Shop Privacy Notice
Effective from 1 November 2026 · Version 1.2
This notice is for the people at a Shop: the owner Countr deals with, and
each member of counter staff who signs in to approve a bill.
It exists because the other documents in this set do not cover you. Merchant
Agreement 7.1 makes Countr a Data Fiduciary in respect of Member data; 7.3
covers data about the Shop as a business — its name, address, category,
hours, rates and totals. Clause 7.4 covers the owner's summary email and 7.5 a
telephone number the Shop asks Countr to show. Document 3, the Privacy Notice,
describes a shop enquiry sent from the website — a shop's name, an owner's
name and a mobile number, to contact the shop about joining. None of them
describes what Countr holds about you once your Shop is onboarded, and that
is what this notice is for.
1. Who this is for, and who it is not
1.1You, if you are a Shop's owner and Countr holds your name, your mobile
number, or an email address you gave for the daily summary.
1.2You, if you are counter staff and Countr created an account for you so
that you can approve a transaction.
1.3It is not about a Member. A Member's data is document 3, and Merchant
Agreement 7.1 and 7.2 say what a Shop does and does not receive. If you are
also a Countr Member on the same mobile number, your Member account and your
staff account are separate records, and document 3 governs the first.
1.4PRIDETECH SOLUTIONS is the Data Fiduciary for everything in this
notice, at Vyshala, No. 3381, 20th E Main, Vijayanagar 2nd Stage, Mysore
570017.
1.5Why the law allows us to hold this.
1.6The owner's name and mobile number. You gave us these when your Shop
joined Countr, so that we could run your Shop's Countr account and contact you
about it. The Digital Personal Data Protection Act, 2023 allows us to use
personal data that a person has given us voluntarily for a stated purpose, for
as long as they have not told us they do not want us to (section 7(a)). If you
tell us to stop, we will. But we cannot run a Shop's account without a way to
reach its owner, so stopping means closing the account.
1.7Counter staff: your name, phone number and sign-in details. Your Shop's
owner gives us your name and phone number so that you can be given access to
Countr. When you sign in, you are shown this notice, and you then use Countr
for that purpose: to approve discounts for your Shop. We rely on the same
section 7(a). We use your details only to let you sign in, to keep your access
secure, and to record which approvals you made. If you ask us to, we remove
your access, and so can your Shop's owner.
1.8Approvals you made. A record of each discount you approved is part of
your Shop's transaction records. The law requires us to keep those records for
accounting and tax purposes, so they stay for as long as those records are
kept, even after your access is removed.
1.9The owner's daily summary email. We send this only with your consent,
which you give yourself, on its own screen, separately from your Shop's
agreement. You can withdraw it at any time by the link in any summary, or by
telling us, and we then delete the address.
2. What Countr holds about the Shop's owner, and why
| What | Why | On what basis |
|---|---|---|
| The owner's name | So Countr knows who at the Shop it is dealing with, so the record of an acceptance says who accepted, and so a change an owner makes to their own team is recorded against them | Given to Countr voluntarily for a stated purpose, under section 7(a) of the Digital Personal Data Protection Act, 2023 — see 1.6 |
| The owner's mobile number | So Countr can reach the Shop about its account, its paperwork and anything wrong at its counter | Given to Countr voluntarily for a stated purpose, under section 7(a) of the Digital Personal Data Protection Act, 2023 — see 1.6 |
| An email address, only if the owner gives one | Only for the daily summary of the Shop's own transactions described in Merchant Agreement 7.4. Never marketing, never shared, and never used for anything else | The owner's consent, recorded with the time it was given, and withdrawable at any time |
2.1The email address is the only item here that rests on consent. Countr
records when it was given. Withdrawing it is one click in any summary, or by
telling Countr, and Countr then deletes the address — Merchant Agreement
7.4 says the same.
2.2The name and the mobile number do not rest on consent either, and they do
not rest on Countr needing them to perform a contract. They rest on the owner
having given them voluntarily for a stated purpose — 1.6 above, and section 7(a)
of the Act. An owner who tells Countr to stop will be heard; because Countr
cannot run a Shop's account without a way to reach its owner, stopping means
closing the account. Section 7 below says what Countr does and does not delete
afterwards.
3. What Countr holds about counter staff, and why
| What | Why | On what basis |
|---|---|---|
| Your name | So the Shop's owner can tell one account from another, and so the record of a transaction says who approved it | Given to Countr voluntarily for a stated purpose, under section 7(a) of the Digital Personal Data Protection Act, 2023 — see 1.7 |
| Your mobile number | It is how you sign in | Given to Countr voluntarily for a stated purpose, under section 7(a) of the Digital Personal Data Protection Act, 2023 — see 1.7 |
| Your PIN, never in a form anybody can read | It is the control that approves a transaction. It is stored only as a one-way cryptographic hash with a value unique to your account, so neither Countr nor your Shop can read it or recover it. A forgotten PIN is replaced, never retrieved | Given to Countr voluntarily for a stated purpose, under section 7(a) of the Digital Personal Data Protection Act, 2023 — see 1.7, and to keep the counter secure |
| How many times a wrong PIN was entered, and whether your account is locked | To stop somebody guessing at your PIN, and to let your owner unlock you | Necessary to keep the counter secure |
| When you last signed in, and a coarse note of the device — "Android · Chrome" and nothing more | So your owner can see which accounts are in use, and recognise the phone | Given to Countr voluntarily for a stated purpose, under section 7(a) of the Digital Personal Data Protection Act, 2023 — see 1.7 |
| Which transactions you approved or declined, and when | It is part of the transaction record Countr has to keep, it is how a dispute is settled, and it is what lets a Shop see who handled what | Countr's legal obligations for accounting and tax — see 1.8 |
3.1Your PIN is yours and your Shop's, and Countr never sees it. It is
hashed with a value unique to your own row, so two people who choose the same
PIN do not produce the same stored value, and nothing in the stored value
reveals the PIN.
