GDPR Compliance and Cookie Policy
This page explains how sparkspheretechnologies approaches data-protection duties that resemble the EU and UK General Data Protection Regulation, together with the cookie practices on sparkspheretechnologies.site. It does not claim that the business is certified, registered under a particular number, or already appointed as a controller in those regions.
Sample storefront detail — street address, phone number, and mailbox are not confirmed for this record. This notice is published for sparkspheretechnologies at sparkspheretechnologies.site. It is not a certificate of legal compliance, and it should be reviewed by the business before it is treated as final.
Read this before you rely on it
sparkspheretechnologies publishes software for restaurants and retail. Some merchants and some guests may be in regions that apply the GDPR or a close relative of it. This page describes the practices we intend and the limits of what is confirmed. It is not a seal, not an adequacy decision, and not a statement that a representative in the European Economic Area or the United Kingdom has been appointed. Those appointments, if required, have to be confirmed by the business. Sample storefront detail — street address, phone number, and mailbox are not confirmed for this record.
Where this page says “personal data”, it means information that relates to an identified or identifiable person: an account holder, a staff member, a rider, or a guest. A menu item with no person attached is not personal data. A menu item saved against a named regular is.
The cookie practices below match the cookie policy. If you only want the list of browser storage, you can read that page. This page adds the rights-style requests a person in a GDPR-like region may make, and it explains who is likely to be responsible.
Who decides, and who processes
For the marketing site and the browser account, the publisher of {DOMAIN} is the party that decides to offer the form and the login. The legal name, address, and representative are not confirmed on this record. Until they are, requests can be sent through the contact form and should describe what you want done. Do not send copies of identity documents to an unconfirmed address.
For guest orders, staff attendance, and customer profiles inside a merchant workspace, the merchant is usually the party that decides why the data exists. The platform processes that data so the till, the kitchen, the stock count, the book, and the roster can function. A merchant should have its own notice for guests and staff. White-label presentation does not move that responsibility by itself. A partner who only implements settings is not, by that fact, the controller of the guest list.
If a future hosting supplier stores the workspace, that supplier is a processor or a sub-processor for the decisions already made. The supplier’s name will be added when the supplier is real. This page refuses to invent one.
Purposes and reasons
Account data is used to provide the login you requested. That is performance of the steps you asked for before a paid contract, and then performance of the contract if you take a plan. Form notes are used to answer the message you sent, which is also a step you requested.
Workspace sales, stock, and invoice layouts are used to perform the contract with the merchant. Staff shifts are used for the merchant’s employment and pay administration, which the merchant must ground in its own law. Guest profiles used for service — allergy notes, an open tab, a pickup name — are part of the service the guest asked for. Guest profiles used later for promotions need a reason the merchant can stand behind, such as a consent that was actually collected or another basis that the merchant’s adviser accepts. The platform should be configured so a promotion list is separate from a pure service list.
We do not rely on a legitimate interest in selling data. There is no sale of personal data on this site. Security logs, when a hosted service creates them, would be used to protect the accounts. That interest is limited to the protection itself.
Rights people may exercise
A person may ask whether we hold account data about them, ask for a copy, ask for a correction, ask for deletion, ask for restriction, and ask to receive a portable copy of what they gave us. On this demo, the practical way to see and correct the name and business is the account page. Deletion of the browser account is done by clearing site data. A password reset is the recovery flow, not a rights request.
An objection to the browser account is handled by deleting that account. An objection to a merchant’s promotion list should go to the merchant. A complaint may be made to a supervisory authority, but this page does not name one, because the establishment and any representative are not confirmed.
We answer a complete request, which names the account email and the action you want, within one month. A repeated or overly broad request may be narrowed. A first ordinary request is not charged.
International access and retention
Browser storage stays on the device. If a future host would move personal data across a border, the transfer tool is chosen with the host. None is claimed today.
Retention matches the privacy notice and the cancellation page. Account keys in the browser last until cleared. A hosted workspace keeps operational records for the period the merchant must operate and account for, then offers a thirty-day export after cancellation and removes the active copy. Marketing storage is not kept as a parallel archive of guests.
Cookies and similar storage
The site stores a session, a user record, form notes, and a short-lived recovery code, for the reasons in the cookie policy. These are required for the features you turn on. There is no advertising cookie and no social plug-in. A font file may load from a font host. You can block it.
Because non-essential advertising storage is not used, a consent banner that pretended to offer a choice about a tracker we do not run would be theatre. If a non-essential store is added, it will stay off until a person opts in, and this page plus the cookie policy will name it. Essential storage for a login you requested can be written because you asked to log in.
Children, security, and the commercial schedule
The website is not directed at children. Merchants should not build profiles of children in the CRM. Security on this demo is the device lock plus browser storage. That is not an adequate security measure for a real guest database. A hosted service will need a description of access control and encryption that this page will not fake in advance. No certification is claimed.
Nothing in a rights request changes the commercial schedule. Software access is still provisioned within one business day. Hardware still dispatches within three business days and typically moves inside India in four to eight business days. An unused kit can still be returned within fourteen days. Damage is still reported within forty-eight hours. A subscription start with no live sale can still be reversed within seven days. Approved refunds are still credited within ten business days in ₹. Ordinary cancellation still runs to the end of the paid period, with thirty days to export. A deletion request is about personal data, not a shortcut around a hardware return.
Send privacy requests through the contact form and write “privacy” in the topic or the message. Sample storefront detail — street address, phone number, and mailbox are not confirmed for this record.
Commercial schedule shared by this site
The same commercial numbers apply on every policy page of sparkspheretechnologies.site. Prices are in Indian rupees (₹). Tax is confirmed on the quote. sparkspheretechnologies does not name a payment processor, a bank, or a card network, and this storefront does not collect payment fields. Software access is provisioned within one business day after the order is accepted. Optional hardware kits, meaning a terminal, a receipt printer, or a cash drawer, are dispatched within three business days. Typical transit inside India is four to eight business days. Delivery outside India waits for written confirmation. A kit the carrier confirms as lost before delivery is marked is replaced or refunded at the kit price in ₹. An unused, complete kit in its original packaging may be returned within fourteen days of delivery. The merchant pays return freight unless the kit arrived damaged or differed from the quote. Damage or a mismatch must be reported within forty-eight hours. A hardware order cancelled before dispatch is refunded. After dispatch, the fourteen-day return rule applies. A subscription is reversed in full, in ₹, within seven days of the start if no live sale has been posted. A live sale is a closed ticket from real service, including one later voided. Labelled training tickets do not count. After a live sale, or after seven days, the current period is not refunded. Cancellation stops the next renewal. Access lasts to the end of the paid period, then an export remains for thirty days. Plan changes apply on the next billing date unless requested in the first seven days, when the difference in ₹ is settled at once. An unused kit may be exchanged within fourteen days, with any price difference settled before the replacement ships. Approved refunds are credited within ten business days to the method recorded on the order, or noted in ₹ if no method was recorded.
Questions about this page can be sent through the contact form. Sample storefront detail — street address, phone number, and mailbox are not confirmed for this record.