Data Requests

1. Who can make a request

• Visitors and leads who sent us a form, booked a demo or messaged us.
• Merchants with a RetailPOS Studio account, about their own account data.
• Customers of a shop that uses RetailPOS Studio. The shop controls your data (your purchases, reward points, warranty or repair records). Please contact the shop first. If you contact us, we will pass your request to the shop and help them respond.

2. What you can ask for

• Access: a copy of the personal data we hold about you and how we use it.
• Correction: fixing data that is wrong or incomplete.
• Deletion: erasing your data, unless we must keep it for a legal reason such as tax records.
• Restriction or objection: limiting how we use your data, or stopping a use such as marketing.
• Portability: your data in a common, machine-readable format, where the law gives this right.
• Withdrawing consent: for example, turning off optional analytics or marketing messages.

3. Your rights by jurisdiction

United States. Under the California Consumer Privacy Act as amended by the CPRA, and similar laws in other states, you may ask to know, access, correct and delete personal information, and to opt out of its sale or sharing (we do not sell or share it). You will not be treated differently for using your rights. More information is available from the California Privacy Protection Agency: California Privacy Protection Agency.

United Arab Emirates. Under Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data, you may request information, access, correction, erasure and restriction, object to processing and withdraw consent.

Pakistan. We honor reasonable requests to access, correct and delete your data in line with the Prevention of Electronic Crimes Act 2016 and any data-protection law that comes into force.

4. How to make a request

1. Open our Contact page and send the form with “Data request” as the topic, or use the Show email button there and choose the privacy address.
2. Tell us which right you want to use and give enough detail for us to find your data: your name, the phone number or business name you used, and your market.
3. If someone is acting for you (an authorized agent), include written permission from you.

5. How we verify your identity

To protect your data, we confirm that the request comes from you before acting. We usually do this by sending a code or confirmation message to the phone number or address already on file. For merchant accounts, the request must come from the account owner or be confirmed from inside the account. We only ask for what we need to verify you and delete it once the request is closed.

6. How long it takes

• California and other US states: we confirm receipt within 10 business days and respond within 45 days. If we need more time, we may extend once by up to 45 more days and will tell you why.
• UAE and Pakistan: we respond within a reasonable time as the law requires, and aim for the same 45-day standard.

Requests are free. If a request is clearly unfounded or excessive, we may refuse it or charge a reasonable fee where the law allows, and we will explain why.

7. What happens after deletion

We delete your data from live systems, then from backups as they expire on their normal cycle. We keep a minimal record that the request was made and completed, and any records we must keep by law, such as invoices.

8. If you’re not satisfied

Reply to our response and a manager will review it. You can also complain to the authority in your jurisdiction, such as the California Privacy Protection Agency or the UAE Data Office.

9. Marketing preferences

You don’t need a formal request to stop marketing messages. Reply “STOP” to any SMS or WhatsApp message, use the unsubscribe link in any email, or tell any member of our team. We stop within a few days and keep only the record needed to make sure you aren’t contacted again.

10. Requests from merchants about their account

Account owners can export most of their data themselves from inside the app, including products, customers, suppliers and sales. If you need something the export doesn’t cover, such as a copy of the account details we hold for billing, send a data request from the account owner’s verified contact details and we’ll provide it.