Privacy Policy
Last updated 17 October 2026
This policy explains what personal data [COMPANY_LEGAL_NAME] (“ZeylonPOS”, “we”) collects when you visit zeylonpos.com or use the ZeylonPOS point-of-sale platform, why we collect it, and the choices you have.
1. Who we are
ZeylonPOS is a point-of-sale and business-operations platform operated by [COMPANY_LEGAL_NAME], [REGISTERED_ADDRESS]. For any privacy question, write to hello@zeylonpos.com.
2. Two different roles
It matters which data we are talking about:
- Data we control. Your account details, billing records, support messages and website analytics. We decide how these are used, and this policy governs them.
- Data you control. The business records you enter into the platform — your products, customers, sales, invoices and staff accounts. You remain responsible for that content; we process it only to provide the service to you, on your instructions.
3. What we collect
| Category | Examples | Why |
|---|---|---|
| Account | Name, email, password (hashed), business name, country, phone if you give one | To create and secure your account and contact you about the service |
| Subscription | Plan, invoices, payment status, payment-gateway reference | To bill you and keep billing records |
| Enquiries | Name, email, phone, message you send through our contact form | To answer you |
| Technical | IP address, browser and device type, pages viewed, timestamps | Security, abuse prevention and understanding how the site is used |
| Your business records | Whatever you enter into the platform | To provide the service — see section 2 |
We do not ask for, and ask that you do not send us, payment card numbers by email or through the contact form.
4. Payments
We do not store full card details. Card payments are handled by our payment gateway, which receives the card data directly and returns only a transaction reference and status to us. The gateway processes that data under its own privacy terms.
5. Cookies and analytics
The marketing site stores your language and currency choice in your browser so the page remembers them. That data stays on your device.
We use Microsoft Clarity to understand how visitors move through the marketing site. Clarity sets cookies and records aggregated interaction data (clicks, scrolls, page paths) and may record session replays with form fields masked. If you prefer not to be measured, enable “Do Not Track” in your browser or block the clarity.ms domain — the site works exactly the same either way.
The application itself uses only the storage it needs to keep you signed in and remember your interface preferences.
6. Why we are allowed to process it
- To perform our contract with you — running your account, providing the platform, billing.
- Our legitimate interests — keeping the service secure, preventing abuse, improving the product.
- Your consent — where you opted in, for example to product emails. You may withdraw it at any time.
- Legal obligation — tax, accounting and other records we must keep.
7. Who we share it with
We do not sell personal data. We share it only with service providers who help us run ZeylonPOS, and only as far as needed:
- Cloud hosting and database infrastructure
- Our payment gateway, for subscription payments
- Email delivery, for transactional messages such as verification and invoices
- Microsoft Clarity, for marketing-site analytics
We may also disclose data where the law requires it, or to protect our rights, users or the security of the service.
8. International transfers
Our infrastructure providers may process data outside [JURISDICTION]. Where that happens we rely on the provider's contractual safeguards for international transfers.
9. How long we keep it
Account and business data is kept while your subscription is active. After it ends we keep it for a limited wind-down period so you can export or reactivate, after which it is deleted or anonymised. Billing records are kept as long as tax and accounting law requires. Contact-form enquiries are kept while we need them to answer you and for a reasonable period afterwards.
10. How we protect it
Traffic is encrypted with HTTPS. Passwords are stored only as salted hashes. Access to production systems is restricted, each business's data is separated by tenant, and permissions inside the platform are controlled by role. No system is perfectly secure, but we take these measures seriously and review them.
11. Your rights
Subject to the law that applies to you, you may ask us to give you a copy of your personal data, correct it, delete it, restrict or object to our use of it, or send it to another provider. Email hello@zeylonpos.com and we will respond within 30 days. If you are an employee of a business using ZeylonPOS, please contact that business first — they control that data.
12. Children
ZeylonPOS is a business tool and is not directed at children. We do not knowingly collect data from anyone under 16. If you believe we have, tell us and we will delete it.
13. Changes
If we change this policy we will update the date above, and for significant changes we will notify account holders by email or in the application.
14. Contact
[COMPANY_LEGAL_NAME]
[REGISTERED_ADDRESS]
hello@zeylonpos.com