Privacy policy

Who we are

GreenFinch is software for small shops, built and run by Conroe Information Technology ("we"). This policy covers greenfinch.shop, the shop owner portal, and every shop storefront hosted on GreenFinch.

Two kinds of people use GreenFinch. Shop owners and their staff run a shop in the portal. Shoppers use a shop's storefront to buy, book and earn rewards. For shopper information, the shop decides what it is used for and we process it for the shop. For shop owner and staff accounts, we decide.

What we collect

Shop owners and staff: name, email address, a password (stored only as a one-way hash), the shop's name, address, phone, opening hours and branding, and everything the shop enters about its products, services, staff, customers, orders and bookings.

Shoppers: name, email address and a password if you create an account, your orders, bookings, loyalty points and any messages you send the shop. Checking out as a guest stores the email address and order without an account.

Payments and text messages run through the shop's own Stripe and Twilio accounts. We do not store card numbers.

Technical data: the requests your browser makes to our servers, including IP address and time, and error reports from the apps, kept so we can keep the service running and secure.

What we use it for

To run the service: sign you in, show a shop its orders and bookings, show a shopper their history, and send the emails the service depends on, such as account verification, password resets, team invitations and order links.

To keep it safe: detect abuse, investigate errors and protect accounts.

We do not sell personal information, we do not show advertising, and the apps contain no third-party analytics or tracking scripts.

Who else sees it

The shop you deal with sees your orders, bookings, loyalty balance and messages with them.

Service providers that run parts of GreenFinch for us: Microsoft 365 sends our email, and our servers are hosted by [hosting provider and country to confirm]. A shop that connects Stripe or Twilio shares the data those services need with them under their own terms.

We disclose information when the law requires it.

Browser storage

The apps keep your sign-in session and your shopping cart in your browser's local storage so they survive a page reload. We do not use advertising or tracking cookies.

How long we keep it

Account and shop data stays while the account is open. Server logs are kept for [retention period to confirm] and backups for [backup retention to confirm]. When a shop closes its account we delete or anonymise its data within [period to confirm], except where the law requires us to keep records.

Your choices

You can see and correct most of your information in your account. You can ask us for a copy of your data, or to delete it. Shoppers should start with the shop, since the shop controls its customer records; we will help the shop answer.

Requests go to [contact address to confirm]. We answer within 30 days.

Children

GreenFinch is not meant for children under 13 and we do not knowingly collect their information.

Changes

When this policy changes in a way that matters, we will update the date above and tell shop owners by email before the change takes effect.