1. Introduction
This policy explains how information is collected, used, stored, and shared when using the Plus Platform and its current and future products. By using the services, the user or merchant acknowledges these practices.
The policy covers merchants, their employees, end-customers whose data may be processed, and other individuals whose information is collected through the services.
2. Information We Collect
We may collect account and business information, operational and transaction data, employee and end-customer data, device and usage data, and support communications.
- Name, contact, business, registration, and onboarding information.
- Sales, invoices, inventory, purchasing, payments, delivery, and module data.
- Employee names, roles, attendance, payroll, and related HR data.
- Device type, operating system, IP address, usage logs, and session information.
3. How We Use Information
We use information to provide, operate, and improve services, process transactions and accounts, provide support and training, protect the platform, and meet legal obligations.
- Internal analytics, reporting, product development, and research.
- Service communications, updates, and related content.
- Creating aggregated or de-identified insights that do not identify a specific user or merchant.
5. Government and Law Enforcement
We do not provide governments with direct or bulk access to platform data. Disclosure may occur under a valid legal order, in an emergency involving personal safety, or to protect rights and security within the law.
6. Data Storage and Security
We apply reasonable administrative, technical, and organizational safeguards against unauthorized access, alteration, or loss. No storage or transmission method can guarantee absolute security.
7. Data Retention
We retain information as needed to provide services, meet obligations, resolve disputes, and support audits. After account termination, certain data may be retained for a reasonable period and then securely deleted or de-identified.
8. Your Rights and Choices
You may request access, correction, deletion, a copy of your data, or object to certain processing, subject to applicable law and obligations required to operate the service.
9. Merchant Responsibility
The merchant is responsible for having the appropriate rights, permissions, or legal basis to enter employee and customer data into the platform and use it in accordance with applicable laws and policies.
10. Children’s Data
The services are business-focused and are not designed to collect children’s data directly. Merchants should avoid entering children’s data unless necessary and supported by an appropriate legal basis.
11. International Data Transfers
Data may be stored or processed outside Iraq, including the United Kingdom or infrastructure provider locations. Appropriate safeguards are used in line with requirements applying to such transfers.
12. Changes to This Policy
We may update this policy. We will revise the last-updated date and, for material changes, provide appropriate notice through the platform, email, or other channels before they take effect where required.
13. Governing Law and Disputes
The policy is governed by the laws of England and Wales, with mandatory Iraqi requirements applying to data processed in Iraq where relevant. Disputes are first addressed through good-faith negotiation and then under the jurisdiction stated in the published policy.
14. Contact Us
For privacy and data-rights requests: privacy@gini.iq. Please identify the account or business and the request so we can verify and respond.