the card; by scanning the short-lived code on the member's phone, with any phone camera or on a scanning page the partner signs in to with Google; or by the member scanning the partner's own printed or rotating code. Checks with a code work only after the partner has accepted. The partner learns only whether the presented membership is valid for the benefit at that moment, and the scanning page also shows how many redemptions it recorded today and this month. A partner never receives member names, email addresses or member numbers through the platform.
Usage link. You can give a partner a private link that shows, without signing in, the benefit's usage counts and its most recent redemptions with their times. The link expires 90 days after you issue it; you can turn it off or reissue it from your dashboard, and the old link then stops working.
You are responsible for the choice of partners and for telling members what the benefit is. A partner who breaches the Partner Terms can be removed by you, by switching the benefit off or deleting it, or by us, by hand, on your request or when we end the partner's access under the Partner Terms.

A.7 Broadcasts and the customer-consent basis

What a broadcast is. An email you write in the dashboard, sent by us in your name to a segment of your customers (all, lapsed, regulars, by level, by points, or a target you choose), optionally with a stamp, points or gift grant.
Who receives it. A customer of yours who has an email address on the platform and has not objected or unsubscribed. The audience excludes customers who objected to marketing when they joined, customers who unsubscribed, and roster members who never signed in. The platform applies these exclusions; you cannot override them.
Basis. The customer terms tell customers that a business they joined may email them about that business through the platform and that they can object at joining and stop at any time. That covers messages about your own business: your programme, your offers, your news. It does not cover messages about other businesses, messages to people who did not join your programme, or any message to a person in North Macedonia who is not in a customer relationship with you. For those you need the person's prior explicit consent, obtained by you, before you add them to any list.
Content rules. A broadcast must name your business, must be about your business, must not be a prize game (section 6.1, point 4), must not be misleading and must respect the rules in section 6. We add the legal footer and the unsubscribe link; you may not remove or obscure them.
Grants. A stamp, points or gift you attach to a broadcast is your promise. It is applied when the message is sent and you honour it like any other reward. You can undo a grant only through the dashboard action we provide.
Limits. The platform limits how many broadcasts you can send in a period (section A.11).
Engagement mails we send. Separately from broadcasts, the platform sends reward reminders, expiry reminders and win-back notes to your customers in your name on a schedule. They are marketing mail under the same unsubscribe and stop for a customer who unsubscribes. If you want them off for your whole programme, write to us.

A.8 Customer notes

Your admins and operators can write a private note of up to 2000 characters about each customer. Only your team sees notes on the platform.
Notes are personal data of the customer. You are the controller of what they say; we store them for you. A customer can ask for a copy and we will provide it, including the fact that your business wrote it.
Never record sensitive details (section 6.1, point 5) or anything you would not want the customer to read. Do not record other customers' data in a note.
Notes are deleted with the customer's data when the customer deletes their account, and with your data when this agreement ends.

A.9 Exports

You can export three CSV files: your customer list (name, email, balance, last activity), redemptions (with customer names) and feedback (with ratings and comments). Only the account holder and admin users can export; operators and accounts with the retired read-only role cannot. The management role does not appear here at all: it is offered only at a membership organisation, and these three exports exist only on a stamps or points account. Every export is logged with who took it and when.
An export is a copy of customer data outside the platform. Section 8.3 applies to it in full: programme use only, secure storage, access on a need-to-know basis, deletion when no longer needed and at the end of the agreement. The dashboard shows this reminder above the export button.

A.10 Team accounts

Section 5 applies. In addition: a team member with the operator role can record attendance and handle event work at a membership organisation but cannot change settings, send broadcasts or export; an account with the retired read-only role can only read.
The platform records when each team member was last active, to show presence in the dashboard, and stores the profile picture from their Google account. Team members are told this in the notice they receive when added.
You may not share one Google account between several people.

A.11 Limits

The platform enforces fair-use limits so that one business cannot exhaust the service for others: on team members, trusted devices, live join links, broadcasts per period, benefit codes, invitations, engagement mails, catalogue items, membership benefits, event types, events, levels and removals of members from a roster in one day. The daily removal limit is there because every removal sends a letter to a person, so a mistake or a stolen session cannot empty a roster in one sitting; a removal that you undo still counts against the day.
The current limit for each item is shown in your dashboard where it applies, and the dashboard tells you when you approach it. We may raise a limit for you on request or in a written offer. We may lower a platform-wide limit only with the notice in section 14.
If a limit blocks something you need for a legitimate reason, write to us.

