Privacy Policy

We collect information you provide directly when you register for Burp, book a demo, or contact our support team. This includes:

• **Business information** — restaurant name, trade licence number, VAT/TRN registration number, and business address. • **Contact details** — name, email address, phone number, and job title of authorised users. • **Transaction data** — point-of-sale records, order history, payment method summaries, and VAT invoice data processed through the platform. • **Usage data** — log files, IP addresses, browser type, device identifiers, and feature interaction data collected automatically as you use the platform. • **Financial information** — billing details and subscription payment records (full card numbers are never stored; payments are processed by our PCI-DSS compliant payment provider).

We use the information we collect to:

• Provide, maintain, and improve the Burp platform and its features. • Process transactions and send related billing and subscription notices. • Generate VAT-compliant invoices and reports as required under UAE Federal Tax Authority regulations. • Respond to support requests and provide technical assistance. • Send product updates, maintenance notices, and, where you have opted in, marketing communications. • Comply with applicable UAE laws, including the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL) and Federal Tax Authority requirements. • Detect, investigate, and prevent fraudulent activity or misuse of the platform.

We do not sell, rent, or trade your personal information. We may share your data only in the following circumstances:

• **Service providers** — trusted third-party vendors who help us operate the platform (e.g., cloud hosting, payment processing, email delivery) under strict data processing agreements. • **Legal obligations** — where disclosure is required by UAE law, a court order, or a request from a government authority with jurisdiction. • **Business transfers** — in connection with a merger, acquisition, or sale of assets, where the receiving party agrees to honour this Privacy Policy. • **With your consent** — for any other purpose disclosed to you at the time of collection, with your explicit agreement.

We retain your personal and business data for as long as your subscription is active and for a period of five (5) years thereafter, in line with UAE commercial and tax record-keeping requirements. You may request earlier deletion of personal data that is not subject to a legal retention obligation by contacting us at sales@verticserp.com.

We implement industry-standard technical and organisational measures to protect your data, including:

• TLS encryption for all data in transit. • Encrypted storage for data at rest. • Role-based access controls limiting data access to authorised personnel. • Regular security assessments and vulnerability testing.

No method of transmission or storage is 100% secure. We encourage you to use strong passwords and to notify us immediately if you suspect any unauthorised access to your account.

Under the UAE PDPL and applicable data protection laws, you have the right to:

• **Access** — request a copy of the personal data we hold about you. • **Rectification** — request correction of inaccurate or incomplete data. • **Erasure** — request deletion of your personal data, subject to legal retention obligations. • **Restriction** — request that we limit processing of your data in certain circumstances. • **Objection** — object to processing based on legitimate interests. • **Portability** — request your data in a structured, commonly used, machine-readable format.

To exercise any of these rights, contact us at sales@verticserp.com. We will respond within 30 days.

Burp uses cookies and similar technologies to keep you logged in, remember your preferences, and analyse platform usage. You can control cookie settings through your browser. Disabling certain cookies may affect platform functionality. We do not use cookies for cross-site advertising tracking.

The platform may integrate with third-party delivery aggregators, payment gateways, and accounting tools. Each third party operates under its own privacy policy. We are not responsible for the data practices of third-party services you choose to connect to Burp.

Burp is a business-to-business platform intended for use by organisations and their adult employees. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that we have inadvertently collected such data, we will delete it promptly.

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or via an in-platform notice at least 14 days before the changes take effect. Continued use of the platform after the effective date constitutes acceptance of the updated policy.

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact:

Vertics Software LLC Mohamed Al Meraikhi (Transem) Building, Ground Floor Al Saddah 5th St, Musaffah, M2 PO Box 45958, Abu Dhabi, UAE

Email: sales@verticserp.com Phone: +971 2 627 7454