This Privacy Policy explains what information SOHOON Technologies (“we”, “us”), the operator of the GetGroceryPOS brand, collects through the website getgrocerypos.com and through the hosted GetGroceryPOS point-of-sale software, what we do with it, who we share it with, and the choices you have.
We wrote it in plain language because most of the people who read it run a store and do not have time for legal puzzles. If something is unclear, use the form on our Data request page and we will explain.
This policy covers two different situations, and the rules are different for each:
- You visit our website or contact us (for example, you ask for a demo). In this case we decide what happens to your information, so we are responsible for it.
- Your store uses the GetGroceryPOS software. The products, sales, staff and customer records your store keeps in the POS belong to your store. We store and process them only to run the software for you, following your instructions.
Who we are
GetGroceryPOS is point-of-sale software for independent grocery stores and ethnic markets, sold in the United States, the United Arab Emirates and Pakistan. The software is hosted by us, so stores sign up online and use it in a web browser. The website and the software are operated by SOHOON Technologies.
To contact us about privacy, use the Show email button on our Data request page, or the form on that page.
Information we collect on the website
Information you give us
When you fill in a form on this website, such as a demo request, a partner enquiry or a data request, we collect the details you type in:
- Your name and the name of your store
- Your email address
- Your phone or WhatsApp number, if you give it
- Your country and city
- The kind of store you run, how many registers you have and the language you want for a demo
- Anything you write in the message box
- Your confirmation that we may contact you about your request
We only ask for what we need to answer you. Fields marked as optional really are optional.
Campaign information
If you arrived on our website from an advertisement or a link with tracking tags, the address may contain campaign information such as utm_source, utm_medium, utm_campaign, gclid, fbclid or msclkid. A small script on our site remembers these tags in your browser (under the key sf-attr-v1) for up to 90 days. They are sent to us only if you submit a form, so we know which advertisement or partner brought you. They are not used to follow you around other websites.
Information stored in your browser
To make the site work the way you set it, we store a few small settings in your browser’s local storage. They never leave your device unless noted:
| Key | What it remembers |
|---|---|
gg-theme |
Light, dark or system theme |
gg-palette |
The colour palette you picked |
gg-country |
Your country and currency (USA, UAE or Pakistan) |
gg-billing |
Monthly or annual prices |
gg-a11y |
Text size, contrast, reduced motion and other display choices |
gg-recent |
Your recent searches on this site |
gg-consent |
Whether you accepted or declined analytics |
sf-attr-v1 |
Campaign tags, as described above |
Our Cookie Policy lists every cookie and storage item in more detail.
Analytics, only if you agree
We use Google Analytics 4 to see which pages help store owners and which ones do not. It does not load until you click “Accept analytics” in our cookie notice. Until then, Google’s Consent Mode is set to “denied” and no analytics cookies are set. If you accept, Google Analytics sets cookies named _ga and _ga_<id> and collects information such as the pages you view, the approximate region you are in, your device type and how you arrived. We do not use advertising cookies and we do not run remarketing.
You can change your mind at any time from the cookie notice or the Cookie Policy page.
Spam protection
Our forms use Cloudflare Turnstile to tell people apart from bots. When you use a form, Turnstile may check signals from your browser and may set a strictly necessary security cookie. We also use a hidden field and a minimum fill time to stop automated submissions.
Server and security logs
Our website is hosted on Cloudflare. Like any web host, Cloudflare processes technical information such as your IP address, browser type and the pages requested, to deliver the site, keep it secure and stop attacks.
How we use website information
We use the information described above to:
- Answer your demo, contact, partner or data request
- Set up a free trial or a demo in the language you asked for
- Follow up about your request by email, phone or WhatsApp, as you agreed
- Understand which advertisements and partners bring stores to us
- Improve the website, if you accepted analytics
- Keep the website and our forms secure and free of spam
- Meet our legal obligations
We do not add you to marketing lists just because you asked a question. If we ever send newsletters, we will ask first and every message will have an unsubscribe link.
Who we share website information with
We share information only with the service providers that help us run our business, and only as much as they need:
- Our CRM (HighLevel). Form submissions are stored as a contact record with a note of the page you used and the campaign tags, so our sales and onboarding team can reply.
- Our team notification channel (Discord). A short notice of each new request is posted to a private channel used by our sales team, so someone answers quickly.
