Privacy Notice

Who We Are

Morrow is booking, point of sale, and store-operations software provided by Block Software Inc., a Canadian company ("Morrow", "we", "us"). This notice explains how we handle personal information on morrowpos.com and in the Morrow services. A signed customer agreement may add terms for a particular business.

Two Roles

For this website, demo requests, and our own customer accounts, we decide why and how personal information is used, and this notice describes those practices.

Businesses use Morrow to run their own bookings, sales, waivers, and customer records. For that information the business decides why and how it is used, and we handle it on the business's behalf and on its instructions. If you are a customer of a business that uses Morrow, that business's privacy policy applies to your information, and requests about it are best sent to the business first. We will help the business respond.

Information We Collect

• Contact details you send us, such as your name, business name, email address, phone number, and the content of a demo, sales, or support request.
• Account details for businesses and their staff: names, email addresses, roles, sign-in and security records, device enrolment, and billing contacts.
• Operational records a business keeps in Morrow: catalogues, bookings, appointments, orders, sales, payments, refunds, gift cards, shifts, and audit history.
• Information about a business's own customers that the business collects through Morrow: contact details, booking and purchase history, signed waivers (which can include a minor's name and a guardian's signature), and, for pet services, pet profiles and vaccination records.
• Technical information: when you use the services, your IP address, browser and device type, pages requested, and error and security logs. Our hosting provider processes similar request data when you visit this website.
• Website visit measurement: when you visit this website, Cloudflare Web Analytics records the page you view, the site that referred you, your browser and device type, page load performance, and your approximate country, derived from your IP address. It uses no cookie and no identifier that follows you from site to site.

We do not collect payment card numbers through this website. In the services, card details are handled by the payment processor or by the business's own card terminal, not stored by Morrow.

How We Use Information

• To answer requests, give demos, prepare quotes, and set up and support customer accounts.
• To provide, maintain, secure, and troubleshoot the services, including audit history that businesses rely on.
• To send service messages such as booking confirmations, receipts, account notices, and security alerts on a business's behalf.
• To bill customers and keep business and tax records.
• To understand in aggregate how the website and the services perform, and to improve them.
• To meet legal obligations and protect against fraud, abuse, and security threats.

We do not sell personal information. We do not use information about a business's customers for our own marketing.

Consent

We collect, use, and disclose personal information with consent or as otherwise permitted or required by law. When you send us a request, you consent to our using the details you provide to respond. You may withdraw consent at any time, subject to legal or contractual limits and reasonable notice; we will tell you what withdrawing means for the service you receive.

How We Share Information

We share personal information with service providers that help us run Morrow, only as needed for their work and under contracts that require them to protect it. They include:

• cloud hosting and backup (Amazon Web Services, in Canada);
• content delivery, web hosting, website visit measurement, security, and email delivery (Cloudflare and Amazon Web Services);
• online payment processing, when a business turns it on (Stripe);
• other processors and providers a business chooses to connect.

We may also disclose information when the law requires it, to protect rights, safety, or security, or as part of a merger, financing, or sale of our business, under confidentiality obligations.

Where Information Is Stored

The Morrow services store business records, such as accounts, bookings, sales, customer records, and waivers, and their backups, in Canada. Product and catalogue images are stored and delivered by our content-delivery provider and may be kept outside Canada. Some of our service providers operate outside Canada, including in the United States, so some information, such as web traffic, email, images, and online payment data, may be processed there and may be accessible to courts and authorities of those countries under their laws.

Retention

We keep personal information only as long as needed for the purposes above, to meet legal, tax, and accounting requirements, to resolve disputes, and to keep the audit history a business relies on. We keep business data while the customer account is active. When an account closes, export and deletion follow the customer agreement; until data is deleted it stays protected as this notice describes. Information deleted from our systems remains in encrypted backups until those backups expire on their regular schedule.

Safeguards

We protect personal information with measures appropriate to its sensitivity, including encryption in transit, encrypted backups, role-based access, separation of each business's data, and audit logging. No system is perfectly secure. If a breach of our safeguards creates a real risk of significant harm, we will notify the affected businesses or individuals and the Privacy Commissioner of Canada as the law requires.

Your Rights

You may ask to see the personal information we hold about you, ask us to correct it, withdraw consent, or ask a question or make a complaint about how we handle it. Depending on where you live, you may have further rights, such as deletion or a copy of your information in a portable form. We may need to verify your identity, and we will answer within the time the law sets.

To make a request, email our Privacy Officer at hello@morrowpos.com. If you are not satisfied with our answer, you may contact the Office of the Privacy Commissioner of Canada or the privacy regulator where you live.

Email and Text Messages

Messages about a booking, an order, a receipt, an account, or security are service messages. Marketing messages are sent only with the consent Canada's anti-spam law requires, identify the sender, and include a working unsubscribe. A business that uses Morrow to message its own customers is the sender of those messages and is responsible for its consent records.

Cookies

This website sets no cookies and stores nothing on your device. We measure visits without cookies, as described above. See Cookies for details.

Children

This website is for businesses and is not directed to children. A business may record a minor as a participant, for example on a waiver signed by a parent or guardian; the business is responsible for obtaining that consent.

Changes to This Notice

We may update this notice. The date at the top shows the latest version, and we will give reasonable notice of a material change by email or in the product.

Contact

Block Software Inc., Prince Edward Island, Canada. For privacy questions or requests, email our Privacy Officer at hello@morrowpos.com.