Privacy Policy

Last Updated: 10/11/2025

This Privacy Policy describes how Nimbus Market LLC ("we," "our," or "us") collects, uses, and protects your information when you use Retail Loss Shield, our digital loss prevention platform for SMB retailers.

1. Information We Collect

1.1 Information You Provide

  • Account Information: Name, email address, business name, phone number
  • Business Data: Store locations, business type, annual revenue, number of employees
  • Pilot Program Data: Application information, consultation notes, implementation progress
  • Payment Information: Billing details processed securely through our payment partners
  • Communication Data: Messages, support requests, and feedback you send us

1.2 Information We Collect Automatically

  • Usage Data: How you interact with our platform, features used, time spent
  • Device Information: IP address, browser type, operating system
  • Analytics Data: Page views, click patterns, performance metrics
  • POS Integration Data: Transaction summaries, inventory levels (with your explicit consent)

1.3 Cookies and Tracking

We use cookies and similar technologies to enhance your experience, analyze usage patterns, and provide personalized content. You can control cookie preferences through your browser settings.

2. How We Use Your Information

2.1 Service Delivery

  • Provide and maintain Retail Loss Shield platform functionality
  • Process pilot program applications and manage consultations
  • Generate audit reports and shrink tracking dashboards
  • Deliver performance-based consulting services
  • Process payments and manage subscriptions

2.2 Communication

  • Send service-related notifications and updates
  • Provide customer support and respond to inquiries
  • Share educational content about loss prevention
  • Send marketing communications (with your consent)

2.3 Platform Improvement

  • Analyze usage patterns to improve platform features
  • Develop new tools and capabilities
  • Conduct research on retail loss prevention trends
  • Ensure platform security and performance

3. Information Sharing

We do not sell your personal information. We may share your information only in the following limited circumstances:

3.1 Service Providers

  • Payment Processors: To process subscription payments securely
  • Email Services: To send communications and notifications
  • Analytics Providers: To understand platform usage and performance
  • Cloud Infrastructure: To host and maintain our platform

3.2 Legal Requirements

  • Comply with legal obligations or court orders
  • Protect our rights, property, or safety
  • Prevent fraud or illegal activities
  • Respond to government requests (when legally required)

3.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction, with appropriate privacy protections maintained.

4. Data Security

We implement comprehensive security measures to protect your information:

  • Encryption: Data encrypted in transit and at rest using industry-standard protocols
  • Access Controls: Strict access limitations and authentication requirements
  • Regular Audits: Security assessments and vulnerability testing
  • Employee Training: Privacy and security awareness programs
  • Incident Response: Procedures for handling potential security breaches

Note: While we implement strong security measures, no system is 100% secure. We encourage you to use strong passwords and report any suspicious activity immediately.

5. International Data Transfers

As a US-based company with operations in Morocco, your data may be transferred internationally. We ensure appropriate safeguards are in place:

  • Standard contractual clauses for EU data transfers
  • Adequacy decisions where applicable
  • Consent-based transfers for specific purposes
  • Regular compliance assessments

6. Your Rights and Choices

6.1 General Rights

  • Access: Request a copy of your personal information
  • Correction: Update or correct inaccurate information
  • Deletion: Request deletion of your personal information
  • Portability: Receive your data in a structured format
  • Objection: Object to certain processing activities

6.2 Marketing Communications

You can opt out of marketing emails at any time by clicking the unsubscribe link or contacting us directly. Service-related communications are essential and cannot be opted out of.

6.3 Account Management

You can update your account information, change preferences, or delete your account through your account settings or by contacting our support team.

7. Data Retention

We retain your information only as long as necessary for the purposes outlined in this policy:

  • Account Data: Retained while your account is active and for 2 years after closure
  • Audit Data: Retained for 7 years for compliance and analysis purposes
  • Communication Records: Retained for 3 years for support and legal purposes
  • Analytics Data: Aggregated and anonymized after 2 years

8. Children's Privacy

Retail Loss Shield is designed for business use and is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children under 18.

9. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will notify you of significant changes through:

  • Email notification to your registered address
  • Notice on our website and platform
  • In-app notifications for active users

Continued use of our services after changes constitutes acceptance of the updated policy.

10. Contact Information

If you have questions about this Privacy Policy or our data practices, please contact us:

Nimbus Market LLC

Data Protection Officer: For EU residents with specific privacy concerns, you can contact our Data Protection Officer at dpo@nimbus-market.com

This Privacy Policy is effective as of 10/11/2025 and applies to all users of Retail Loss Shield.