1. Overview
Garlic ("we", "our", "us") is developed and operated by Shrimp Products Ltd. This Privacy Policy explains how we collect, use, store, and protect information when you use our hospitality stock management software and related services. By using Garlic, you agree to the terms of this Privacy Policy.
2. Information We Collect
We may collect the following types of information:
| Category | Examples | Purpose |
|---|---|---|
| Business Information | Business name, email address, contact details | To create and manage your business account; for support or communication |
| Account Identifiers | User ID, business ID | To maintain secure access to your account and services |
| Business Data | Inventory data, sales records, supplier information, orders, receipts, invoice line items, quantities, and prices | To provide inventory, purchasing, reporting, and related hospitality services |
| Financial Information | Payment details (processed by Stripe) | To process payments and subscriptions securely |
We do not collect location data, health data, photos, contacts, or other sensitive personal information unrelated to business operations.
3. How We Use Your Information
- Provide, operate, and maintain Garlic and its hospitality management services.
- Process transactions and manage billing (via Stripe).
- Communicate with you about your business account (transactional emails via Resend).
- Improve software stability, performance, and user experience.
- Secure and monitor system operations (via Vercel, MongoDB).
- Provide business analytics and reporting for your hospitality operations.
- Use your business's own purchasing and inventory data within your account to forecast requirements and recommend relevant products, suppliers, purchasing opportunities, or Garlic offers.
We may create aggregated and anonymized insights from Business Data, including product demand, purchasing volumes, price ranges, supplier coverage, and seasonal trends. We may use those insights to improve and develop the Service; understand market demand; plan products that Garlic may procure, offer, sell, or distribute; and develop procurement, marketplace, collective-purchasing, and first-party commerce services.
Aggregated and anonymized insights will not identify you, your business, or your locations. We do not disclose a customer's individual order volumes, negotiated prices, or supplier terms to other customers or suppliers, except where necessary to fulfil an order the customer places, where the customer instructs us to do so, or where required by law.
We do not sell or rent customer data, and we do not operate as a data broker. Garlic may sell goods or services selected or developed using aggregated and anonymized market insights; this does not involve selling or disclosing the underlying customer data.
4. Data Sharing and Third-Party Services
We do not sell or rent customer or business data. We rely on trusted third-party providers to operate Garlic safely and effectively:
- Stripe – Payment processing – stripe.com/privacy
- Resend – Transactional email delivery – resend.com/privacy
- Vercel – Hosting and deployment – vercel.com/legal/privacy-policy
- MongoDB – Data storage – mongodb.com/legal/privacy-policy
- SumUp – POS system integration – sumup.com/en-gb/privacy
These providers process data on our behalf under strict confidentiality and security obligations.
5. Data Storage and Retention
- Business data is securely stored on our servers (hosted via MongoDB and Vercel).
- We retain business data indefinitely, unless you request its deletion.
- Upon account deletion, we permanently remove or anonymize your data within a reasonable time frame.
6. Data Security
We take appropriate security measures to prevent unauthorized access, disclosure, modification, or destruction of business data. This includes encrypted storage, secure access controls, and regular system monitoring.
7. Your Rights
Under UK and EU data protection laws, you have the right to access the business data we hold about you, request correction or deletion, withdraw consent where applicable, and lodge a complaint with your local data protection authority. To exercise these rights, contact us.
8. Children's Privacy
Garlic is not directed to children under 13, and we do not knowingly collect information from them. If we learn that a child under 13 has provided personal data, we will delete it promptly.
9. International Data Transfers
As we use cloud-based infrastructure (Vercel, MongoDB, Stripe, etc.), your data may be processed outside the UK. When this occurs, we ensure adequate safeguards are in place, consistent with UK GDPR requirements.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted within the application and on our website with a revised "last updated" date.
11. Contact Us
If you have any questions or concerns about this Privacy Policy, please contact us.
Company: Shrimp Products Ltd
Jurisdiction: United Kingdom