Privacy Policy

1. Who we are

PosPly Technologies Ltd operates PosPly and is the data controller responsible for processing your personal data under this policy. For any privacy-related enquiry, you can reach us via the email or WhatsApp details in the site footer.

2. Data we collect

Account data: name, email address, encrypted password, country, and your role within the store.

Store and operational data: store name, product and inventory data, sales, IMEI and serial numbers, data about staff you invite, and activity logs within the system.

Technical data: IP address, device and browser type, essential cookies (such as your language preference), and error logs when they occur.

3. Why we collect this data

To create your account and operate the point-of-sale service, synchronisation, billing, and customer support.

To protect your account from fraud and unauthorised access, and to monitor and improve the stability of the service.

To communicate with you about your account or important service updates, and to comply with legal and tax obligations where applicable.

4. Legal basis for processing

We process your data on the basis of performing our contract with you (operating the service you subscribed to), our legitimate interest in protecting and improving our systems, and compliance with legal obligations where required.

We carry out this processing in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, as well as any applicable local requirements in the other markets we serve.

5. Who we share your data with

We use trusted service providers to operate the platform, including Supabase for database and authentication, Stripe for payment and subscription processing when enabled, and Sentry for technical error monitoring and service stability.

Data is shared with these providers only to the extent necessary to deliver the service, and under data processing agreements that protect your privacy. We do not sell your data to any third party for marketing purposes.

6. International data transfers

Your data may be processed or stored in countries outside your own, including the United Kingdom or the European Union, via the service providers listed above. In such cases, we ensure appropriate safeguards are in place to protect your data in line with applicable law.

7. Data retention

We retain your data for as long as your subscription is active. When you close your account, you may request deletion of your data, which we will carry out within a reasonable period, except where retention is required for legal or tax purposes.

8. Security

We apply appropriate technical and organisational measures to protect your data against unauthorised access, loss, or unlawful disclosure, including encryption in transit and access controls.

9. Your rights

You have the right to request access to, correction of, deletion of, or a copy of your personal data, and to object to its processing in certain circumstances.

If you are based in the United Kingdom, you also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's data protection regulator. If you are based in the European Economic Area or another market, you may contact the relevant data protection authority in your country.

To exercise any of these rights, please contact us via the support channels listed in the site footer.

10. Cookies

We use essential cookies to operate the site, along with optional cookies as needed. Full details are set out in our separate Cookie Policy.

11. Children's privacy

The service is intended exclusively for business use by adults, and we do not knowingly collect data from children under the age of 18.

12. Changes to this policy

We may update this policy from time to time to reflect changes in the service or legal requirements. Any material update will be published here along with the last updated date.

13. Contact

For any privacy questions or to exercise your rights, contact us via the email or WhatsApp details in the site footer.