POLICYLast updated

Privacy policy

This policy explains what personal data we collect through this website and the hosted point-of-sale service, why, how long we keep it, and how to exercise your rights.

01 Who we are

SmartPOS Hub (trading as Hardware Store POS) operates gethardwarestorepos.com and the hosted Hardware Store POS service. Contact us through the contact page or the privacy email revealed on the data requests page.

02 What we collect

  • Forms: name, store name, email, phone/WhatsApp, country, item-count range, current system and your message.
  • Campaign data: UTM parameters and click identifiers (gclid, fbclid, msclkid) from the link you arrived by, sent with forms.
  • Analytics (only with consent): pages viewed, device type and approximate location via Google Analytics 4.
  • Preferences: theme, colour, language, country and accessibility choices stored in your browser.
  • POS service: the business, product, customer, supplier and sales data you enter; you are the controller of your customers' data and we process it on your behalf.

03 How we use it

To reply to enquiries and run demos; to provide, secure and support the POS service; to bill subscriptions; to improve the website with consented analytics. We do not sell personal data and do not use it for third-party advertising.

04 Who we share it with

  • Our CRM provider (GoHighLevel) to manage enquiries.
  • A team notification channel (Discord) receiving a summary of new enquiries without contact details.
  • Cloudflare (hosting, security, Turnstile spam protection).
  • Google (analytics, only after consent).
  • Payment and hosting providers for the POS service.

Each processes data only to provide its service to us.

05 How long we keep it

Enquiries: up to 24 months after last contact. Customer account data: for the life of the subscription and up to 90 days after closure so you can export it, then deleted, except records we must keep for tax and accounting.

06 Your rights

USA (incl. California CCPA/CPRA): right to know, delete, correct and opt out of sale/sharing (we do not sell or share for cross-context advertising). UAE (Federal Decree-Law 45/2021, PDPL): access, correction, erasure, restriction and objection. Pakistan: we apply the same access and deletion rights. Make a request on the data requests page; we respond within 30 days.

07 Security

HTTPS everywhere, access limited to named staff, daily backups. See security and data.

08 Cookies and storage

See the cookie policy for the exact items stored and how consent works.

09 Children

The service is for businesses and not directed at children under 16.

10 Changes

We update this page when practices change and show the date at the top.