Privacy Notice

This notice explains what personal data Namarc POS collects, why, and what rights you have over it. It covers both people who create a shop account and use the Service, and visitors who use our contact form.

1. Introduction

Namarc Technology (“Namarc”, “we”, “us”, “our”) built Namarc POS, a point-of-sale and shop management application for pharmacies, retail shops, and restaurants. This notice applies to the Namarc POS website and dashboard.

2. Who we are

Namarc Technology is the data controller for account, shop, and website data described in this notice. If you are a shop owner using Namarc POS to manage your own business, you act as the data controller for personal data you enter about your customers or staff (for example, a customer name on a sale), and Namarc acts as your data processor for that data — we process it only to provide the Service to you, not for our own purposes.

3. Data we collect

Account data. When you create a shop, we collect your first, middle (optional), and last name, email address, phone number, password (stored hashed, never in plain text), and, if you add one, a profile avatar.

Shop data. Your shop's name and, where you choose to provide them, its address, region, district, ward, and street.

Staff data. If you add staff to your shop, their name, contact details, and the role you assign them, in the same way as your own account data above.

Sales & business data. Products, stock batches and expiry dates, sales and receipts (which may include a customer name if your staff choose to record one), payment method used for a sale, expense records, and the reports generated from this data.

Subscription & payment data. Your selected Subscription Plan, trial and billing dates, and a record of payment confirmations (for example a reference for a manual M-Pesa payment) — we do not collect or store full card or mobile-money account credentials through the Service.

Contact form data. If you use the contact form on our home page, we collect the name, email, optional phone number, and message you provide.

Usage & security data. Login timestamps and outcomes (including failed attempts, used to protect your account from unauthorized access), and general technical data such as IP address and browser type when you use the website or Service.

4. How we use your data

• to create and operate your Account and shop, and let you and your staff sign in;
• to provide the Service's features — sales, stock, reporting, and so on;
• to send account-related messages, such as email verification, password reset, and subscription or trial notices;
• to respond to messages sent through the contact form;
• to detect and prevent unauthorized access, fraud, or abuse of the Service; and
• to meet legal and accounting obligations, such as retaining billing records.

5. Legal basis for processing

We process account, shop, and billing data because it is necessary to perform our contract with you (the Terms & Conditions you agree to when creating a shop), to comply with legal obligations such as financial record-keeping, and, for security logging and abuse prevention, on the basis of our legitimate interest in keeping the Service safe. We process contact-form data based on your consent in submitting it.

6. How we share data

We do not sell personal data to third parties. We share it only:

• with staff you add to your own shop, limited by the role you assign them;
• with service providers who help us run the Service, such as email delivery for verification and notification messages;
• with payment confirmation channels you choose to use for subscription billing (for example, an M-Pesa transfer you initiate yourself); or
• where required by law, regulation, or a valid legal request from a competent authority in Tanzania.

7. International data transfers

We aim to keep Namarc POS data within infrastructure appropriate for a Tanzania-focused service. Where a service provider we use (for example, for sending email) processes data outside Tanzania, we take reasonable steps to ensure it is handled with a comparable level of protection to that described in this notice.

8. Data retention

We retain Account, shop, and sales data for as long as your Account is active, and for a reasonable period afterward to meet legal, accounting, or dispute-resolution needs. Contact-form messages are kept for as long as needed to handle your inquiry and for a reasonable period afterward for our own records. You can ask us to delete data we are not legally required to retain by contacting us (see below).

9. Data security

Passwords are stored hashed, not in plain text. Sign-in is protected against repeated failed attempts, and password changes follow a complexity policy requiring upper- and lower-case letters, a number, and a special character. Account changes such as a new email require verification. No system is completely secure, but we take reasonable technical and organizational measures to protect your data against unauthorized access, loss, or misuse.

10. Your rights

Under Tanzania's Personal Data Protection Act, 2022, and subject to its conditions, you may have the right to access, correct, or request deletion of your personal data, to object to or restrict certain processing, and to lodge a complaint with the Personal Data Protection Commission. Where a shop owner controls data about their own customers or staff (see “Who we are” above), requests about that data should first be directed to that shop owner. For data we control directly — your own Account data, or a contact-form message you sent us — contact us using the details below.

11. Cookies

The Service uses a session cookie to keep you signed in and, if you choose “remember me,” a longer-lived cookie so you don't have to log in every visit. These cookies are necessary for the Service to function and are not used for advertising or cross-site tracking.

12. Children's privacy

Namarc POS is a business tool and is not directed at children. We do not knowingly collect personal data from children through the Service.

13. Changes to this notice

We may update this notice from time to time. Where a change is material, we will provide reasonable notice (for example by email or an in-dashboard notice) before it takes effect. The “Last updated” date at the top of this page shows when it was last revised.

14. Contact us

Questions about this notice, or requests about your personal data, can be sent to info@namarc.co.tz or through our contact form.