Privacy Policy

1. Who we are

RetailPOS Studio provides a hosted point-of-sale system for general retail stores, gift shops and mobile-phone and electronics shops in the United States, the United Arab Emirates and Pakistan. This policy explains what personal data we handle, why, and what rights you have.

It covers two different situations:

• This website (retailposstudio.com and its localized pages), where we are responsible for the data you send us.
• The RetailPOS Studio app, where you, the merchant, decide what customer, staff and supplier data to record. For that data you are the controller (or “business” under California law) and we act as your processor (or “service provider”).

To contact us about privacy, use the Show email button on our Contact page and choose the privacy address, or send the contact form with “Privacy” in the message.

2. What we collect on this website

Information you give us. When you send a demo, contact, partner or switching form, we collect the details you type: your name, phone or WhatsApp number, business name, the market you trade in (USA, UAE or Pakistan), the plan or topic you’re interested in, and your message.

Attribution data. If you arrived from an advertisement or a campaign link, our first-party script stores the campaign parameters in the link (such as utm_source, utm_medium, utm_campaign, gclid, fbclid or msclkid) and sends them with your form so we know which campaign brought you. These are stored on your device for up to 90 days.

Security data. Our forms are protected by Cloudflare Turnstile, which checks whether a submission comes from a person rather than a bot. Turnstile processes technical signals such as your IP address and browser characteristics. We also use a hidden honeypot field and a minimum fill time to block spam.

Preferences. The site remembers your theme, colour palette, country and accessibility settings on your own device so pages appear the way you chose. These never leave your browser.

Analytics. We do not load analytics or advertising scripts unless you accept them in the consent banner. If analytics are added later, they will be listed in the Cookie Policy and will stay off until you agree.

We do not knowingly collect data from children under 16. The website is aimed at business owners.

3. How we use it and our legal basis

We use form data to answer your enquiry, book your demo, set up your trial, prepare a migration and follow up about the plan you asked about. We use attribution data to understand which campaigns work, and security data to keep the forms free of abuse.

Where a legal basis is required, we rely on:

• Steps you asked us to take before a contract (answering your enquiry, setting up your trial).
• Our legitimate interest in running and securing our business, measured against your rights.
• Your consent for any optional analytics or marketing scripts, which you can withdraw at any time from the cookie settings link in the footer.
• Legal obligations, for example keeping billing records.

4. Who receives your data

We share personal data only with the services that help us run RetailPOS Studio:

• Cloudflare — hosting of this website, the form function and Turnstile spam protection.
• Our CRM (GoHighLevel) — stores your enquiry so our team can reply and follow up.
• Our internal team chat — receives a notification that a new enquiry arrived, so someone answers quickly.
• Payment processors and accounting tools — only once you become a paying customer.

We do not sell personal data, and we do not share it for cross-context behavioral advertising. Under California law, that means there is nothing to opt out of; you can still contact us to confirm.

5. Data inside the POS app

When you use RetailPOS Studio, you may record customer names, phone numbers, reward-point balances, purchase history, warranty and repair details, staff accounts and supplier ledgers. You decide what to record and why; you are responsible for having a lawful basis and for telling your own customers how you use their data.

We process that data only to provide the service: storing it, backing it up, showing it to the users you authorize, printing it on receipts and invoices, and generating your online store from your catalogue. We do not use your customers’ data for our own marketing. When you cancel, you can export your data during the window described in our Refund and Cancellation Policy, after which it is deleted from live systems and then from backups as they expire.

6. Where data is stored

The app runs on servers we operate. This website and its form function run on Cloudflare’s global network. Your data may therefore be processed outside your own country. Where the law requires it, we take reasonable steps to make sure data transferred abroad receives an equivalent level of protection.

7. How long we keep it

• Enquiries that don’t become customers: up to 24 months after the last contact, then deleted or anonymized.
• Customer account and billing records: for as long as the account is active and afterwards for as long as tax and accounting law requires.
• Attribution data stored in your browser: up to 90 days.
• Merchant data in the app: until you delete it or close your account, plus the export window and the backup cycle.

8. Your rights

United States (California and other state laws). You may ask to know what personal information we hold about you, to access a copy, to correct it, and to delete it. You may also ask us to limit the use of sensitive information (we don’t collect any through this site). We will not treat you differently for using these rights. You may use an authorized agent. We respond within 45 days, and may extend once by a further 45 days where needed, telling you why.

United Arab Emirates (Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data). You may ask for information about the processing, access to your data, correction, erasure, restriction of processing, and you may object to processing, including for direct marketing. You may also withdraw consent at any time.

Pakistan (Prevention of Electronic Crimes Act 2016 and applicable rules). We protect your data against unauthorized access and disclosure and will act on reasonable requests to see, correct or delete it. If new data-protection legislation comes into force, we will update this policy and honor the rights it creates.

See our Data Requests page for how to make a request and how we verify it.

9. Security

We use encrypted connections (HTTPS) for this website and the app, access controls for our team, spam protection on forms and regular backups. No system is perfectly secure; if we become aware of a breach that affects your data, we will notify you and the authorities where the law requires.

10. Marketing messages

If you send a form, we may contact you about your enquiry by phone, WhatsApp, SMS or email. We only send ongoing marketing where the law allows it, and every message tells you how to stop receiving them. Replying “STOP” or asking our team is always enough.

11. Changes to this policy

We will update this page when our practices change and change the “last updated” date at the top. If a change materially affects how we use data you already gave us, we will tell you before it takes effect.

12. Contact and complaints

Use the Show email button on our Contact page for the privacy address, or send the contact form. If you are not satisfied with our answer, you may complain to the authority in your jurisdiction, such as the California Privacy Protection Agency or the UAE Data Office.