A.12 Google Wallet passes

Google Wallet is on for every organisation unless you ask us to switch it off, and while it is on your members can save their membership passes to Google Wallet. A pass object is created at Google only when a member asks to save the pass, never for a member who did not ask.
A pass shows the member's name, the pass title, its status and validity, your branding and the member's points, level and member number. It never shows an email address, a phone number, a date of birth or any sensitive detail, and you must not ask us to put such data on a pass.
Google receives the pass data and shows it under Google's own privacy policy; the Privacy Policy names Google as a recipient. When a membership or an account is deleted, the pass is expired.
Google Wallet is Google's service under Google's terms. We do not control whether a device supports it.

A.13 Cashier and fiscal devices

Cashier devices. Section 5, point 6, applies. Name each trusted device so you can recognise it in the list, and revoke devices you no longer use. The device list and the security page of your dashboard show recent events for your programme.
Paired tills. Section A.4, point 4, applies. We store a device token and the label you gave each till. A retired or revoked till no longer records sales or prints slips that earn points.
Screens in public view. The kiosk screen is designed for customers and shows no other customer's data. The cashier and monitor screens are for staff only.

A.14 Equipment we lend

Where your written offer or your onboarding includes a tablet, a stand or a counter display, we lend it to you. It remains our property. "Extra equipment" on our website means the items your written offer lists, nothing more.
Use it only for the platform, keep it in working order and do not modify it. You are responsible for loss, theft or damage beyond normal wear from the moment you receive it until you return it, at the replacement value stated in your written offer or, if none, at the current retail price of an equivalent device.
Return it within 14 days after the end of the agreement, in the state you received it, normal wear excepted. If you do not, we invoice the replacement value.
A device we lend you holds no customer data of its own; the cashier screen loads data from the platform. Sign the device out and return it as it is.

Annex B: Sites

This Annex applies when we build and host a website for you. Pickup ordering, a contact form, a newsletter form, a map and a loyalty link are features of a site; your written offer states which ones you have.

B.1 What we build and host

A website on one of our templates, in the languages you choose from Macedonian, Slovenian and English, at a Stampomat subdomain and, if you wish, at your own domain (section B.4).
Pages built from content blocks we fill with your material: text, photos, opening hours, contact details, a map, service descriptions, testimonials, a menu with categories, items, options and prices, links to your social profiles and to delivery or ordering channels you actually use.
When ordering is included: a guest checkout where an order customer enters their name and phone number, an optional note per item and per order, a pickup time (as soon as possible or a slot you allow), and pays at your counter. A merchant portal where you accept, decline, mark ready, mark picked up or mark no-show, edit your menu and set your preferences (preparation time, opening hours, pause ordering, the address that receives order emails, browser notifications).
Photos. We use the photographs you give us or approve. We do not generate photographs of your food or premises with AI.
We keep the site online as section 11 describes. We do not charge any commission on orders (Annex C).

B.2 Your content: licence and warranties

Section 7 applies. You give us your material and we build the site from it; you remain responsible for the content as published after your approval (section B.3).
You warrant that, for everything on your site:
- you hold the rights to the text, photos, logos and other material, or the licences to use them, and that people shown in photographs have agreed;
- your legal name, legal form, seat, registration number, tax number, VAT status, email address, phone number and any licence data are correct and kept current;
- every price is the price the customer pays at the counter, includes VAT and any charge that applies, and matches the price you charge in your premises;
- you give order customers the allergen and ingredient information that food law requires of you, in the way the law allows for your premises (for example on request at the counter or by phone, or in writing where the law requires a written list), and you keep it current before a recipe changes; the site itself does not list allergens or ingredients;
- your opening hours, pickup times, preparation times and "temporarily closed" status are current;
- you hold every licence your trade requires and you do not offer through the site anything you may not sell at a distance.
No allergen display. The site does not show allergen or ingredient information for menu items, and neither the order summary nor the order emails list it. Each dish on the menu carries a short line asking customers to ask you about allergens before they order, and checkout repeats it with your phone number when you have given one. That notice does not replace your duty as the food business operator to provide the information food law requires; you remain responsible for its accuracy and completeness.
Identity data on the site. Your site cannot go live until you have given us your legal name, registration number and tax number. They render on the site's legal page, on the checkout and in order emails, because the order customer's contract is with you.
You are the trader. The site states, on its legal page and at checkout, that you are the seller and the food business operator and that Stampomat provides the site and relays orders as a technical service and is not a party to the sale. Do not change or hide that statement.

