This policy explains what personal data Amar collects, how we use it, and your rights. Amar is ICO registered and built to GDPR standards.

1. Who is responsible

The Amar group is the data controller for the account data you give us, and a data processor for the customer data you process through Amar (see our DPA).

2. What we collect

Account details (name, business, contact, phone).

Usage data to run and improve the service.

Content you put into Amar — products, orders, documents, customers — which remains yours.

• Account & contact details
• Business and shop information
• Usage and device data
• Content and records you upload

3. How we use it

To provide and secure the service, support you, bill you, and improve Amar. We do not sell your personal data.

4. Legal bases

We rely on contract (to provide the service), legitimate interests (to secure and improve it), and consent (for optional communications).

5. Sharing

With trusted sub-processors who help run the service (e.g. hosting, payments), under strict agreements. We never sell data to third parties.

6. Security

Encryption in transit and at rest, tenant isolation, access controls and audit logging. See our Security page.

7. Retention

We keep data for as long as your account is active and as required by law, then delete or anonymise it.

8. Your rights

You can access, correct, export or delete your personal data, and object to certain processing. Contact us to exercise these rights.

• Access & portability
• Correction
• Erasure
• Objection & restriction

9. Contact & complaints

Email hi.amere@gmail.com. You can also complain to the ICO, the UK regulator.