1. Introduction
Pama Technologies Ltd. ("Pama", "we", "our", or "us") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at pamatechnologies.com or use any of our products — including Pamastore, PamaPOS, Track by Pama, and Ikrea.
Please read this policy carefully. By using our website or any PAMA product, you agree to the practices described here. If you do not agree, please discontinue use immediately.
2. Information We Collect
2.1 Information You Provide Directly
- Contact forms: name, email address, company name, and message content.
- Pamastore accounts: student ID / institutional email for verification, product listings, transaction history.
- PamaPOS accounts: business name, owner details, inventory data, sales records, and payment information.
- Track by Pama: habit names, goal descriptions, schedule preferences, and productivity notes.
- Ikrea: display name, profile bio, community posts, and interaction data.
2.2 Information Collected Automatically
When you visit our website, we may automatically collect:
- IP address and approximate geographic location (country / city level)
- Browser type and version, operating system, device type
- Pages visited, time spent on pages, referral URL
- Click and navigation patterns (via analytics services)
2.3 Cookies and Tracking Technologies
We use first-party and third-party cookies for session management, analytics (e.g., page view counts), and user preference storage (e.g., theme selection). See our Cookie section for full details. You can control cookie settings via your browser.
2.4 Offline Data (PamaPOS)
PamaPOS stores transaction data locally on the device when offline. This data is encrypted at rest and synced securely to PAMA cloud servers when connectivity is restored. No unencrypted POS data is ever transmitted.
3. How We Use Your Information
We use collected information to:
- Respond to your inquiries and provide customer support
- Create and manage user accounts across our products
- Process marketplace transactions on Pamastore and retail sales on PamaPOS
- Sync and back up offline POS data securely
- Deliver habits, streaks, and analytics within Track by Pama
- Facilitate community engagement on Ikrea
- Generate anonymised, aggregated data for AI context layer (Ikrea) — individual identity is never exposed to AI systems
- Send product updates, newsletters, and marketing communications (only with your explicit consent; unsubscribe at any time)
- Improve website performance and user experience via analytics
- Detect, prevent, and respond to fraud, abuse, or security threats
- Comply with applicable legal and regulatory obligations
4. Legal Basis for Processing (GDPR)
For users in the European Economic Area (EEA) or UK, our legal bases are:
- Consent: sending marketing communications; placing non-essential cookies.
- Contractual Necessity: processing transactions, maintaining accounts, providing services you requested.
- Legitimate Interests: improving our products, detecting fraud, ensuring security.
- Legal Obligation: complying with applicable laws and regulations.
5. How We Share Your Information
We do not sell your personal data. We may share your information only in these circumstances:
- Service Providers: vetted third-party vendors who process data on our behalf (cloud hosting, payment processors, email delivery, analytics). All providers are bound by data-processing agreements.
- Legal Requirements: if required by law, court order, or to protect the rights, property, or safety of Pama, our users, or the public.
- Business Transfer: in the event of a merger, acquisition, or sale of assets, users will be notified before personal data is transferred or becomes subject to a different privacy policy.
- With Your Consent: in any other case, only with your explicit prior consent.
6. Data Retention
- Contact form submissions: retained for 12 months, then deleted.
- Account data: retained for the lifetime of the account plus 6 months after deletion request.
- Transaction records (Pamastore / PamaPOS): retained for 7 years to meet financial record-keeping obligations.
- Analytics data: aggregated and anonymised after 26 months.
- POS offline sync logs: deleted from local device cache within 30 days of successful sync.
7. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access: request a copy of your personal data.
- Rectification: correct inaccurate or incomplete data.
- Erasure ("Right to Be Forgotten"): request deletion of your data, subject to legal retention requirements.
- Restriction: ask us to pause processing while a dispute is resolved.
- Portability: receive your data in a structured, machine-readable format.
- Objection: object to processing based on legitimate interests or direct marketing.
- California (CCPA): right to know, right to delete, right to opt out of sale (we do not sell data).
To exercise any of these rights, email us at support@pama.page. We will respond within 30 days.
8. International Data Transfers
Pama Technologies Ltd. is headquartered in Nigeria. If you access our services from the EEA, UK, or other jurisdictions with data-transfer restrictions, your data may be transferred to and processed in countries outside your region. Where required, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission to provide appropriate safeguards.
9. Children's Privacy
Our services are not directed at children under the age of 13. We do not knowingly collect personal data from anyone under 13. If we become aware that we have inadvertently collected such data, we will delete it immediately. If you believe we hold data about a child, contact us at support@pama.page.
10. Security
We implement industry-standard technical and organisational measures, including:
- TLS 1.3 encryption for all data in transit
- AES-256 encryption for data at rest
- Role-based access control (RBAC) limiting staff access to data
- Regular security audits and penetration testing
- Incident response and breach notification procedures
No method of electronic transmission or storage is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee absolute security.
11. Third-Party Links
Our website may contain links to external websites. Once you leave our site, we have no control over the content or privacy practices of those sites. We encourage you to review the privacy policy of every site you visit.
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we make material changes, we will update the "Last Updated" date at the top of this page and, where appropriate, notify registered users by email.
Continued use of our services after changes are posted constitutes your acceptance of the updated policy.
13. Contact Us
For privacy-related questions, data requests, or to report a concern:
- Email: support@pama.page
- General: hello@pama.page
- Address: Pama Technologies Ltd., Lagos, Nigeria
We are committed to working with you to resolve any privacy concerns promptly.