Privacy Policy

Last updated: 5 October 2026

This policy explains what personal data Blomset Enterprises Limited (RC 8133001), trading as Blomset Technologies, collects through BlomsetPOS and pos.blomsettechnologies.com, and how we protect it. We process personal data in line with the Nigeria Data Protection Act 2023 (NDPA) and the regulations of the Nigeria Data Protection Commission (NDPC).

1. The most important point: your shop's data stays on your computer

BlomsetPOS runs on your own computer. Your products, sales, customers, staff and reports are stored there — not on our servers. We only receive the limited information listed below.

2. What we collect

  • When you buy: business name, contact name, email address and phone number; the plan, amount and payment reference. Card and bank details are entered on Paystack's or Flutterwave's pages — we never see or store your full card number.
  • When BlomsetPOS checks its licence: the licence key, a fingerprint of the computer (a one-way code, not your computer's serial number), the computer's name, the BlomsetPOS version, the IP address, and counts of active staff, branches and tills (to apply your plan's limits).
  • Cloud backups (if your plan includes them): the backup file, which is encrypted on your computer with your backup password before it is sent. We cannot read its contents.
  • Remote reports (only if you switch them on): summary figures per branch — sales totals by hour and day, payment totals, top products, low-stock items, open and short shifts with cashier names, and refunds and voids with staff names and reasons. Not your full list of sales or customers.
  • Website use: standard server logs (IP address, browser, pages visited) and essential cookies needed for sign-in and checkout.

3. How we use it

  • to issue, activate and check licences, and to prevent misuse of licence keys;
  • to process payments, send receipts, licence keys and renewal reminders;
  • to store and return your cloud backups and show your remote reports to you;
  • to provide support, and to keep the Service secure;
  • to tell you about important changes. We only send marketing emails if you agree, and you can unsubscribe at any time.

Our legal bases are performing our contract with you, your consent (for remote reports and marketing), our legitimate interest in preventing fraud and keeping the Service secure, and legal obligations (such as tax records).

4. Who we share it with

We do not sell personal data. We share only what is needed with: payment processors (Paystack, Flutterwave), our hosting and storage providers, and our email delivery provider — all bound to protect it. We may disclose data where the law requires.

5. How long we keep it

  • Account, licence and payment records: for as long as you are a customer and for up to 6 years afterwards for tax and accounting purposes.
  • Cloud backups: the most recent 14 per licence; older ones are deleted automatically. Backups are deleted 30 days after cloud services end.
  • Remote report summaries: only the latest summary per branch is kept; each update replaces the previous one.
  • Licence check-in logs: up to 12 months.

6. Security

Connections to our servers are encrypted (HTTPS). Licences are digitally signed; backups are encrypted with your own password; access to our systems is restricted to authorised staff. No system is completely secure, but we work to protect your data and will notify you and the NDPC of any breach where the law requires.

7. Your rights

Under the NDPA you may ask to access, correct or delete your personal data, object to or restrict certain processing, withdraw consent (for example, switching off remote reports), and receive your data in a portable form. You can also complain to the Nigeria Data Protection Commission. To exercise your rights, email support@blomsettechnologies.com.

8. Data about your customers and staff

Information you enter about your own customers and staff stays on your computer and is under your control — you are responsible for using it lawfully. Where it reaches our servers (inside encrypted backups, or names in remote reports you switch on), we process it only to provide the Service to you.

9. Changes and contact

We may update this policy and will post the new version here. Questions: support@blomsettechnologies.com · +234 803 825 5056 · Blomset Enterprises Limited, Mailing Address: Baba Adisa, Ibeju-Lekki, Lagos State, Nigeria.