This policy explains what personal data BusinessSensor collects, why we collect it, how we use and protect it, and the rights you have over it. It applies to our websites and to the software services we provide.
Who we are
BusinessSensor is a trading name of Business Sensor Software Inc., based in Winnipeg, Manitoba, Canada, providing business management and accounting software to customers internationally. Where you use our software as a customer, we act as a data processor for the information you put into it, and you remain the data controller for that information. Where you interact with our own websites and marketing, we act as the data controller.
As a Canadian organisation we handle personal information in line with the Personal Information Protection and Electronic Documents Act (PIPEDA). Where the law of your own country gives you additional rights, those apply too.
Information we collect
We collect the following categories of information:
- Information you give us directly — your name, business name, email address, telephone number and any message content when you request a demo, contact us or sign up for a service.
- Account and billing information — the details needed to create, administer and bill a subscription.
- Information generated by using our services — logs of activity within the software, which we use to operate the service, investigate faults and maintain an audit trail for our customers.
- Technical information — IP address, browser type and pages visited, collected through our website analytics.
Customer data inside our software
Our customers use our software to record information about their own customers, guests, patients, staff and suppliers. That information belongs to our customer. We process it only to provide the service, to keep it secure, and where we are instructed to do so by the customer or required to by law. We do not sell it, and we do not use it to build advertising profiles.
How we use information
We use personal data to:
- Provide, operate, secure and support our software services
- Respond to enquiries, demo requests and support requests
- Administer subscriptions, billing and account management
- Send service communications about changes, incidents and security matters
- Send marketing communications where you have asked to receive them, which you can stop at any time
- Improve our products, using aggregated or anonymised information wherever possible
- Meet our legal, tax and regulatory obligations
Legal basis
We process personal data where it is necessary to perform a contract with you, where we have a legitimate interest in operating and improving our business that is not overridden by your rights, where you have given consent, and where we are required to process it by law.
Sharing information
We share personal data only with service providers who help us deliver our services — including hosting, payment processing, email delivery and customer support tooling — and only to the extent they need it to perform that function. We require them to protect it and to use it only for the purpose we specify. We may also disclose information where we are legally required to do so.
We do not sell personal data.
Payment information
Card payments are processed by regulated payment providers. We do not store full card numbers on our systems. The provider handling a payment processes that data under its own terms and security obligations.
International transfers
We operate internationally, and some of the service providers we rely on are located in other countries. Where personal data is transferred across a border, we take steps to ensure it remains protected to an equivalent standard, using the safeguards recognised by the law that applies to that transfer.
Personal data we hold is processed in Canada, which the European Commission recognises as providing an adequate level of protection for commercial organisations subject to PIPEDA. For transfers from the United Kingdom and the European Economic Area, that recognition is the basis we rely on.
Customers who require their data to remain within a particular country can run BusinessSensor on their own premises, in which case the data stays on infrastructure they control.
Retention
We keep personal data for as long as we need it for the purpose it was collected, and for as long as we are required to keep it for legal, accounting or regulatory reasons. Customer data held within our software is retained according to the customer’s subscription and instructions, and can be exported or deleted on request.
Security
We protect personal data using access controls, encryption of data in transit, role-based permissions within our software, and audit logging of activity. No system can be guaranteed completely secure, but we take the protection of information seriously and review our controls as our services change.
Your rights
Data protection law differs by country, and the rights available to you depend on where you are and which law applies. Subject to that law, you have the right to ask us for a copy of the personal data we hold about you, to have inaccurate data corrected, to ask us to delete data where we no longer need it, to object to or restrict certain processing, and to withdraw consent where processing is based on consent. Where the data concerned sits inside a customer’s system, we will direct your request to that customer, who is the controller of it.
To exercise any of these rights, contact us at info@businesssensor.com, or write to us at 13 Sandwalk Crt, Winnipeg, Manitoba, Canada.
Cookies and analytics
Our websites use cookies and similar technologies to make the site work and to understand how it is used. You can control cookies through your browser settings. Where required, we will ask for your consent before setting non-essential cookies.
Changes to this policy
We may update this policy as our services change. The date at the top of this page shows when it was last updated, and we will tell customers about significant changes.
Contact
If you have a question or a complaint about how we handle personal data, contact info@businesssensor.com. If you are not satisfied with our response, you may raise the matter with the relevant data protection authority.