Legal · document 1 of 8
Privacy policy
We collect what we need to answer you and run the software, we never sell personal data, and you can ask to see, correct or delete it.
Last updated ·
Who we are
This policy covers getbottleshoppos.com and the Bottle Shop POS software (“we”, “us”). Bottle Shop POS is an edition of the SmartPOS family of point-of-sale software. For privacy questions, use the data request page or the contact page.
What this policy covers
- Visitors to this website.
- Leads who send a form (contact, demo, partner, newsletter).
- Customers (store owners) who use the software, and their staff users.
Store owners are responsible for the personal data of their customers that they enter into the software (for example loyalty members). For that data we act as a service provider (processor) on the store’s instructions.
What we collect
| Data | When | Why |
|---|---|---|
| Name, store name, email, phone/WhatsApp, country, message | You send a form | To reply, arrange demos and follow up on your request |
| Campaign parameters (utm_*, gclid, fbclid, msclkid) | You arrive from a link or ad | To know which campaign brought you; attached to forms you send |
| Preferences (country, language, theme, accessibility, consent) | You use the site | To remember your choices on this device |
| Analytics data (pages viewed, device, approximate location) | Only if you accept analytics | To improve the site |
| Account and store data | You use the software | To provide the service you signed up for |
We do not knowingly collect data from anyone under 21 through this site.
How we use it
- To answer enquiries and provide demos and support.
- To provide, secure and improve the software.
- To send the newsletter if you subscribed (unsubscribe at any time).
- To meet legal obligations, such as tax records.
We do not sell personal data, and we do not share it for cross-context behavioural advertising.
Who we share it with
- CRM and messaging: form submissions go to our customer relationship management system (GoHighLevel) and a notification goes to our team’s chat (Discord).
- Spam protection: Cloudflare Turnstile checks that forms are sent by people.
- Hosting: this website is hosted on Cloudflare; the software runs on servers we operate.
- Analytics: Google Analytics 4, only after you accept analytics cookies.
- Authorities, where the law requires it.
Retention
- Leads who do not become customers: up to 24 months after the last contact, then deleted.
- Customer account data: for the life of the account and up to 90 days after cancellation, so you can export it, then deleted, unless tax law requires us to keep invoices longer.
- Backups roll over on a fixed schedule and expire.
Your rights
Depending on where you live, you may have the right to access, correct, delete or export your personal data, to object to or restrict some uses, and to withdraw consent.
- California (CCPA/CPRA): the right to know, delete, correct and opt out of sale or sharing. We do not sell or share personal data. We will not discriminate against you for using your rights.
- Other US states with privacy laws: similar rights apply where those laws cover us.
- United Arab Emirates (PDPL): rights of access, correction, erasure, restriction and objection, subject to the law’s conditions.
Send requests through the data request page. We answer within the time the applicable law allows (usually 30 to 45 days) and may ask you to confirm your identity.
Security
We use encrypted connections (HTTPS), access controls and backups. No system is perfectly secure; see Security and data for details.
International transfers
Data may be processed in countries other than yours, including by the service providers above. We rely on their contractual commitments to protect it.
Changes
We will update this page when our practices change and show the date at the top.
