Privacy and personal data
Privacy Policy and data protection
How Havana Systems collects, uses, stores and protects data across the website, enquiries and software services.
Who controls the data?
Havana Systems operates the website and services covered by this policy. Privacy enquiries can be sent to Support@havanasystems.com. For data placed in a client POS, CRM or ERP environment, the client may act as controller while Havana Systems acts as a service provider or processor under the agreement.
Data we collect
We may collect name, phone number, email, company name, enquiry details, consultation requests and quotation information. Technical data may include IP address, browser, device, visited pages, security logs and errors. Software environments may contain data entered by authorized users.
How data is obtained
Data is received through forms, email, phone, WhatsApp, quotations, consultations, implementation and support. Limited technical data may also be supplied by hosting, analytics, security or payment providers.
Why we use data
We use data to respond, prepare quotations and contracts, implement projects, operate accounts and permissions, provide support, send operational notices, improve performance and security, prevent misuse, meet accounting or legal obligations and send permitted marketing that can be opted out of.
Legal basis and consent
Depending on the context, processing is necessary to take requested steps, perform a contract, comply with law, pursue a legitimate security or service interest, or rely on consent. Consent may be withdrawn, without affecting processing already carried out lawfully.
Cookies and analytics
The website may use necessary cookies for sessions, protection and preferences, and may use measurement tools under the available settings. Browser controls can block cookies, but disabling necessary cookies may affect functionality.
Payments
Havana Systems does not store full bank-card details on its servers. Payment providers process payment information under their own policies. We may receive transaction references, payment status and invoice data required for accounting and support.
Service providers and disclosures
Minimum necessary data may be shared with hosting, email, backup, security, analytics, payment, messaging and support providers, or confidential advisers and contractors. Data may also be disclosed where required by law or a competent authority.
Client data inside Havana Systems products
The client determines the data, users and permissions in its system and remains responsible for lawful collection and use. Havana Systems does not use that data for unrelated independent purposes, and support access is limited to technical need and appropriate authorization.
International transfers
Some infrastructure providers may operate outside Egypt. Where data is transferred internationally, we seek providers and safeguards appropriate to the applicable legal and contractual requirements and minimize the data involved.
Security
We use reasonable technical and organizational measures such as access control, encryption in transit where available, backups, security logging, updates and restricted staff access. No electronic system is risk-free, and users must protect their devices and credentials.
Retention
Data is kept only for the period needed to provide services, perform contracts, meet accounting and legal duties and resolve disputes. Retention varies by data type and service. Data is then deleted, anonymized or placed in restricted archives where retention remains necessary.
Your rights
Subject to applicable Egyptian law, including Personal Data Protection Law No. 151 of 2020 where applicable, individuals may request access, correction, deletion where no lawful retention reason remains, restriction, objection to marketing, withdrawal of consent or a usable copy where technically available. Identity verification may be required.
Children, external links and updates
Services are intended for businesses and adults and are not designed to knowingly collect children’s data. External links are governed by their own policies. This policy may be updated when services or legal requirements change; the current date appears at the top of the page.
Have a privacy request or question?