1. Introduction
   These Terms and Conditions (“Terms”) are a legally binding agreement between you (“You,” “Your,” “User”) and Gormic for Information Technology (“we,” “us,” and “our”).
2. Information We Collect
   We collect different types of information to provide and improve our services, including:
   • Personal Information: Name, email address, phone number, and login credentials.
   • Business Information: Store name, business address, tax information, and transaction details.
   • Transaction Data: Purchase history, payment method (excluding full credit card details), and receipts.
   • Device & Usage Data: IP address, browser type, operating system, and system logs.

3. How We Use Your Information
   We use the collected data to:
   • Process sales transactions and generate invoices.
   • Provide customer support and improve service quality.
   • Ensure security, prevent fraud, and comply with legal obligations.
   • Improve system performance, features, and user experience.
   • Send important service updates and notifications.
   • Comply with PDPL and other applicable data protection regulations in Saudi Arabia.

4. Data Sharing & Disclosure
   We do not sell or rent your personal information. However, we may share information with:
   • Service Providers: Payment processors, cloud storage providers, and IT support services.
   • Legal Authorities: If required by Saudi law, or other government entities.

5. Data Security
   We implement industry-standard security measures to protect your data, including encryption, secure servers, and access controls, in accordance with PDPL security requirements. However, no system is completely secure, and we cannot guarantee absolute security.
6. Data Retention
   We retain your data only as long as necessary to fulfill our business and legal obligations under Saudi law. Once no longer needed, we securely delete or anonymize your data as per PDPL retention policies.
7. Your Rights & Choices
   In compliance with the PDPL in in Saudi Arabia, you have the right to:
   • Access, update, or delete your personal data.
   • Opt out of marketing communications.
   • Restrict or object to certain data processing.
   • Request a copy of your data in a portable format.

To exercise these rights, contact us at [email protected].

8. Third-Party Integrations
   Our POS system may integrate with third-party services (e.g., payment gateways, accounting software). These services have their own privacy policies, and we encourage you to review them. We ensure that all third-party providers comply with PDPL requirements in Saudi Arabia.
9. Children's Privacy
   Our services are not intended for children under 13, and we do not knowingly collect their data.
10. Changes to This Privacy Policy
    We may update this policy from time to time. We will notify you of any significant changes through email or system notifications.