Privacy notice
& policies

Novalink Enterprises Ltd. ("Novalink Enterprises", "we", "us", "our") provides Storefronts, a desktop operations management application, a modularized ERP solution whose capabilities (such as retail, hospitality, restaurant and warehouse,property operations) are designed to meet the needs of modern businesses. This notice explains how we collect, use and protect personal data, and how you can exercise your rights under applicable data protection laws, including the EU and UK General Data Protection Regulation (GDPR). The rights available to you, and the supervisory authority responsible for upholding them, vary by jurisdiction — these are set out under "Your data protection rights" below.

For the purposes of this notice, Storefronts is the data controller for personal data we collect about you when you visit this website, register for an account or contact us. When you use Storefronts to process information about your own customers, employees or suppliers, you are the data controller of that information and Storefronts is your data processor. The terms of our Data Processing Addendum (DPA) apply.

We process personal data only where we have a lawful basis under Article 6 of the GDPR. The table below summarises the purposes for which we process data and the corresponding legal basis.

We do not sell, rent or trade personal data. We share data only with vetted sub-processors who help us run the service, and only to the extent strictly necessary. Each sub-processor is bound by a written contract requiring confidentiality and GDPR-equivalent protections.

A current list of named sub-processors is available on request from privacy@novalinklabs.com. We notify customers of material changes to our sub-processor list before they take effect.

Where personal data is transferred outside the European Economic Area, the United Kingdom or Kenya to a country that has not received an adequacy decision, we rely on the European Commission's Standard Contractual Clauses (or the UK International Data Transfer Addendum) and carry out a transfer impact assessment to ensure your data continues to receive an essentially equivalent level of protection.

Under the GDPR and equivalent laws you have the following rights in relation to your personal data. To exercise any of these rights, contact privacy@novalinklabs.com. We will respond within one month and there is no charge for routine requests.

This marketing site uses a small number of strictly necessary cookies to remember your preferences (such as light or dark mode). We do not use third-party advertising cookies. If we introduce optional analytics cookies in future, we will request your consent through a cookie banner before any non-essential cookie is set.

Storefronts is a business application and is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact privacy@novalinklabs.com and we will delete it.

We protect personal data using appropriate technical and organisational measures consistent with industry good practice and Article 32 of the GDPR. This includes encryption of data in transit and at rest, strict access controls, continuous monitoring, regular security reviews and prompt application of security updates.

We operate a strict separation between the operator plane — the systems and staff that run the platform — and the customer plane, which holds tenant data. Operator-side access permits issuing invitations and managing platform-level configuration, but does not provide a path to read, modify or export any tenant's data. A compromise of operator credentials cannot, on its own, expose customer information.

For the protection of all our customers we do not publish details of our internal security architecture. If you have a contractual need for additional information, our security team is available to walk qualified customers through our controls under NDA.

If you believe you have discovered a vulnerability in Storefronts, please report it responsibly to security@novalinklabs.com. We acknowledge reports within 48 hours and will keep you informed as we investigate. We do not pursue legal action against researchers acting in good faith.

We may update this notice from time to time to reflect changes in our service, our sub-processors or applicable law. Material changes will be announced on this page and via in-app notice at least 14 days before they take effect. The "Last updated" date at the top of this page always reflects the current version.

By installing or using Storefronts you agree to these terms. The software is provided on an "as is" basis under the licence shipped with the build, without warranty of any kind to the maximum extent permitted by applicable law. Nothing in these terms limits any rights you have as a consumer that cannot lawfully be excluded.

You are responsible for the data you enter into the system, for keeping your credentials safe, and for complying with the laws of the jurisdictions in which you operate. You must not attempt to reverse engineer, decompile or interfere with the security of the application except to the extent expressly permitted by law.

We want you to feel confident choosing Storefronts, and we back that up. Your free Demo plan lets you explore everything before you pay — and if you upgrade and change your mind, you are covered by our 14-day money-back guarantee.

If you are not satisfied within 14 days of your first payment on a new paid subscription, just get in touch (see "Contact us" below) and we will refund that payment in full to your original payment method. Refunds are usually completed within a few business days, depending on your bank or card provider. This guarantee covers your first paid subscription; it does not apply to later renewals.

After the first 14 days you are free to cancel at any time — your subscription stays active until the end of the current billing period and simply does not renew, so you keep full access until then. We do not pro-rate partial billing periods. And nothing here limits any rights you may have under the consumer protection laws that apply to you.

You agree not to use Storefronts to sell goods or services that are illegal in your jurisdiction, to defraud customers, to launder money, to evade taxes, or to process the personal data of any individual unlawfully.

We reserve the right to suspend or terminate accounts that violate this policy or that put other customers at risk. Where possible we will give notice and an opportunity to remedy before suspension.

For privacy or data protection enquiries, including to exercise any of the rights set out in section 7, contact privacy@novalinklabs.com. For security reports, contact security@novalinklabs.com. For all other legal enquiries, contact legal@novalinklabs.com.

If you are not satisfied with our response, you have the right to lodge a complaint with the data protection supervisory authority in your country of residence.