Privacy Policy

1. Introduction

This Privacy Policy applies to all products and services offered by MicroTelecom Systems, LLC, and its affiliates (collectively, “MicroTelecom,” “MT,” “we,” “us,” or “our”), including our websites, point-of-sale solutions, software, mobile applications, and related services (the “Services”).

Your privacy is important to us. This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and the rights available to you under applicable privacy and data protection laws, including the EU General Data Protection Regulation (“GDPR”) and other global privacy frameworks.

This Policy does not apply to third-party products or services that you may use in connection with our Services (such as payment processors, hardware vendors, or internet service providers), which are governed by their own privacy policies.

2. Data Controller

For purposes of applicable data protection laws, including the GDPR, the data controller is:

MicroTelecom Systems, LLC
1000 N West Street, Suite 1200
Wilmington, DE 19801, USA

Privacy-related inquiries and requests may be submitted as described in the “Contact Us” section below.

3. Scope and Applicability

This Privacy Policy applies globally to merchants, customers, authorized users, business contacts, and website visitors. Where required by law, including for individuals located in the European Union, we process personal data in accordance with GDPR Articles 5, 6, and 13.

4. Personal Data We Collect

4.1 Identifying and Contact Information

• Name
• Business name
• Job title
• Email address
• Telephone number
• Billing and shipping contact details

4.2 Account and User Information

• Usernames and account identifiers
• Authentication data stored in hashed and non-reversible form
• Role-based permissions
• Support communications and correspondence

4.3 Technical and Usage Data

• IP address
• Browser type, language, and operating system
• Device identifiers
• Log files, timestamps, and diagnostic data

4.4 Transaction and Service Data

• Products or services purchased
• Point-of-sale configuration data
• Transaction metadata and system events (excluding full payment card numbers)

4.5 Cookies and Online Identifiers

• Cookie identifiers
• Analytics and preference data, subject to consent where required

We do not intentionally collect special categories of personal data (such as biometric, health, or religious data).

5. How We Collect Personal Data

We collect personal data:

• Directly from you when you create an account, purchase services, submit forms, contact support, or use our Services
• Automatically when you access or interact with our websites or applications
• From third-party authentication providers if you choose to register or log in using such services

You may refuse to provide certain information, but this may limit your ability to use some features of the Services.

6. Purposes and Legal Bases for Processing

We process personal data only where a lawful basis exists.

Where processing is based on consent, consent may be withdrawn at any time.

7. Data Retention and Subscription Data

We retain personal data only for as long as necessary to fulfill the purposes described in this Policy, including legal, accounting, and compliance requirements.

When a subscription is cancelled or expires, personal data associated with that subscription is retained only as necessary for operational, legal, or compliance purposes and is generally deleted or anonymized within a defined period following termination, unless retention is required by law.

8. Cookies and Tracking Technologies

We use cookies and similar technologies to operate, secure, and improve our websites.

• Strictly necessary cookies are used based on legitimate interests
• Analytics and preference cookies are deployed only after consent, where required
• Marketing cookies (if used) require explicit consent

Non-essential cookies are not deployed prior to obtaining consent. Additional information is available in our Cookie Policy.

9. Data Sharing and Service Providers

We may share personal data with trusted third-party service providers and affiliated operational entities acting on our behalf, including cloud hosting providers, payment processors, and support services.

Support services may involve limited, role-based access to customer-provided information through support systems when a customer initiates a support request. Such access is limited to necessary information only, does not include direct access to production databases, and is subject to access controls, logging, and contractual safeguards. We do not sell personal data.

10. International Data Transfers

Personal data is primarily stored and processed in the United States. In limited circumstances, authorized personnel located in other jurisdictions may access restricted personal data through controlled systems (for example, for customer-initiated support). Where required, international transfers are protected by appropriate safeguards, including EU Standard Contractual Clauses (SCCs) and data processing agreements.

11. Your Data Protection Rights

Where applicable under law, including the GDPR, you have the right to:

• Access your personal data
• Request correction of inaccurate or incomplete data
• Request deletion of personal data
• Request restriction of processing
• Object to processing based on legitimate interests
• Request portability of your personal data
• Withdraw consent at any time
• Lodge a complaint with a supervisory authority

12. Exercising Your Rights

Requests to exercise your privacy rights may be submitted in accordance with the process described in the “Contact Us” section below.

We may take reasonable steps to verify your identity before fulfilling a request. Only you, or a person legally authorized to act on your behalf, may submit a request related to your personal data.

We respond to verified requests within one month, as required by applicable law.

13. Automated Decision-Making

We do not engage in automated decision-making or profiling that produces legal or similarly significant effects.

14. Security Measures

We implement appropriate technical and organizational security measures, including encryption, access controls, logging, monitoring, and PCI-aligned controls where applicable.

Passwords are stored using industry-standard cryptographic hashing techniques and are not stored in plaintext or retrievable form. No system can be guaranteed to be completely secure.

15. Children’s Data

Our Services are offered to businesses only and are not directed to individuals under the age of 16. We do not knowingly collect personal data from children.

16. Business Transfers

If MicroTelecom is involved in a merger, acquisition, or sale of assets, personal data may be transferred as part of that transaction, subject to applicable privacy protections.

17. Links to Other Websites

Our website may contain links to third-party websites. This Privacy Policy applies only to our Services.

18. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on our website with an updated effective date.

19. Contact Us

For privacy-related questions or requests, please use the contact form available on our website or contact us by email at privacy@microtelecom.com.