Legal Documents

Privacy Policy

This Privacy Policy explains how we collect, use, disclose, and protect information when you visit our website, use our POS software and related services, or otherwise interact with us.

Website: https://www.myqcart.com Effective Date: 12 July 2026 Last Updated: 12 July 2026

MyQCart (“MyQCart”, “we”, “us”, or “our”) is a trading name of ORVIK GROUP LTD (Company Registration No. 17333890), a private company registered in England and Wales. MyQCart is a point-of-sale (POS) software provider. This Privacy Policy explains how we collect, use, disclose, and protect information when you visit our website (https://www.myqcart.com), use our POS software and related services (the “Services”), or otherwise interact with us.

By using our website or Services, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use our website or Services.

1. Who This Policy Applies To

This policy covers two categories of people:

Website visitors and prospective/current business customers ("you," "Client") — businesses that purchase, subscribe to, or evaluate MyQCart's POS software.
End users of our Clients' businesses (e.g., a Client's cashiers, staff, or their own customers) whose data may pass through the MyQCart platform because our Client uses our Services to run their operations.

For end users in category 2, MyQCart generally acts as a data processor on behalf of our Client (the data controller), and our Client's own privacy policy governs how that data is used. Where MyQCart determines the purpose of processing (e.g., billing, product analytics, support), we act as a data controller for that specific processing. See our separate Data Processing Agreement (DPA) for details relevant to business customers.

2. Information We Collect

2.1 Information you provide directly

Business and account details: company name, contact name, email address, phone number, billing address, tax/VAT ID.
Payment and billing information (processed via a third-party payment gateway — see Section 6).
Support requests, feedback, and correspondence.
Information submitted through demo requests, newsletter sign-ups, or contact forms.

2.2 Information collected through use of the Services

Transaction data processed through the POS system (e.g., product names, prices, quantities, timestamps) to the extent our Client configures the software to store or sync this data.
Usage and log data: login timestamps, device/browser type, IP address, feature usage, and error logs, used to operate, secure, and improve the Services.
Configuration data: store settings, inventory lists, staff accounts created by the Client within the software.

2.3 Information collected automatically on our website

Cookies and similar tracking technologies (see Section 7 and our separate Cookie Policy).
Standard web analytics data (pages visited, referring URL, browser/device type, approximate location derived from IP address).

We do not intentionally collect sensitive personal data (e.g., health, biometric, or financial account numbers beyond what is necessary for billing) unless specifically required for a feature you opt into.

3. How We Use Information

We use the information we collect to:

Provide, operate, maintain, and support the MyQCart POS Services.
Process subscription payments and manage billing.
Respond to inquiries, support tickets, and feedback.
Send service-related communications (updates, security notices, renewal reminders).
Send marketing communications, only where you have opted in or as permitted by law (you may unsubscribe at any time).
Monitor, analyze, and improve the performance, security, and usability of the Services.
Detect, investigate, and prevent fraud, abuse, or security incidents.
Comply with legal obligations and enforce our Terms of Service.

We do not use Client transaction data (Section 2.2) to build advertising profiles, and we do not sell such data.

4. Legal Basis for Processing (where applicable)

Where data protection law (e.g., UK GDPR) applies, we rely on one or more of the following legal bases:

Performance of a contract — to provide the Services you've subscribed to.
Legitimate interests — to secure, maintain, and improve our Services and business.
Consent — for optional marketing communications and non-essential cookies.
Legal obligation — for tax, accounting, and regulatory compliance.

5. How We Share Information

We do not sell, rent, or trade your personal information. We may share information with:

Subprocessors and service providers who help us operate the Services (e.g., cloud hosting, payment processing, email delivery, customer support tools), bound by confidentiality and data protection obligations.
Professional advisors (legal, accounting) where necessary.
ORVIK GROUP LTD, the legal entity operating MyQCart, for corporate administration, financial reporting, and group-level security oversight.
Law enforcement or regulators, where required to comply with a legal obligation, court order, or to protect our rights, users, or the public.
A successor entity, in the event of a merger, acquisition, or sale of assets, subject to equivalent privacy protections.

A current list of key subprocessors is available on request at support@myqcart.com.

6. Payment Processing

Payments are processed securely through authorised third-party payment service providers such as Stripe, PayPal, or other PCI DSS compliant payment processors, depending on the payment method selected by the customer. MyQCart does not store full payment card numbers on its own servers; card and payment details are handled directly by the relevant payment processor under their own security standards and privacy policy.

7. Cookies and Tracking Technologies

Our website and Services use cookies and similar technologies to keep you logged in, remember preferences, support essential functionality, and understand how our website is used. This includes:

Strictly necessary / session cookies — required for login sessions, shopping cart/sign-up flows, and core site functionality.
Analytics cookies — including Google Analytics, used to understand aggregate visitor behaviour (pages viewed, time on site, general location) so we can improve the website.
Marketing cookies — used only where you have given consent, to measure the effectiveness of our own marketing and communications.

You can control or disable cookies through your browser settings. Disabling non-essential cookies will not affect core Service functionality, but may affect optional website features. Full details are set out in our separate Cookie Policy.

8. Data Retention

We retain personal data only for as long as necessary for the purposes described in this policy, or as required by law. Retention periods vary depending on the type of data:

Data Category	Typical Retention Period	Notes
Customer accounts	Duration of active subscription, plus 90 days after account closure	Extended where needed to resolve open disputes or as required by law
Billing records	6 years from the end of the financial year in which the transaction occurred	Required for UK tax and accounting compliance
Support tickets	24 months from ticket closure	Used for quality assurance, training, and recurring issue tracking
System/security logs	12 months from creation	Used for security monitoring and incident investigation

Client transaction data processed through the POS system is otherwise retained according to the retention settings agreed with the Client, or as required by applicable law. Clients may request deletion of their account data subject to the legal retention requirements above, as outlined in our Terms of Service.

9. Data Security

We implement technical and organizational measures designed to protect your information. Full detail is available in our separate Security Policy, and includes:

Encryption of data in transit (TLS/SSL).
Access controls limiting data access to authorized personnel only.
Security monitoring and appropriate technical safeguards designed to protect the Services.
Secure hosting infrastructure with restricted network access.
Regular backups (see our Terms of Service, Section 8, for backup details).

No method of transmission or storage is 100% secure. In the event of a data breach affecting your personal information, we will notify affected parties in accordance with applicable law and without undue delay.

10. International Data Transfers

If we transfer personal data outside the United Kingdom (including to countries where our infrastructure or subprocessors operate), we take steps to ensure appropriate safeguards are in place, such as standard contractual clauses, where required by law.

11. Your Rights

Depending on your location, you may have the right to:

Access the personal data we hold about you.
Correct inaccurate data.
Request deletion of your data ("right to be forgotten").
Object to or restrict certain processing.
Request data portability.
Withdraw consent (where processing is based on consent) at any time.
Lodge a complaint with your local data protection authority (in the UK, the Information Commissioner's Office).

To exercise any of these rights, contact us at support@myqcart.com. If you are an end user of one of our business Clients (Section 1), you should generally direct data requests to that Client, who controls the data; we will assist our Client in fulfilling such requests as required.

12. Children's Privacy

The Services are intended for businesses and individuals aged 18 years or older acting on behalf of a business. We do not knowingly collect personal information from individuals under 18.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified via email or a notice on our website. The "Last Updated" date at the top reflects the most recent revision.

14. Contact Us

If you have questions about this Privacy Policy or how your data is handled, contact us at: