Privacy Policy
Draft v1.0 — production publication requires final legal review and official company identifiers.
This policy describes the intended handling of personal data used to operate SBCMI Store. The production version must be aligned with the seller’s approved privacy governance and official contact details.
Data collected
The store may collect business contact information, billing details, company identifiers, tax identifiers, transaction records, technical logs, support communications and security evidence necessary to provide and protect the service.
Purposes
Data is used to process orders, verify business customers, administer licenses, provide support, issue invoices, meet legal obligations, prevent fraud, secure the platform and maintain transaction records.
Data minimization and retention
Only data reasonably needed for stated business and legal purposes should be collected. Retention periods must follow approved legal, tax, accounting, security and contractual requirements.
Sharing
Data may be shared with payment providers, hosting and infrastructure providers, professional advisers, government authorities or other processors where necessary and lawful, subject to appropriate contractual and security controls.
Security
Administrative, organizational and technical safeguards should be applied to protect personal data against unauthorized access, loss, alteration and disclosure.
Rights and contact
The production policy must identify the official privacy contact channel and explain applicable data-subject rights and request procedures.
