Privacy Policy

Who this policy covers

This policy explains how GetJewelryPOS (“we”, “us”) handles personal data in two different situations, because our role is different in each:

1. Visitors and leads on this website (getjewelrypos.com). When you browse the site, fill in a demo or contact form, or ask us a question, we decide what is collected and why. For this data we are the controller (in US terms, the “business”).
2. Merchant data inside the GetJewelryPOS software. When a jewelry store uses our hosted POS, it enters its own customers, sales, repairs, layaway plans and staff records. For that data the store (the merchant) is the controller and we are the processor (in US terms, the “service provider”). We handle it only to run the service for the merchant.

If you are a shopper who bought from, or left a repair with, a jewelry store that uses our software, please read the section “If you are a customer of a store that uses GetJewelryPOS” below.

GetJewelryPOS is the trading name we use while our legal entity details are being finalized. The registered legal name and address will be added to this page when they are confirmed.

What we collect on this website

We keep website data collection small on purpose. Here is the complete list.

Information you give us in a form

When you request a demo, a switching call, a website consult or send a message, the form asks for:

• your name
• your business name
• phone or WhatsApp number
• email address
• country
• store type (for example, single store, multi-store, bridal, gold and bullion)
• your message

The form also sends, in the background:

• campaign and click identifiers, if you arrived from a link that carried them: UTM tags (utm_source, utm_medium, utm_campaign, utm_term, utm_content) and click IDs from ad platforms (gclid from Google, fbclid from Meta, msclkid from Microsoft);
• the page address (URL) where you submitted the form.

These background fields tell us which page or campaign brought you to us. They are sent only when you press submit.

Bot protection

Our forms use Cloudflare Turnstile to check that a real person is submitting. To do this, Cloudflare processes your IP address and technical signals from your browser (such as browser type and how the page was loaded). Cloudflare uses this to tell people from bots. We do not receive a profile of you from it; we only receive a pass or fail result.

Hosting and security logs

The website is hosted on Cloudflare. Like any web host, Cloudflare records basic request data, such as IP address, the page requested, date and time, browser user agent and approximate location derived from the IP address. These logs are used to deliver pages, defend against attacks and fix errors.

Browser storage on your device

The site stores a few small settings in your own browser, such as your consent choice, light or dark theme, country for prices, and accessibility settings. These stay on your device. One item, the attribution record (sf-attr-v1), holds the campaign tags and click IDs described above for up to 90 days, and is read only when you submit a form. Full details are in our Cookie Policy.

Analytics and advertising tags

No analytics or advertising tags are installed on this website today. The consent banner has “Analytics” and “Marketing” categories. They are switched off until you turn them on. If we add a tag in the future, it will only load after you have given consent for that category, and we will update this policy and the Cookie Policy first.

What we do not collect

We do not ask for card numbers, bank details, identity documents or sensitive personal data through this website. Please do not send them in the message box.

How we use website data, and our legal reasons

What we do	Data used	Legal basis (GDPR / UAE PDPL wording)
Reply to your request, book a demo or call, send the information you asked for	Form fields	Steps you asked us to take before a contract; your consent where the law requires it
Route your enquiry to the right team for your country	Country, store type	Our legitimate interest in answering you quickly
Understand which pages and campaigns bring enquiries	UTM tags, click IDs, page URL	Our legitimate interest in measuring our marketing
Keep forms free of spam and abuse	Turnstile signals, logs	Our legitimate interest in security
Keep the website running and secure	Hosting logs	Our legitimate interest in security and service delivery
Follow-up messages about GetJewelryPOS	Name, email, phone/WhatsApp	Your consent or our legitimate interest, depending on your country; you can opt out at any time
Meet legal duties and defend legal claims	Records we need to keep	Legal obligation; legitimate interest

We do not use website data to make automated decisions that have legal or similarly significant effects on you.

Where website data goes

When you submit a form, our website sends your details to two places:

• Our CRM (GoHighLevel). Your enquiry is saved as a contact with tags and a note so our sales and support team can follow up by phone, WhatsApp or email.
• An internal Discord notification. A short alert with the enquiry details is posted to a private staff channel so the team sees new requests quickly.

Other service providers we rely on:

• Cloudflare for hosting, security, logs and the Turnstile bot check.

These providers act on our instructions. We do not sell your personal information, and we do not share it for cross-context behavioral advertising, as those terms are defined in California law. We may disclose data if the law requires it, to protect our rights or the safety of others, or as part of a merger or sale of the business, in which case this policy would continue to protect it.

International transfers

Our providers operate servers in several countries, including the United States. This means data from visitors in the UAE, Pakistan or the EU may be processed outside their own country. Where the law requires it, we rely on suitable safeguards, such as standard contractual clauses for EU data and the transfer conditions in the UAE PDPL, and we choose providers who commit to protecting data.