B.3 Content we draft, and your approval

Only we (including our assistant) edit page content; you edit the menu, prices, availability and your settings in the merchant portal. Everything we write for your pages is drafted from the material you gave us.
Content we draft is a proposal until you approve it. We record your approval of the site before it goes live and of every later page change we make. After approval, the content is your content for the purposes of section B.2. If you want something changed, tell us; we do not publish a page change you have rejected.
Draft markers. Text we mark as a draft or an open question never renders on a live site.
Testimonials. A testimonial block shows a person's name, role, quote, rating and photo. We publish a testimonial only when it is marked as verified, with a source (where the person said it, or your written record of their consent), and after your approval. You warrant that every testimonial is genuine and that the person agreed to appear.
Third-party marks. Links to a delivery or ordering service appear as text unless the service's official badge is used unmodified and you are a confirmed partner of it. You tell us which channels you actually use; we do not add channels you do not have.

B.4 Domains and certificates

Subdomain. Your site is reachable at a subdomain of stampomat.com that we assign. The subdomain is ours; you use it for the term of the agreement.
Your own domain. You may connect a domain you own. You keep the registration and pay the registrar. You point the domain at our edge network as we instruct, and you authorise us to request, renew and revoke TLS certificates for it through our edge provider (Cloudflare) and to configure the hostname there. You confirm that you control the domain and that its use does not infringe anyone's rights.
Search and verification. With your agreement we may verify your domain in search tools to monitor how the site appears in search results; we remove the verification at the end of the agreement.
On termination we detach the domain from our edge network within the notice period, and the site stops resolving there. Update your DNS before the end date if you move to another provider. We do not hold your domain hostage: nothing in this agreement gives us a right to it.

B.5 Pickup ordering: how it works and your duties

The sale is yours. An order placed on your site is an order request to you. The contract with the order customer is formed when you accept the order in the merchant portal. We relay it; we never accept orders in our own name and we never take payment.
Acknowledgement and confirmation. The site shows the order customer an acknowledgement with an order number the moment the order is placed. When you accept, decline or mark the order ready, the site updates the status page, and when the order customer gave an email address, we send an acknowledgement and then a confirmation or a decline in your name from our mail system. The confirmation carries your identity, the items, the total, the pickup time, the complaint route and the version of your order terms.
Respond promptly. Accept or decline every order within the response window shown in your portal. An order you have not answered by the end of the window is declined automatically and the order customer is told; a declined order is not a sale. You set your preparation time and opening hours so that the pickup times the site offers are ones you can keep.
Ready times. The site shows the order customer an estimated ready time based on your preparation time. Mark the order ready when it is. If you will be late, call the customer.
No-show and cancellation. An order customer can cancel until you accept, by calling you; if they do, decline the order in the portal. After acceptance, mark a no-show only after the hold time stated on your site's legal page has passed. Prepared food that a customer does not collect is your loss; we do not collect anything from customers for you.
Payment at the counter. The order customer pays you at pickup, in cash or by card as you accept. You issue the fiscal receipt or invoice at the counter, as your tax law requires. The order acknowledgement and confirmation are not fiscal receipts and must not be presented as such.
Order emails. The address you set as your order notification address receives the customer's name, phone number, items and notes in plain text. You warrant that the address belongs to your business and is under your control, you keep that mailbox secure, and you delete order emails when you no longer need them, in line with section 8.3.
Order notes. Order customers can type notes. A note may contain an allergy or a health detail because the customer chose to tell you. Use it only to prepare the order, and never copy it anywhere else.
Complaints. You handle complaints about orders: quality, delay, a wrong item. The site shows the order customer your complaint email address and, for sites in North Macedonia, the consumer authority's contact. Answer complaints in writing within the period your consumer law sets. We are not a party to the complaint, but we help you find the order record.
Retention. The platform pseudonymises orders 90 days after they are completed, declined, cancelled or marked no-show: the name, phone number, email address and notes are removed and the totals, items and timestamps stay for your statistics. Export what you need for your own records before then.
What we do not offer. Delivery, online payment, tips, table reservations and age-restricted goods. Links to a delivery service you use are links to that service; the order there is between you, the service and the customer.

B.6 Contact form and newsletter

Contact form. A visitor's name, email address, message and, on some templates, phone number and the service they ask about are emailed to your contact address. We keep a delivery copy for the period the Privacy Policy states and then delete it. You are the controller of these messages; answer them and keep them as your own data protection duties require.
Newsletter. Where your site has a newsletter form, the sign-up names you as the sender, and we collect the subscriber's name, address, language, the time of sign-up and of confirmation, the notice version and a hashed IP address as proof of consent. A sign-up takes effect only when the subscriber clicks the confirmation link we email; an unconfirmed request never enters your list or your exports. We hand the confirmed list to you on request. The platform has no sending feature today. If you send a newsletter yourself, every message must carry a working unsubscribe, and you must remove anyone who unsubscribes. When we add a sending feature, an unsubscribe link in every message will be required first. A person who unsubscribes through the site is removed from your list and kept only as a suppression hash for 30 days.

