Privacy Policy

1. Information we collect

We collect information in three ways: what you give us, what we collect automatically, and what we receive from other services you connect.

Information you provide

• Account and profile details: your name, work email address, organization name, store address (subdomain) and password when you sign up or invite team members.
• Business details: the trading name, addresses, currency, business type and settings you configure for your store.
• Support and communications: messages, attachments and feedback you send us, and records of our correspondence.
• Payment and billing information for your Harmon subscription. Card details are handled by our payment processor; we do not store raw card numbers.

Information we collect automatically

• Usage and device data: pages viewed, features used, actions taken in the dashboard, approximate location derived from IP address, browser and device type, and timestamps.
• Cookies and similar technologies used to keep you signed in, remember preferences and measure how the site performs. See 'Cookies' below.

Information from third parties

• Authentication, payment, analytics and messaging providers you or we connect to the Platform may share information needed to deliver those integrations.

2. How we use information

We use personal information to:

• Provide, maintain and secure the Platform and your account.
• Provision and operate your store, bookings and connected extensions.
• Process subscription payments and send billing and service notices.
• Respond to support requests and communicate about your account.
• Improve and develop features, and understand how the Platform is used.
• Detect, prevent and investigate fraud, abuse and security incidents.
• Comply with legal obligations and enforce our agreements.

We do not sell personal information. We do not use the contents of a merchant's store or shopper data to train machine-learning models except to provide features that merchant has explicitly turned on.

3. Legal bases for processing

Where data-protection law requires a legal basis, we rely on:

• Performance of a contract, to provide the Platform and account you sign up for.
• Legitimate interests, to secure, support and improve the Platform, where those interests are not overridden by your rights.
• Consent, for optional cookies and certain marketing communications, which you can withdraw at any time.
• Legal obligation, to meet accounting, tax and other requirements.

4. How we share information

We share personal information only as described here:

• Service providers (sub-processors) who host, secure and support the Platform, process payments, send email and provide analytics, under contracts that limit their use of the data.
• Extensions and integrations you enable, which receive only the data needed for the integration you turned on.
• Legal and safety recipients, where disclosure is required by law or reasonably necessary to protect rights, safety or the integrity of the Platform.
• Successors, in connection with a merger, acquisition or sale of assets, subject to this policy.

5. Data retention

We keep personal information for as long as your account is active and for as long as needed to provide the Platform, then retain what we must to meet legal, tax, accounting and dispute-resolution obligations. When data is no longer needed we delete or anonymize it.

6. Security

We use technical and organizational measures to protect personal information, including encryption in transit, access controls, and tenant isolation between merchants. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

7. International transfers

We and our service providers may process information in countries other than your own. Where we transfer personal information across borders, we use appropriate safeguards consistent with applicable data-protection law.

8. Your rights

Depending on where you live, you may have rights to access, correct, delete, restrict or object to our use of your personal information, to portability, and to withdraw consent. To exercise these rights, contact us using the details below. If you are a shopper of a merchant's store, please contact that merchant, who controls your data.

You may also have the right to lodge a complaint with your local data-protection authority.

9. Cookies

We use strictly-necessary cookies to keep you signed in and to secure the site, and optional cookies to remember preferences and measure performance. You can control non-essential cookies through your browser settings or any cookie controls we provide. Blocking strictly-necessary cookies may stop parts of the Platform working.

10. Children

Harmon Commerce is a tool for businesses and is not directed to children. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes we will update the 'Last updated' date and, where appropriate, notify you. Continued use of the Platform after an update means you accept the revised policy.

12. Contact us

If you have questions about this policy or how we handle personal information, contact ZeenConnect Limited at privacy@zeenconnect.com. Our registered office is [Registered office address].