Privacy Policy
Last updated: 24 October 2026
This policy explains what personal data we collect through this website, why we collect it, who handles it for us, how long we keep it and what your rights are. It covers this marketing website only, not the NexaPOS application itself.
1. Who we are
This website is operated by [COMPANY LEGAL NAME] (“NexaPOS”, “we”, “us”), [Bonaberi, Douala, Cameroon — confirm full registered address with lawyer]. We are responsible for the personal data described here. To ask a question about your data, write to [DATA CONTACT EMAIL].
2. What we collect and why
When you request a demo
- Your name, work email, phone or WhatsApp number, business name, business type, number of branches and terminals, the system you use today, your main challenge and your preferred demo time.
- Which campaign or link brought you to the site (for example the utm_source, utm_medium and utm_campaign values in the link).
- Whether you agreed to the privacy notice and whether you asked for product and retail updates.
We use this to reply to your request, arrange the demo and follow up. We send a confirmation email to you and a notification to our sales team. If you tick the updates box, we also add you to our email list.
When you send a message through the contact form
Your name, email, phone number (optional), subject (optional) and message, plus the campaign or referring page, if any, that brought you to the site. We use it to answer you. Our sales team receives it by email.
When you subscribe to retail updates
Your email address and your agreement to receive updates. We use it to send product and retail updates. You can withdraw at any time (see section 7).
When you create an account
Your name, email address and a password. We never store your password itself, only a one-way encrypted hash of it. We use these details to let you sign in to the resource area of this website, and we send you a welcome email. This account is separate from the NexaPOS application.
Security and spam protection
To stop spam and abuse of our forms we keep a short-lived record made from your IP address. We do not store your IP address itself: it is combined with a secret value and turned into a one-way code, and these records are deleted after 24 hours. Our hosting provider also keeps ordinary server logs (see section 4).
Website use and cookies
With your permission, we use Google Analytics to measure how the website is used and how our campaigns perform. See section 8.
3. Why we are allowed to use your data
We handle personal data in line with [APPLICABLE DATA PROTECTION LAW – confirm with lawyer]. Depending on what you do on the site, we rely on:
- Your consent: for marketing emails and for optional analytics and marketing cookies. You can withdraw it at any time.
- Your request: to answer your demo request or message and to create the account you asked for.
- Our legitimate interests: keeping the website secure, preventing spam and running our business, balanced against your rights.
4. Who handles your data for us
We use these service providers. They process data on our behalf and only for the purposes below.
| Provider | What they do for us | Data involved | Hosted in |
|---|---|---|---|
| Neon | Database that stores form submissions and accounts | Everything described in section 2 | [NEON REGION] |
| Brevo | Sends our emails and keeps our email list | Name, email and, in notifications to our team, phone and message text | [BREVO REGION] |
| Vercel | Hosts the website and runs its server code; keeps server logs | Everything you send to the site, plus IP address and browser details in logs | [VERCEL REGION]; its network is global |
| Google (Analytics) | Website and campaign measurement, only if you accept cookies | Device, page and usage information, only after you accept analytics cookies. No other Google tags are used | Global |
If you click the WhatsApp button, you leave this website and WhatsApp (Meta) handles what you send under its own privacy policy. We do not sell your personal data.
5. Transfers outside Cameroon
The providers above store or process data on servers outside Cameroon. When you use this website, your data may therefore be transferred to and processed in other countries. We protect these transfers with [TRANSFER SAFEGUARDS – confirm with lawyer].
6. How long we keep your data
| Data | Kept for |
|---|---|
| Demo requests and sales leads | 24 months from the day we receive it, then deleted automatically by a daily clean-up |
| Contact messages | 24 months from the day we receive it, then deleted automatically by a daily clean-up |
| Email list subscriptions and consent records | Subscriptions: until you unsubscribe, then deleted by the next daily clean-up. Consent records: [how long consent records are kept as evidence – confirm with lawyer] |
| Website accounts | [RETENTION PERIOD – accounts] |
| Spam-protection records | 24 hours |
| Server logs kept by our hosting provider | [RETENTION PERIOD – hosting logs] |
7. Your rights and how to use them
You can ask us to:
- tell you what personal data we hold about you and give you a copy;
- correct data that is wrong or incomplete;
- delete your data;
- limit how we use your data, or object to a use;
- stop sending you marketing emails and withdraw any consent you gave.
The easiest way is the form on Your data rights. You can also email [DATA CONTACT EMAIL] from the address you used on the site, and tell us what you want. We may ask you to confirm who you are before we act. We will reply within [RESPONSE TIME]. Deleting your data means we also remove it from our email provider. If you are not happy with our answer you can complain to [SUPERVISORY AUTHORITY – confirm with lawyer].
8. Cookies and analytics
Every cookie and browser storage item this website uses is listed, with its purpose and how long it lasts, in our Cookie policy. In short:
- Strictly necessary: your cookie choice, your language choice (a cookie named
nexapos_lang, one year) and, for NexaPOS staff only, the admin sign-in cookies. - Functional: choices you make on the site (display settings, setup checklist progress, the chat assistant’s conversation), kept in your own browser and never sent to us.
- Campaign source: your browser’s session storage keeps the campaign link that brought you to the site until you close the tab. It is sent to us only if you submit a form. [CONFIRM WITH LAWYER: whether this needs consent before it is stored]
Optional: analytics
We use Google Analytics. Nothing is requested from Google until you choose Accept in the cookie banner. If you choose Reject, Google Analytics is never loaded and we delete any Google Analytics cookies already set on your browser. The cookies it sets after you accept (named _ga and _ga_ followed by an ID) last up to 2 years, Google’s default.
You can change your mind at any time using Cookie settings in the footer of any page. The events we send to our analytics contain page names, button locations and counts. They never contain your name, email or phone number, or what you type into a form.
9. How we protect your data
- The website is served over an encrypted (HTTPS) connection.
- Passwords are stored only as one-way hashes, never in plain text.
- Everything you submit is checked on our server before it is stored.
- Forms are protected against spam and abuse, and we do not store your raw IP address for that purpose.
- Your text is escaped before it is placed into emails sent to our team.
- Our access keys and secrets are kept outside the website’s source code.
No system is completely secure. If we learn of a breach that affects your data, we will act as the law requires.
10. Children
This website is for businesses. It is not directed at children, and our forms are meant for adults acting for a business. We do not knowingly collect personal data from anyone under 18. If you believe a child has sent us personal data, tell us through Your data rights and we will delete it.
11. Changes to this policy
We may update this policy. The date at the top shows when it last changed. If a change is significant, we will tell you on this website.
12. Contact
[COMPANY LEGAL NAME], [Bonaberi, Douala, Cameroon — confirm full registered address with lawyer]. Email [DATA CONTACT EMAIL]. You can also read our Terms of Use.