- Cloudflare, for hosting, security and spam protection.
- Google, for analytics, only if you accepted analytics.
We may also share information if the law requires it, to protect our rights or the safety of others, or as part of a sale or reorganization of our business, in which case this policy continues to apply.
We do not sell personal information, and we do not share it for cross-context behavioral advertising.
Information inside the GetGroceryPOS software
When your store uses GetGroceryPOS, you and your staff enter business records into the software: products, prices, stock, purchase orders, suppliers, sales, staff accounts and, if you choose, customer accounts and reward points.
- Your store owns this data. We act as a service provider (in some laws called a “processor”) and handle it only to provide, secure, back up and support the software for you.
- We do not sell it, use it for advertising or share it with other stores.
- Card payments are handled by the payment processor you choose. Card numbers are processed by that processor; we do not store full card numbers.
- SNAP/EBT payments (US only) run through your certified EBT processor under your store’s own authorization from USDA FNS.
- If your store keeps information about its own customers (for example a phone number for a customer account), your store is responsible for telling those customers how it uses that information. If one of your customers asks us about their data, we will pass the request to you.
- When you cancel, you can export your data for 30 days. After that it is deleted from the live system and then from backups as they roll over. See Security and data and our Terms of Service.
How long we keep information
- Demo and contact requests: up to 24 months after our last contact with you, then deleted, unless you become a customer.
- Analytics data: up to 14 months, then deleted automatically by Google Analytics.
- Browser settings: they stay in your browser until you clear them. Campaign tags expire after 90 days.
- Customer account records: for as long as your subscription is active, plus the time needed to meet tax, accounting and legal requirements.
- Security logs: for a short period needed to protect the service.
How we protect information
We use HTTPS on every page, restrict access to our CRM and systems to the people who need it, keep secrets out of our website code, and use spam protection on every form. Inside the POS, each store’s data is separated from other stores and backed up. Our Security and data page explains this in plain language. No system is perfectly secure, but we work to keep your information safe and will tell you if a breach affects you, as the law requires.
Your rights
Everyone
Wherever you live, you can ask us to tell you what information we hold about you, correct it, or delete it. You can also withdraw consent for analytics at any time. Use the form on our Data request page.
California and other US states
If you live in California, the California Consumer Privacy Act (as amended by the CPRA) gives you the right to:
- Know what personal information we collect, use and disclose, and why
- Delete personal information we collected from you
- Correct inaccurate personal information
- Opt out of the sale or sharing of personal information. We do not sell or share it, so there is nothing to opt out of, but you may still ask
- Limit the use of sensitive personal information. We do not collect sensitive personal information through the website
- Not be treated differently for using these rights
Residents of other states with privacy laws, such as Colorado, Connecticut, Virginia, Texas and others, have similar rights. We honor them in the same way. You may use an authorized agent; we will ask for proof that the agent may act for you. We respond within 45 days, as California law requires, and tell you if we need more time.
Read more on the California Attorney General’s CCPA page, linked from our Data request page.
United Arab Emirates
If you are in the UAE, the Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL) gives you rights including access, correction, deletion, restriction of processing and objection to processing. We rely on your consent and on what is needed to answer your request or provide a service you signed up for.
Pakistan
If you are in Pakistan, we handle your information in line with the Prevention of Electronic Crimes Act, 2016 (PECA) and good practice. Pakistan’s dedicated personal data protection law is still pending; when it is enacted, we will update this policy and honor the rights it gives you.
International transfers
Our service providers may store and process information in countries other than yours, including the United States and the European Union. When information leaves your country, we rely on the safeguards our providers offer and on the protections required by applicable law.
Children
Our website and software are for businesses. They are not directed to children under 16, and we do not knowingly collect information from them. If you think a child has sent us information, tell us and we will delete it.
Third-party links
Our pages link to government and standards websites (for example USDA FNS or NIST) and to partner websites. Their privacy practices are their own. Read their policies before you share information with them.
Changes to this policy
We will update this policy when our practices or the law change. The date at the top shows the latest version. If a change is significant, we will say so on the website and, for customers, inside the software or by email.
Contact us
For any privacy question or request, use the Show email button on our Data request page, or the form on that page. Tell us which country you are in so we can apply the right rules. We answer most requests within 30 days.
