Privacy notice
& policies

Novalink Enterprises Ltd. ("Novalink Enterprises", "we", "us", "our") provides Storefronts POS, a desktop point-of-sale application for retail, hospitality, restaurant and warehouse businesses. This notice explains how we collect, use and protect personal data, and how you can exercise your rights under the EU General Data Protection Regulation (GDPR), the UK GDPR, the Kenya Data Protection Act 2019 and other applicable data protection laws.

For the purposes of this notice, Storefronts is the data controller for personal data we collect about you when you visit this website, register for an account or contact us. When you use Storefronts POS to process information about your own customers, employees or suppliers, you are the data controller of that information and Storefronts is your data processor. The terms of our Data Processing Addendum (DPA) apply.

We process personal data only where we have a lawful basis under Article 6 of the GDPR. The table below summarises the purposes for which we process data and the corresponding legal basis.

We do not sell, rent or trade personal data. We share data only with vetted sub-processors who help us run the service, and only to the extent strictly necessary. Each sub-processor is bound by a written contract requiring confidentiality and GDPR-equivalent protections.

A current list of named sub-processors is available on request from privacy@novalinklabs.com. We notify customers of material changes to our sub-processor list before they take effect.

Where personal data is transferred outside the European Economic Area, the United Kingdom or Kenya to a country that has not received an adequacy decision, we rely on the European Commission's Standard Contractual Clauses (or the UK International Data Transfer Addendum) and carry out a transfer impact assessment to ensure your data continues to receive an essentially equivalent level of protection.

Under the GDPR and equivalent laws you have the following rights in relation to your personal data. To exercise any of these rights, contact privacy@novalinklabs.com. We will respond within one month and there is no charge for routine requests.

This marketing site uses a small number of strictly necessary cookies to remember your preferences (such as light or dark mode). We do not use third-party advertising cookies. If we introduce optional analytics cookies in future, we will request your consent through a cookie banner before any non-essential cookie is set.

Storefronts POS is a business application and is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact privacy@novalinklabs.com and we will delete it.

We protect personal data using appropriate technical and organisational measures consistent with industry good practice and Article 32 of the GDPR. This includes encryption of data in transit and at rest, strict access controls, continuous monitoring, regular security reviews and prompt application of security updates.

For the protection of all our customers we do not publish details of our internal security architecture. If you have a contractual need for additional information, our security team is available to walk qualified customers through our controls under NDA.

If you believe you have discovered a vulnerability in Storefronts POS, please report it responsibly to security@novalinklabs.com. We acknowledge reports within 48 hours and will keep you informed as we investigate. We do not pursue legal action against researchers acting in good faith.

We may update this notice from time to time to reflect changes in our service, our sub-processors or applicable law. Material changes will be announced on this page and via in-app notice at least 14 days before they take effect. The "Last updated" date at the top of this page always reflects the current version.

By installing or using Storefronts POS you agree to these terms. The software is provided on an "as is" basis under the licence shipped with the build, without warranty of any kind to the maximum extent permitted by applicable law. Nothing in these terms limits any rights you have as a consumer that cannot lawfully be excluded.

You are responsible for the data you enter into the system, for keeping your credentials safe, and for complying with the laws of the jurisdictions in which you operate. You must not attempt to reverse engineer, decompile or interfere with the security of the application except to the extent expressly permitted by law.

The Demo plan has no charge, so there is nothing to refund.

Paid plans (Starter, Growth, Business and Enterprise) include a 30-day money-back guarantee. If you are not satisfied within the first 30 days of a new subscription, contact us and we will issue a full refund.

After 30 days, monthly subscriptions can be cancelled at any time and will end at the close of your current billing period. We do not pro-rate refunds for partial months unless required by applicable consumer law.

You agree not to use Storefronts POS to sell goods or services that are illegal in your jurisdiction, to defraud customers, to launder money, to evade taxes, or to process the personal data of any individual unlawfully.

We reserve the right to suspend or terminate accounts that violate this policy or that put other customers at risk. Where possible we will give notice and an opportunity to remedy before suspension.

For privacy or data protection enquiries, including to exercise any of the rights set out in section 7, contact privacy@novalinklabs.com. For security reports, contact security@novalinklabs.com. For all other legal enquiries, contact legal@novalinklabs.com.

If you are not satisfied with our response, you have the right to lodge a complaint with the data protection supervisory authority in your country of residence.