B.7 Merchant portal

Section 5 applies. You sign in with Google to the merchant portal at the address we give you. We invite the people you name; each invitee receives a notice with the Privacy Policy before they sign in.
Browser notifications for new orders are optional. When you switch them on, your browser's push service receives your device's endpoint and an encrypted alert containing the order number and total; no customer data goes to the push service. You can switch them off in the portal.
The portal keeps you signed in for 30 days on a device. On a shared device, sign out when you leave.
The portal logs who accepted, declined or changed an order and when. We rely on that log when a customer complains.

B.8 Our assistant's access

We operate your site partly through an AI assistant that acts under our instructions and uses our API. It can create and edit pages, menus, themes, domains and merchant invitations for your site, and it can read orders. It cannot accept, decline or change an order.
In order lists the assistant sees masked customer names and no phone numbers. Full customer details and notes are available to it only under a separate permission we grant for a named task, and every such read is logged. Its access tokens expire and carry only the permissions they need.
The provider of the model behind the assistant is on the sub-processor list under a processor agreement. The assistant's actions appear in the activity log with its own actor name, and you can ask us for the log entries about your site.

B.9 Map and fonts

Where your site shows a map, it is Google Maps. The map loads only after a visitor clicks "Load map" on a placeholder that shows your address and tells the visitor that loading sends their IP address to Google. Use of Google Maps on your site is subject to the Google Maps End User Additional Terms of Service (https://maps.google.com/help/terms_maps/) and the Google Privacy Policy (https://policies.google.com/privacy). The Google attribution on the map is never hidden.
Fonts are served from an EU font service that states it keeps no logs of visitors. No visitor data goes to Google for fonts.

B.10 The credit line

Every site carries a small "Powered by Stampomat" credit in its footer and on the ordering screen. The credit is a condition of the site fee in your written offer. It links to our website. It can be removed only if your written offer says so.

B.11 Loyalty link

If you also run a loyalty programme with us, an order customer can link their Stampomat wallet at checkout. The link stores an opaque reference on the order; no name or phone number crosses between the site and the loyalty platform.
When you mark an order as picked up, the platform asks your loyalty programme to award one stamp to the linked wallet. The award follows your card settings (for example the cooldown) and can fail for reasons the site shows you. The site does not promise the customer a stamp for every order, and you must not promise it either.
Points-mode programmes are not supported by the link today.

B.12 Going live, changes and taking the site down

A site goes live when you have approved it, the identity data in section B.2 point 4 is complete, and, where ordering is on, you have set your preparation time and opening hours.
You can pause ordering at any time in the portal. Ask us to take the whole site offline at any time; we do it within one working day.
On termination, section 13.3 applies. Within 30 days you can ask for your site content, menu and the order data you are entitled to; we then delete the site, its media, its domains and its data after 90 days.

Annex C: Fees

C.1 What you pay

Your fees are those in your written offer. If you have no written offer, the loyalty product is free during the trial and no fee is due until you accept an offer.
Fees are stated without VAT. VAT is added where we are required to charge it.
We charge no commission on orders placed through your site and no fee to your customers. What the customer pays at your counter is yours.

C.2 Trial

A new loyalty account starts with a free trial of 90 days. We may extend a trial or grant free periods at our discretion. Nothing is charged during a trial and no payment card is collected.
When the trial ends, the fees in your written offer apply. If you have not accepted an offer by then, we may extend the trial or end the agreement with 30 days notice; we never charge a fee you did not agree to in writing.
A site has a trial only if your written offer says so.

C.3 Invoices and payment

We invoice you, by email, for the period and at the interval in your written offer. We do not store payment cards. You pay by bank transfer to the account on the invoice by the due date printed on it.
If an invoice is unpaid on its due date, we send a reminder. If it is still unpaid 14 days after the reminder, we may suspend the account (section 13.2) until all due invoices are paid. Statutory late-payment interest applies from the due date.
Disputes about an invoice must reach us in writing within 30 days of the invoice date; the undisputed part remains due.

C.4 Changes to fees

We may change fees with at least 30 days written notice. A fee change never applies to a period already invoiced and never applies retroactively.
You may end the agreement with immediate effect before the new fee takes effect (section 13.1, point 2). If you continue after that date, the new fee applies.
A fee fixed in a written offer for a stated period does not change during that period.

C.5 Equipment and extras

Equipment we lend is covered by Annex A, section A.14. Any deposit, purchase price or replacement value is stated in your written offer.
Work outside the products (custom development, content beyond the agreed pages, data work) is charged only when agreed in a written offer.