Privacy Statement for Sally POS

Effective Date: December 2024

At Sally POS, we respect your privacy and are committed to protecting your personal data. This Privacy Statement explains how we collect, use, and protect your personal information in accordance with the General Data Protection Regulation (GDPR).

1. Who We Are

Sally POS is operated by Sally POS Ltd based in Cyprus. You can contact us at:

• Company Name: Sally POS Ltd
• Email Address: team@sally.app

2. Information We Collect

We may collect the following types of personal data when you use our services or interact with our website:

• Contact Information: Name, email address, phone number.
• Account Information: Username, password, profile data.
• Usage Data: Information about how you interact with our website or app, including IP addresses, browser type, and device information.
• Communication Data: Any correspondence or feedback provided through customer service or support.

3. How We Use Your Information

We use the personal data we collect for the following purposes:

• To provide and maintain our services: Including managing your account and processing transactions.
• To improve our services: Enhancing the functionality and user experience of Sally POS.
• To communicate with you: Responding to customer support requests and sending you important updates about our services.
• To comply with legal obligations: Such as legal and regulatory compliance, fraud prevention, and reporting.

4. Legal Basis for Processing Personal Data

Under the GDPR, we rely on the following legal bases to process your personal data:

• Consent: Where you have provided consent for the collection and use of your personal data (e.g., when signing up for an account).
• Contractual Necessity: Processing your data as necessary to fulfill our contract with you (e.g., providing access to the app or processing payments).
• Legal Obligation: Processing required to comply with our legal obligations (e.g., tax or regulatory requirements).
• Legitimate Interests: Where we have a legitimate interest in processing your data (e.g., improving our services and conducting marketing activities).

5. Data Sharing and Disclosure

We may share your personal data in the following circumstances:

• With Service Providers: We may share your data with third-party service providers who help us operate Sally POS (e.g., hosting providers, payment processors, analytics services).
• To Comply with Legal Requirements: We may disclose your personal data if required by law or to protect our rights, safety, or property.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your personal data may be transferred as part of the transaction.

6. International Data Transfers

If we transfer your personal data outside the European Economic Area (EEA), we ensure that appropriate safeguards are in place, such as Standard Contractual Clauses or Privacy Shield certification (where applicable).

7. Data Retention

We will retain your personal data for as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, or reporting requirements. Once it is no longer required, we will securely delete or anonymize your data.

8. Your Data Protection Rights

Under the GDPR, you have the following rights regarding your personal data:

• Right to Access: You can request access to the personal data we hold about you.
• Right to Rectification: You can request corrections to any inaccurate or incomplete data.
• Right to Erasure: You can request the deletion of your personal data, subject to certain conditions.
• Right to Restrict Processing: You can request the restriction of processing of your personal data in certain circumstances.
• Right to Data Portability: You can request to receive your personal data in a structured, commonly used format, or to transmit it to another service provider.
• Right to Object: You can object to the processing of your personal data for direct marketing purposes or on grounds related to your particular situation.
• Right to Withdraw Consent: If you have given consent to process your data, you have the right to withdraw it at any time.

To exercise any of these rights, please contact us at team@sally.app.

9. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience on Sally POS, analyze usage, and personalize content. For more details, please refer to our Cookie Policy.

10. Security

We use appropriate technical and organizational measures to safeguard your personal data against unauthorized access, disclosure, alteration, or destruction. However, no method of transmission over the internet or electronic storage is 100% secure, so we cannot guarantee absolute security.

11. Changes to This Privacy Statement

We may update this Privacy Statement from time to time. We will notify you of any significant changes by posting the updated Privacy Statement on this page and updating the “Effective Date” at the top of the document.

12. Contact Us

If you have any questions or concerns about this Privacy Statement or how we handle your personal data, please contact us at:

• Email: team@sally.app