This page explains the privacy rights you have over the personal data BoutiquePOS (legal entity details to be published) holds about you, and how to use them. The form below this text sends your request straight to the team that handles privacy. For the full picture of what we collect and why, read our Privacy Policy.
Who can use this page?
Anyone whose personal data we might hold can use it, including:
- people who sent a contact or demo form on getboutiquepos.com;
- merchants and staff with a BoutiquePOS account;
- people who received an email or message from us.
Are you a shopper at a boutique that uses BoutiquePOS? Then the boutique controls your customer record, loyalty points and purchase history, and we process that data on its behalf. Please ask the boutique first. If you cannot reach them, send us your request anyway with the shop’s name, and we will pass it on and support them in answering you.
What can I ask for?
Whatever country you are in, we offer the same core rights:
- Access: a copy of the personal data we hold about you and how we use it.
- Correction: fix data that is wrong or incomplete.
- Deletion: remove your data, unless we must keep it by law (for example billing and tax records).
- Export (portability): your data in a common, machine-readable format such as CSV or JSON.
- Stop marketing: no more marketing emails or messages from us. You can also use the unsubscribe link in any marketing email.
- Object or restrict: ask us to stop or limit a particular use of your data.
- Withdraw consent: where we rely on your consent, take it back at any time.
Merchants can export most of their business data themselves from inside the app, at any time, without asking us.
What rights do I have in the United States?
If you live in California, the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA) gives you the right to know what personal information we collect, use and disclose; to access, correct and delete it; and to opt out of its sale or sharing for cross-context behavioral advertising. You also have the right to limit the use of sensitive personal information, which we do not use for any purpose that would trigger this right.
We do not sell your personal information and we do not share it for cross-context behavioral advertising.
Residents of other states with consumer privacy laws, including Virginia, Colorado, Connecticut, Utah, Texas and Oregon, have similar rights. If we refuse your request, you can appeal by replying to our answer, and we will review the decision and explain the result. If you are still unhappy, you can contact your state attorney general.
We will not discriminate against you, charge you more or give you a worse service for using these rights.
You may use an authorized agent to make a request for you. We will ask the agent for signed permission from you and may still need to verify your identity directly.
What rights do I have in the United Arab Emirates?
Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL) gives you the right to:
- get information about how your data is processed, including who receives it;
- access and receive a copy of your data;
- have inaccurate data corrected;
- have your data deleted when it is no longer needed or was processed unlawfully;
- restrict or stop processing in certain cases;
- object to processing, including for direct marketing and automated decisions;
- have your data transferred to another controller in a structured, machine-readable form.
You may also complain to the UAE Data Office. Rights under UAE consumer protection law are not affected.
What rights do I have in Pakistan?
The Prevention of Electronic Crimes Act 2016 protects against unauthorized access to information systems and misuse of data. A dedicated personal data protection law for Pakistan is pending and not yet in force.
We do not wait for it. Visitors, merchants and staff in Pakistan get the same rights we offer everyone: access, correction, deletion, export, stopping marketing and objection. We will update this page when the new law takes effect.
What rights do I have in the EU or UK?
If the GDPR or UK GDPR applies to you, you have the rights to access, rectification, erasure, restriction of processing, data portability, objection (including to direct marketing) and to withdraw consent at any time. You can also complain to the data protection authority in the country where you live or work.
How do you check it is really me?
We must make sure we only hand data to the right person. We will match what you tell us against what we hold, usually your name and the email address or phone number you used with us. For an account holder, we may ask you to confirm the request from inside your account or from the login email address.
We ask only for what we need to verify you, and we use it only for that. We will never ask for your password or your full card number. If we cannot verify you, we will explain why and what else you can send.
How long will it take?
- Confirmation: within one business day of receiving your request.
- Answer: within 30 days for most requests. US state laws allow up to 45 days, and the GDPR and PDPL allow an extension for complex requests. If we need more time, we will tell you why and when to expect an answer.
- Cost: free. We may refuse or charge a reasonable fee only if requests are clearly unfounded or excessive, as the law allows, and we will explain if so.
Is there anything you cannot delete?
Sometimes, yes. We may need to keep some data to meet tax and accounting rules, resolve a dispute, prevent fraud or comply with a legal order. If so, we will tell you what we are keeping and why, and delete the rest. Data in daily backups is overwritten as the backups rotate and is not used in the meantime.
Deleting a merchant account also deletes the shop’s products, sales and customer records, so we will check with the account owner before we do it.
Is there another way to reach the privacy team?
Yes. Use the Show email button on our contact page to see the privacy address. The form below is usually faster because it reaches the right person directly and records your request with the date.
Make your request
Fill in the form below to send your request. Tell us your name, how you have dealt with us (for example a demo form, an account or a shop that uses BoutiquePOS), the email or phone number you used, and what you would like us to do. The more detail you give, the faster we can find your records and answer. Your request goes to our CRM so we can track it to completion, and a short notice goes to our team so someone picks it up promptly.
