BUSINESS MANAGEMENT SYSTEM (BMS) — PRIVACY POLICY
Version: 2026-09-22-v4
Operator: CHRISTOVEMPIRE LTD

BMS processes account, billing, security, support, localization and service-use information needed to provide and protect the service. A subscribing business is generally the controller of personal data it enters into BMS; BMS acts as processor for that tenant content and as controller for BMS's own account, billing, security, legal-compliance and direct-service relationship data.

DATA WE PROCESS
Depending on use, BMS may process:
- account identity, administrator email and business contact information;
- subscription, payment reference, provider, charged amount, currency and exchange-rate metadata;
- authentication, rate-limit, audit, security, recovery and technical logs;
- tenant content such as products, prices, inventory, sales, branches, users, invoices and audits;
- localization preferences such as locale, time zone, interface language, print/invoice language and legal-page language;
- privacy/support requests and account-recovery metadata.

PAYMENT INFORMATION
Payment checkout and card/payment credentials are handled by the selected payment provider. BMS stores only the payment and subscription metadata needed to verify, reconcile and administer the service.

ACCESS DESIGN
BMS does not provide platform staff with a normal customer-record browsing or support-impersonation console. Customer sales, inventory, staff, branch, report and audit data are scoped to the authenticated business account and permitted role/branch. Account recovery uses verified Main Admin email links; support-set passwords are disabled. Exceptional technical access may occur only where necessary for a documented security incident, customer-authorized restoration, legal obligation or backup recovery and should be limited to the minimum required.

BROWSER, EDGE AND ACCESS SECURITY
BMS serves browser-facing pages over HTTPS with HSTS and uses a Content Security Policy to restrict executable content, framing, base URLs, object embedding and form destinations. Browser write requests are restricted to the BMS origin except for specifically designated external payment-provider callbacks/webhooks. Login attempts are rate-limited, oversized mutation requests are rejected, and tenant/role/branch authorization is enforced server-side. These safeguards reduce risk but cannot guarantee absolute security.

LOCALIZATION AND DATA INTEGRITY
Changing a business or branch language, locale, time zone, print language or legal-page language changes presentation and formatting. BMS does not rewrite canonical products, sales, inventory, quantities, user identifiers, audit records or other shared operational data merely because a language preference changes.

PURPOSES AND LEGAL BASES
Depending on applicable law, processing may rely on contract performance, legitimate interests such as service security and fraud prevention, legal obligations, and consent where required. BMS does not sell personal information or use tenant data for cross-context behavioral advertising.

INTERNATIONAL USE
BMS may be used internationally. Where cross-border transfer rules apply, BMS and its providers will use legally recognized transfer mechanisms and supplementary safeguards as required. Mandatory local privacy rights remain applicable even where the contractual terms select Nigerian law.

PRIVACY RIGHTS
Depending on applicable law, individuals may have rights to information/notice, access, correction, deletion/erasure, restriction, portability, objection, withdrawal of consent, non-discrimination and rights concerning automated decisions. Requests may be submitted through /legal-center.html. For tenant content, the subscribing business is usually the controller and may need to handle the request; BMS will assist as processor where required.