Settings

Manage security and access controls.

Director delete PIN

A separate numeric PIN required to permanently delete transactions, appointments, and shop orders. Staff can still log in with the admin password — only the director needs this PIN.

How it works: Staff log in with the admin password as normal. When anyone tries to permanently delete a record, they are prompted for this PIN instead. Only the director (who knows this PIN) can authorise deletions. If no PIN has been set yet, delete actions will be blocked until one is configured here.