1. Who we are

StockBaze by Elvarise Limited provides the Inventory Management Service. For privacy questions or requests, contact us at [email protected]

2. Information we process

• Account information: names, business or company name, email address, phone number, role and account status.
• Business data: information you or your authorised users enter into the Service, including products, customers, suppliers, purchases, sales, invoices, payments, expenses, inventory records and related notes.
• Subscription and plan information: selected plan, trial and subscription status, billing cycle, upgrade requests, complimentary access and payment or billing records recorded in the Service.
• Support and communications: information you provide when you contact us or submit a website enquiry.
• Security and technical information: session, authentication and security data, and technical information that may be recorded by our hosting or server infrastructure to operate, protect and troubleshoot the Service.

Passwords are stored using one-way password hashing. We do not need your plain-text password to operate your account.

3. How we use information

We process information to create and administer accounts, provide plan and subscription access, operate inventory and business-management features, send transactional messages, provide support, maintain security, prevent misuse, diagnose faults, improve reliability, and comply with applicable legal and accounting obligations.

4. Legal bases

Where applicable data-protection law requires a lawful basis for processing, our legal bases may include performance of a contract, legitimate interests in operating and securing the Service, compliance with legal obligations, and consent where consent is specifically requested. The appropriate basis depends on the purpose, the information involved and the laws that apply to the individual or processing activity.

5. Company data and our role

A company using the Service decides what customer, supplier, staff and other business information it enters. For personal data a customer company controls and asks us to process through the Service, that company will generally be the controller and Elvarise will generally act as its processor. Each customer is responsible for ensuring it has a lawful basis to enter and use that information.

6. Service providers and disclosures

We may use hosting, database, infrastructure, email and other service providers to operate the Service. They may process information only as needed to provide services to us and subject to appropriate contractual and security arrangements. We may also disclose information where required by law, to protect legal rights or security, or as part of a legitimate corporate transaction.

We do not sell personal data.

7. International transfers

Because the Service may be used and supported across different countries, personal data may be processed in jurisdictions other than the one in which it was collected. Where applicable law restricts international transfers of personal data, we will use an appropriate lawful transfer mechanism or safeguard required by that law.

8. Retention

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected, including providing the Service, maintaining security and records, resolving disputes and meeting legal, tax or accounting obligations. Different categories of information may therefore have different retention periods. When information is no longer required, we will take reasonable steps to delete or anonymise it.

9. Security

We use reasonable technical and organisational safeguards designed to protect information, including access controls, role-based permissions, password hashing, session protections and encrypted transport when the Service is deployed over HTTPS. No internet service can guarantee absolute security.

10. Your rights

Where applicable, you may have rights to request access, correction, deletion, restriction, portability or objection to certain processing, and to withdraw consent where processing relies on consent. Some rights are subject to legal exceptions and retention requirements.

To make a request, email [email protected] We may need to verify your identity before completing a request.

11. Complaints

Depending on where you live and the data-protection laws that apply, you may have the right to lodge a complaint with the privacy, data-protection or other supervisory authority responsible for your jurisdiction. We would appreciate the opportunity to address your concern first, but this does not affect any right you may have to contact the relevant authority.

12. Changes to this Policy

We may update this Privacy Policy as the Service, our practices or legal requirements change. The “Last updated” date will identify the current version. Where a change materially affects how we use personal data, we will take reasonable steps to provide appropriate notice.

13. Contact

Privacy questions and requests can be sent to [email protected]