StoreRailStoreRail
LEGAL

Privacy Policy

How StoreRail handles information collected through this website and the early access programme.

Last updated: [Date] Effective: [Date]
Draft for legal review. Bracketed items are placeholders. Confirm entity details, applicable law and retention periods before publishing.

1. Scope

This policy covers personal information StoreRail collects when you visit this website, read our documentation or request early access.

It does not cover order data handled by StoreRail Gateway inside a restaurant. Gateway runs on the restaurant’s own network, and that processing is governed by the agreement between StoreRail and each customer.

2. Who we are

StoreRail is operated by [Legal entity name], registered at [Registered address]. For this policy we are the controller of the information described below.

3. Information we collect

Source Information
Early access formWork email, company, number of locations and the products you’re interested in
Emails and callsYour name, role and anything you share about your integration requirements
Website requestsIP address, browser type, pages requested and timestamps in standard server logs

We do not ask for payment details, and we do not collect restaurant customers’ order data through this website.

4. How we use it

  • Reply to your early access request and assess fit for an early deployment
  • Discuss integration requirements with your team
  • Send product updates you have asked for — you can opt out at any time
  • Keep the website secure and working

Our legal basis is [consent / legitimate interest — confirm under applicable law].

5. Cookies and local storage

This website stores your light or dark theme choice in your browser. It is not used to identify you. [List any analytics tools before publishing, or state that none are used.]

6. Sharing

We do not sell personal information. We share it only with service providers that host this website or our email, under contracts that limit their use of it, or when the law requires.

Providers: [Hosting provider], [Email provider].

7. Where data is stored

Website and early access data is stored in [Region]. If it is transferred elsewhere, we apply safeguards required by [applicable law, e.g. the Saudi Personal Data Protection Law].

8. Retention

We keep early access requests for [period] after our last contact with you, and server logs for [period]. After that we delete or anonymise them.

9. Your rights

You can ask to see, correct or delete your information, or withdraw consent. Email us and we’ll reply within [period]. You may also complain to [supervisory authority].

10. Security

We use encrypted connections and limit access to people who need it. No system is completely secure; if a breach affects you, we will notify you as the law requires.

11. Changes

We’ll update the date at the top when this policy changes, and tell early access contacts about significant changes by email.

12. Contact

Questions about this policy or your information:

Email: [privacy@your-domain] Post: [Legal entity name], [Registered address]