This draft explains the intended privacy model for My Business Control Center. The final notice must be completed with the legal entity, contact details, final processors, launch territories and actual retention periods before launch.
Account and business profile information, team-user information, customer and lead records, bookings, orders, payments and expense records, delivery/tracking information, communications preferences, security/audit information and support information.
To provide the service, secure accounts, manage customer-requested features, support users, comply with legal obligations and, where permitted, send optional marketing. Each production processing purpose must have a documented lawful basis.
The final version will name or link to our current hosting, database/authentication, maps, communications, payment and AI providers as applicable.
Depending on the circumstances, individuals may have rights of access, correction, erasure, restriction, objection, portability and complaint to the ICO. The Privacy Centre is being designed to support these workflows.
We aim to keep personal data only for as long as needed for the stated purpose, legal obligations and legitimate business needs. Final retention schedules will be documented before launch.
Controller/privacy contact details will be inserted before launch.