How long we keep website data

• Form enquiries in our CRM: for as long as we are in conversation with you, and then up to 24 months after our last contact, unless you become a customer (then your account terms apply) or ask us to delete it sooner.
• Discord alerts: reviewed and cleared periodically; we do not use Discord as a long-term record.
• Attribution record on your device (sf-attr-v1): up to 90 days, and you can clear it any time.
• Cloudflare logs and Turnstile data: kept by Cloudflare for the short periods set by its own service terms.

Data inside the POS (merchant data)

When a jewelry store subscribes to GetJewelryPOS, it may store information about its customers (names, phone numbers, emails, ring sizes, birthdays, purchase history, reward points, repair job sheets, layaway balances, certificate details), its staff (user accounts, roles, activity logs) and its business (stock, prices, gold rates it enters, invoices).

For this data:

• The merchant is the controller. The store decides what it collects from its customers, why, and for how long. The store is responsible for giving its customers a privacy notice and for having a lawful reason to use their data.
• We are the processor. We store and process merchant data only to provide, secure, back up and support the service, and on the merchant’s documented instructions (the subscription terms and the settings it chooses).
• We do not sell merchant data or use a store’s customer list for our own marketing.
• Our staff access it only when needed, for example when the merchant asks for support, to fix a fault, or to meet a legal duty.
• We use sub-processors (such as hosting and email or SMS delivery providers) to run the service and require them to protect the data.
• We help merchants answer their customers’ requests for access, correction or deletion, through the tools in the software and through support.
• Breaches: if we become aware of a security incident affecting merchant data, we will inform the affected merchant without undue delay so it can meet its own reporting duties.
• After cancellation, the merchant can export its data for 30 days. After that, we delete it from the live service, and backups roll off on their normal cycle.

Card payments are taken by the merchant’s own card processor or terminal. We do not process or store full card numbers.

If you are a customer of a store that uses GetJewelryPOS

If a jewelry store holds your details (for example on a receipt, a repair ticket or a layaway plan), please contact that store first. It controls your data and can access, correct or delete it. If you cannot reach the store, you can tell us through the data request form. We will pass your request to the store and help it respond, but we cannot override the store’s decisions about its own records.

Your rights

Your rights depend on where you live. In plain language:

United States

• California residents (CCPA as amended by the CPRA) can ask to know what personal information we collect, use and disclose; to get a copy; to correct it; to delete it; and to opt out of sale or sharing (we do neither). You can also limit use of sensitive personal information (we do not collect any through this website). We will not treat you differently for using these rights. You may use an authorized agent.
• Other states with consumer privacy laws (for example Virginia, Colorado, Connecticut, Texas and others) give similar rights to access, correct, delete and get a copy of your data, and to opt out of targeted advertising, sale and certain profiling. You may appeal if we refuse a request; we will explain how in our reply.
• Global Privacy Control: if your browser sends a GPC signal, we treat it as an opt-out of any sale or sharing, and the Marketing category stays off.

United Arab Emirates

Under Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL), you can ask for information about how we process your data, get access to it, correct it, ask us to delete it, restrict or object to processing, withdraw consent, and ask for your data to be moved to another provider. You may also complain to the UAE Data Office.

Pakistan

Pakistan does not yet have a single, comprehensive personal data protection law in force. The Prevention of Electronic Crimes Act 2016 (PECA) makes it an offence to access, copy or misuse personal information and information systems without authorization, and we protect data to that standard. A personal data protection bill has been proposed; if it becomes law, we will update this policy to follow it. In the meantime, we offer Pakistan visitors the same access, correction and deletion rights as everyone else.

European Union and European Economic Area (GDPR)

Our site is aimed at the USA, UAE and Pakistan, but if you visit from the EU, the GDPR gives you the right to access, correct, delete, restrict, object to processing (including direct marketing at any time), port your data and withdraw consent. You can complain to your local data protection authority.

How to use your rights

Use the data request form, or the privacy contact on our contact page. That page explains how we verify requests and how long we take.

Marketing messages

If we send you follow-ups about GetJewelryPOS by email, WhatsApp or SMS, you can opt out at any time by replying “STOP” where offered, using the unsubscribe link, or telling us through the contact page. Opting out of marketing does not stop service messages if you become a customer.

Children

This website and the GetJewelryPOS service are for businesses. They are not directed at children, and we do not knowingly collect personal information from children under 13 (as covered by the US Children’s Online Privacy Protection Act, COPPA) or from anyone under 16 in the EU. If you believe a child has sent us information, contact us and we will delete it.

Security

We use encrypted connections (HTTPS) across the website and the service, restrict staff access by role, protect forms against bots, and keep secret keys out of the website code. No system is perfectly secure, so we also keep this policy honest about what we hold: on the website side, only what you send us.

Changes to this policy

We will update this page when our practices change, for example if we add an analytics tool. The date at the top shows the latest version. If a change materially affects how we use data you already gave us, we will tell you before it applies.

Contact us

For privacy questions, use the privacy contact on our contact page (press the Show email button) or the data request form.

GetJewelryPOS (“we”). Our registered address will be published here.