Privacy Policy

Last updated: [DATE]

This Privacy Policy explains how ROPELS ("ROPELS", "the Platform", "we", "us", or "our") collects, uses, discloses, and safeguards information when you use our website, marketplace, point-of-sale ("POS") software, and any shop website or storefront hosted on the Platform (collectively, the "Services"). ROPELS is operated by [COMPANY LEGAL NAME], a company organized under the laws of [STATE/COUNTRY] ("Company").

ROPELS is a multi-tenant platform: independent businesses ("Merchants," "Tenants," or "Shops") use ROPELS to run point-of-sale, inventory, appointments, and their own public storefront. When you interact with a Shop through the Platform — as a customer placing an order, booking an appointment, or browsing a storefront — your information may be collected by us as the platform provider and also used directly by that Shop, which acts as an independent data controller for its own transactions. This Policy covers our handling of information; each Shop is separately responsible for how it uses the data of its own customers, in addition to its obligations under this Policy and any agreement with us.

1. Information We Collect

Information you provide directly:

• Account details: name, email address, phone number, password, and business details (for Merchants).
• Guest checkout / booking details: name and phone number, and optionally email or delivery address — ROPELS intentionally allows guests to order or book without creating an account.
• Transaction data: items purchased or booked, prices, quantities, discounts, payment method selected, and delivery/fulfilment preferences.
• Payment confirmation details you submit for manual/offline payment methods (e.g., a reference number or receipt image), where a Shop or the Platform requires advance payment for certain order types. ROPELS does not process card payments directly on your behalf unless a Shop has connected a supported payment gateway; where no gateway is connected, payments are confirmed manually by Shop staff.
• Health-related information, but only where a Shop operates as a pharmacy or medical business and prescription capture is enabled: prescribing doctor, patient name, and — for controlled substances — a buyer identification reference. This information is entered by Shop staff, not self-reported by you through a public form, and is used solely to comply with the Shop's recordkeeping obligations.
• Reviews, ratings, and any messages or support requests you send us or a Shop.
• Content Merchants upload: product/service catalogs, images, business descriptions, staff schedules, and website/storefront content.

Information collected automatically:

• Device and usage data: IP address, browser type, pages visited, referring pages, and timestamps.
• Approximate location, if you grant permission (used to show nearby shops and sort search results by distance) or that you enter manually (a city or address).
• Cookies and similar technologies necessary for login sessions, shopping carts, and basic analytics. We do not use third-party advertising trackers.

Information from third parties: if a Shop connects a payment gateway, shipping provider, or other integration, we may receive confirmation data (such as payment status) from that provider.

2. How We Use Information

• To operate the Services: process orders and bookings, run the POS, maintain inventory, and generate receipts.
• To route your order or booking to the correct Shop and notify Shop staff.
• To send transactional communications: order confirmations, booking reminders, receipts (including via WhatsApp, where a Shop or you opt into that channel), and account/security notices.
• To detect and prevent fraud, abuse, spam signups, and to enforce rate limits on public forms (e.g., guest checkout, reviews, signups).
• To maintain accurate financial and compliance records, including pharmacy/controlled-substance recordkeeping where legally required.
• To improve and troubleshoot the Services, including aggregated, de-identified analytics.
• To comply with legal obligations, respond to lawful requests from authorities, and enforce our Terms of Service.

We do not sell your personal information. We do not use your data to serve third-party advertising.

3. How Information Is Shared

• With the Shop you transact with — a Shop can see the orders, bookings, and messages you send it, and any information you provide to complete a transaction (this is necessary for the Shop to fulfil your order or appointment).
• With service providers who help us run the Platform: hosting, email/SMS/WhatsApp delivery, payment gateway processors (only for Shops that connect one), and map/geolocation providers for location search. These providers are contractually restricted to using data only to provide their service to us.
• For legal reasons — to comply with a subpoena, court order, or similar legal process, or to protect the rights, property, or safety of ROPELS, our users, or the public.
• Business transfers — if ROPELS is involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction, subject to this Policy or a successor policy of at least equivalent protection.
• We do not share prescription or controlled-substance records except with the Shop that recorded them, or as required by law.

4. Data Retention

We retain transaction, booking, and account records for as long as needed to provide the Services, satisfy the legal and tax recordkeeping obligations of Shops (including pharmacy/controlled-substance records, where applicable, for the period required by applicable law), resolve disputes, and enforce our agreements. When a Shop's account is closed, its historical transaction records may be retained for the periods described above even though the Shop is no longer active.

5. Your Choices and Rights

• You may access, correct, or request deletion of your account information by contacting the Shop you dealt with directly, or by contacting us using the details below. We will forward requests concerning Shop-held data to the relevant Shop where we are not able to act on it directly.
• You may decline location permissions; search will still work using a manually entered city.
• You may opt out of non-transactional communications at any time; transactional messages (receipts, booking confirmations) cannot be turned off while you continue to use the Services, as they are necessary to complete your transaction.
• Depending on your jurisdiction, you may have additional rights (such as data portability or the right to object to processing) under applicable law. Contact us to exercise these rights; we may need to verify your identity first.

6. Data Security

We use reasonable administrative, technical, and physical safeguards designed to protect information against unauthorized access, alteration, disclosure, or destruction, including tenant-level data isolation in our database architecture. However, no method of transmission or storage is 100% secure. We cannot guarantee absolute security, and you provide information at your own risk. In the event of a data breach affecting your personal information, we will notify affected users and/or relevant authorities as required by applicable law.

7. Children's Privacy

The Services are not directed to children under 16, and we do not knowingly collect personal information from children under 16. If we learn we have collected such information, we will delete it promptly.

8. International Users

The Platform may be accessed from multiple countries. By using the Services, you consent to your information being processed and stored in the country where our servers are located, which may differ from your own country and may have different data protection laws.

9. Third-Party Links and Integrations

Shop storefronts, payment gateways, maps, and social media links may direct you to third-party sites and services not operated by us. We are not responsible for the privacy practices of third parties. Review their policies separately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by an updated "Last updated" date above, and, where required by law, we will provide additional notice. Continued use of the Services after a change constitutes acceptance of the revised Policy.

11. Contact Us

Questions about this Privacy Policy can be sent to [CONTACT EMAIL] or via the support channels listed on our website.

Disclaimer: this Privacy Policy is a general template provided for informational purposes and does not constitute legal advice. It should be reviewed by qualified legal counsel to confirm compliance with the specific laws applicable to your business, users, and jurisdictions (which may include GDPR, CCPA/CPRA, HIPAA-adjacent state pharmacy laws, or other regional data-protection regimes) before being relied upon.