Privacy Policy

1. INTRODUCTION

Springlink OÜ ("Springlink", "we", "our" or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard personal information when you use our website, platform, and related services (collectively, the "Services").

By using the Services, you consent to the practices described in this Privacy Policy. If you do not agree, you should not use the Services.

2. DATA CONTROLLER AND CONTACT INFORMATION

Springlink OÜ is the data controller for the processing of your personal data, except where acting as a data processor on behalf of merchants.

• Company Name: Springlink OÜ
• Email: [email protected]

3. PERSONAL DATA WE COLLECT

We may collect and process the following categories of personal data:

3.1 Data You Provide

• Contact details (e.g., name, email, phone number)
• Account and authentication details
• Business information when registering as a merchant

3.2 Data Collected Automatically

• IP address and device type
• Browser information and interaction with our website
• Cookies and analytics data (see Section 8)

3.3 Data From Third Parties

• POS system integrations (e.g., customer contact or transaction data)
• Communication platforms and analytics tools

4. PURPOSES AND LEGAL BASIS FOR PROCESSING

We process your personal data based on one or more of the following legal bases:

• Contractual necessity – To perform agreements with merchants
• Consent – For optional cookies or marketing communication
• Legitimate interests – For service improvement, security, fraud prevention
• Legal obligations – To comply with applicable laws and regulations

5. HOW WE USE PERSONAL DATA

We use your data to:

• Provide and operate the Services
• Communicate with you about updates, support, or billing
• Analyze service usage and improve performance
• Facilitate integrations and third-party functionality
• Comply with legal obligations and enforce our terms

6. DATA SHARING AND DISCLOSURE

We may share your personal data with:

• Authorized third-party processors, such as hosting, analytics, or messaging services
• Merchants, if you are a customer signing up for a loyalty program
• Authorities, when required by law or to enforce legal claims

All data sharing is governed by appropriate Data Processing Agreements (DPAs) where necessary.

7. INTERNATIONAL TRANSFERS

If your personal data is transferred outside the European Economic Area (EEA), we ensure that appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs).

8. COOKIES AND TRACKING

We use cookies and similar technologies to:

• Enable essential functionality
• Analyze user behavior
• Improve user experience

You can manage cookie preferences via your browser settings.

9. DATA RETENTION

We retain personal data only for as long as necessary to fulfill the purposes outlined in this policy, or as required by law. Data related to merchant accounts will be deleted or anonymized within 90 days of account termination, unless legally obligated to retain it longer.

10. YOUR RIGHTS

Under GDPR, you have the right to:

• Access your data
• Rectify inaccurate or incomplete data
• Erase your data (“right to be forgotten”)
• Restrict or object to processing
• Data portability
• Withdraw consent at any time (where processing is based on consent)

To exercise your rights, contact us at [email protected].

11. CHILDREN'S PRIVACY

The Services are not intended for individuals under the age of 16. We do not knowingly collect personal data from children without verified parental consent.

12. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the effective date and, where appropriate, providing a more prominent notice.