1. Who we are
Data controller: [Legal entity name — TODO], trading as Hikma Solutions. Contact: support@hikmasolutions.com.
This template is provided for GDPR-friendly transparency. Replace bracketed placeholders with your finalized legal details before publication.
2. What we collect
Account & shop data: Email address, name, shop/business identifier, role (owner/staff), and authentication tokens when you sign in to the app.
Business ledger data: Customers, debts/charges, payments, rental items, checkouts, deposits, and notes you enter in the app—processed to provide the service.
Website: Standard server logs and analytics (e.g. page views) when you visit this site. We do not require an account to browse marketing pages.
Support: Information you send when contacting support@hikmasolutions.com.
3. How we use data
We process data to operate Mizan, sync data across authorized users, provide support, improve reliability, manage subscriptions, and comply with law. Legal bases under GDPR may include contract performance, legitimate interests (security, product improvement), and consent where required.
4. Processors & hosting
We use third-party infrastructure to host and secure the service, including Supabase (database, authentication, and related cloud services) as a data processor acting on our instructions. Payment and subscription data may be handled by billing providers we use, according to their policies.
[Additional subprocessors — TODO] (e.g. analytics, email delivery).
5. Retention
We retain account and ledger data while your subscription is active and for a reasonable period afterward unless you request deletion or we are required to keep records longer. Log data is retained for a limited security and operations window.
6. Security
We apply technical and organizational measures including encryption in transit, access controls, and authenticated API access. No method of transmission or storage is 100% secure; report concerns to support@hikmasolutions.com.
7. Your rights (EEA/UK and similar laws)
You may have rights to access, rectify, erase, restrict, object, and port personal data, and to withdraw consent where processing is consent-based. You may lodge a complaint with your supervisory authority. To exercise rights, contact support@hikmasolutions.com.
8. International transfers
If data is processed outside your country, we use appropriate safeguards such as standard contractual clauses where required. Details: [TODO — transfer mechanism].
9. Children
Mizan is a business tool not directed at children. We do not knowingly collect data from minors.
10. Changes
We may update this policy. Material changes will be posted on this page with an updated date. Continued use after changes constitutes acceptance where permitted by law.