Privacy Policy

Two roles

For information about our customers’ accounts — people who sign up, business owners, staff users and billing contacts — we decide how the information is used and are responsible for it under this policy.

For information our customers enter into the Service — such as their sales, retail customers, employees, and, for Plus Pharma, patients, prescribers and prescriptions — we process it on behalf of the business that entered it, under our Data Processing Addendum. That business decides why and how the information is used. If you are a customer or patient of a business that uses Retaiva, contact that business about your information; we will assist it in responding.

Information we collect for our own purposes

• Account information: name, email address and sign-in details. Passwords are handled by our authentication provider; we do not see or store them.
• Security information: two-step verification status, session records, IP address and browser details at sign-in and when legal terms are accepted, and records of failed sign-in attempts used to prevent abuse.
• Business information: business name, store addresses, phone number and registration details entered during setup.
• Billing information: plan, subscription status and identifiers received from our payment provider. Card details are entered with Freemius and are not received by Retaiva.
• Device information: for the Android POS application, device manufacturer and model, Android and app version, and an installation identifier used to register the device to a store.
• Usage and error information: record counts, storage used, and technical error reports. Error reports are designed to exclude the contents of business, customer and patient records.
• Support communications: messages you send to us and our replies.

Information processed for pharmacies (Plus Pharma)

Pharmacies using Plus Pharma may record patient names, dates of birth, contact details, addresses, allergy status and pharmacy notes; prescriber details; prescriptions, dispensing records and prescription documents. Access within a pharmacy is limited by staff role, and access to patient records is logged. We use this information only to provide the Service to that pharmacy.

How we use information

We use the information we control to:

• create and secure accounts and provide the Service;
• process subscriptions, prevent fraud and meet accounting obligations;
• send service messages, such as verification codes, security notices and policy changes;
• provide support and investigate problems; and
• comply with legal obligations and enforce our terms.

We do not sell personal information, use it for advertising, or use customer records to train artificial intelligence models.

Sharing

We share information with service providers that help us operate the Service, listed on the Subprocessors page, under agreements that limit their use of it. We may also disclose information where required by law or to protect rights, safety and security, and as part of a merger or sale of our business subject to this policy.

Where information is stored

The Service is hosted by our cloud provider in the United States. Information entered into Retaiva, including pharmacy records, is therefore stored and processed outside Trinidad and Tobago. Our payment and email providers may process information in other countries as described in their own policies. We take reasonable steps to ensure providers protect information to the standard described here.

Security

Information is encrypted in transit and at rest in our database and document storage. Access is limited by role, sensitive actions are recorded in an audit history that ordinary users cannot alter, and two-step verification is available to every user. No method of transmission or storage is completely secure. See Security for more detail.

Retention

We keep account and billing information while the account is active and afterwards for as long as needed to meet legal, accounting and dispute-resolution obligations. Customer records are kept according to the customer’s instructions and any retention periods it records in the Service; regulated pharmacy records are not deleted while a retention period is unconfirmed or a legal hold applies. Database backups are kept for up to 7 days.

Your choices and rights

Trinidad and Tobago’s Data Protection Act, Chap. 22:04, has been brought into force in part. Regardless of which provisions currently apply, we follow its general privacy principles, including allowing individuals to request access to and correction of their personal information.

To make a request about your Retaiva account, contact support@retaivatt.com. We may need to verify your identity. For records held by a business that uses Retaiva, please contact that business directly.

Cookies

We use only cookies and browser storage needed to sign in, keep the Service secure and remember basic preferences. We do not use analytics or advertising cookies. See the Cookie Policy.

Children

The Service is intended for businesses and is not directed to children. Pharmacies may record information about patients of any age as part of their professional services; that information is processed on the pharmacy’s behalf.

Changes

We will post updates to this policy with a new version date and notify business owners of material changes in the Service.

Contact

Privacy enquiries: support@retaivatt.com. Postal address: Not yet published.