Privacy Policy

1. Introduction

Startup Tech Consultancy LTD ("we", "us", or "our"), a company registered in England and Wales, operates the StartPOS platform — an AI-powered Point of Sale and Business Intelligence system. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services.

By accessing or using StartPOS, you agree to the collection and use of information in accordance with this policy. If you do not agree, please discontinue use of our services.

2. Data Controller

The data controller responsible for your personal data is:

3. Information We Collect

We collect the following categories of information:

• check_circleAccount Information: Name, email address, phone number, and business details provided during registration.
• check_circleBusiness Data: Sales transactions, inventory records, customer data, supplier information, and financial records you input into the system.
• check_circleUsage Data: Log files, IP addresses, browser type, pages visited, time and date of visits, and other diagnostic data.
• check_circleDevice Information: Device identifiers, operating system, and mobile network information.
• check_circleAI Interaction Data: Queries submitted to the AI chat assistant, for the purpose of generating business intelligence responses.

4. How We Use Your Information

We use the collected information for the following purposes:

• arrow_rightTo provide, operate, and maintain the StartPOS platform and its features.
• arrow_rightTo generate AI-powered business analytics, forecasts, and insights specific to your business.
• arrow_rightTo process ZATCA-compliant e-invoices and comply with applicable tax regulations in the Kingdom of Saudi Arabia.
• arrow_rightTo send administrative communications, product updates, and support messages.
• arrow_rightTo detect, prevent, and address technical issues, fraud, or security incidents.
• arrow_rightTo improve and personalise our services based on usage patterns.
• arrow_rightTo comply with legal obligations under UK, EU, and KSA law.

5. Legal Basis for Processing (UK/EU)

Under the UK GDPR and Data Protection Act 2018, we process your data on the following legal bases:

• gavelContract performance: Processing necessary to deliver services you have subscribed to.
• gavelLegitimate interests: Improving our platform, ensuring security, and preventing fraud.
• gavelLegal obligation: Compliance with applicable laws and regulations.
• gavelConsent: Where you have explicitly consented, such as for marketing communications.

6. Data Sharing and Disclosure

We do not sell your personal data. We may share data with:

• shareService Providers: Trusted third parties who assist in operating our platform (cloud hosting, analytics, payment processing), bound by confidentiality agreements.
• shareAI Services: Anonymised or pseudonymised query data may be processed by AI providers (e.g. Anthropic, OpenAI) solely for generating business intelligence responses.
• shareLegal Authorities: Where required by law, court order, or government authority.
• shareBusiness Transfers: In the event of a merger, acquisition, or asset sale, your data may be transferred with appropriate notice.

7. Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. Business transaction data may be retained for up to 7 years to comply with tax and accounting regulations. You may request deletion of your data subject to legal retention obligations.

8. Your Rights

Under applicable data protection laws, you have the following rights:

To exercise any of these rights, contact us at . We will respond within 30 days.

9. Data Security

We implement industry-standard security measures including TLS encryption in transit, AES-256 encryption at rest, role-based access controls, regular security audits, and secure data centres. However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security but strive to protect your data using commercially acceptable means.

10. Cookies

We use cookies and similar tracking technologies to enhance your experience. These include:

• cookieEssential cookies: Required for core platform functionality and session management.
• cookieAnalytics cookies: Help us understand how users interact with StartPOS (e.g. Google Analytics).
• cookiePreference cookies: Remember your settings and personalisation choices.

You can control cookies through your browser settings. Disabling essential cookies may affect platform functionality.

11. International Data Transfers

Your data may be transferred to and processed in countries outside the UK and EEA, including the Kingdom of Saudi Arabia, where our primary customers operate. We ensure such transfers comply with applicable data protection laws through appropriate safeguards such as Standard Contractual Clauses (SCCs) or adequacy decisions.

12. Children's Privacy

StartPOS is a business platform intended for users aged 18 and over. We do not knowingly collect personal data from children under 18. If we become aware that a child has provided us with personal data, we will take steps to delete such information.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by email or a prominent notice on our platform. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of StartPOS after changes constitutes acceptance of the updated policy.