3.2A PIN belongs to one Shop. If you work at two Shops you have two
accounts and two PINs, because Merchant Agreement 5.5 makes keeping a PIN
confidential each Shop's own obligation, and one Shop cannot keep that
promise about a credential that opens another Shop's counter.
3.3Countr does not tell your owner where else you work. Countr's own staff
can see it, because "why can this person not sign in" is usually answered by
another Shop having closed; your own Shop's owner cannot.
3.4Countr does not use any of this to advertise to you, and does not sell
it.
4. What the Shop's owner can see about counter staff
4.1Your name, your mobile number, whether your account is locked, when you
last signed in, the coarse device note, and the transactions you approved or
declined at that Shop.
4.2Not your PIN, which nobody can read, and not anything about another
Shop you work at.
5. What a Member never sees
5.1A Member sees the Shop's listing. A Member is never shown a member of
counter staff's name, mobile number or sign-in record.
5.2A telephone number appears on a Shop's listing only where the Shop
asked for it under Merchant Agreement 7.5, and that clause requires the number
to be the Shop's own. Countr does not show a number belonging to a member of
the Shop's counter staff.
6. Who else Countr shares it with
6.1The same processors document 3 lists, for the same reasons: database and
application hosting, content delivery, error reporting, and the email service
that sends the owner's daily summary where the owner asked for it.
6.2Nothing here is sold, and nothing here is used for advertising.
6.3Countr will disclose it where the law requires, and will tell you unless
the law forbids that.
7. How long Countr keeps it
This table says what Countr's systems actually do today. Where there is no
automatic deletion it says so, rather than promising one.
| What | How long | Why |
|---|---|---|
| The record of a transaction you approved or declined, with your account on it | Kept as part of the transaction record, and not deleted | Accounting and tax law. It is one record of a transaction, and Countr cannot remove a participant from it and still have a record |
| Your staff account after your Shop removes you | Marked as removed and kept, not deleted, because your name is attached to transactions already settled, which are the records above | Accounting and tax law |
| Your PIN hash | Replaced whenever a new PIN is set. The old value is not kept | No reason to keep it |
| The count of wrong PIN attempts | Set back to zero the moment you sign in correctly | No reason to keep it |
| An email address the owner gave for the daily summary | Deleted when the owner withdraws that purpose, and Countr holds no address without a purpose for it | It was held for one purpose and the purpose is gone |
| An address given on the owner's behalf, which the owner has not personally confirmed | Deleted fifteen days after the owner is asked to confirm it | Countr holds no address the person it belongs to has not agreed to. Nothing is sent to it meanwhile |
| The record that a summary email was sent — who it went to, for what purpose and what happened | 90 days, then deleted. Never the address, and never the words | Long enough to answer "did that email go out" |
| The owner's name and mobile number, and the Shop's own record | Kept for as long as the Shop's record is live. There is no automatic deletion of these, and no way for a Shop to close its Countr account by itself today | Countr needs them to perform the agreement, and will not state a schedule it does not run |
7.1The last row is a gap, and it is written as one. A Shop that wants its
record closed and the owner's details removed asks Countr, at the address in
section 10, and Countr does it by hand. When a Shop can do that for itself,
this notice will say so and will carry the schedule that goes with it.
7.2Nothing in this section applies to a Member's data, which keeps the
retention stated in document 3.
8. Your rights
You can, at any time:
- See what Countr holds about you and who it has been shared with
- Correct anything inaccurate — your name or your mobile number
- Withdraw a consent you gave, which here means the owner's summary address
- Nominate someone to exercise your rights if you die or become incapable
- Complain to Countr, and then to the Data Protection Board of India
Ask your Shop's owner to correct your name or your number, or write to the
address in section 10. An owner can see what Countr holds about the Shop and
about themselves in the Countr shop app.
9. Security
Countr protects this with encryption in transit, access controls, a one-way
hash for every PIN and password, a record of every administrative action, and
least-privilege database access. No administrative record ever contains a
PIN, and the database refuses to store one in such a record whatever code
tries to write it. No system is perfectly secure and Countr does not claim its
own is. Section 10 of document 3 says what Countr does if there is a breach,
and Countr will tell you on the same terms.
10. Grievance Officer
Madhu
countr.grievance@gmail.com · +91 94493 52311
PRIDETECH SOLUTIONS, Vyshala, No. 3381, 20th E Main, Vijayanagar 2nd Stage, Mysore 570017
Countr acknowledges within 2 working days and resolves within 30 days. If you
are not satisfied you may complain to the Data Protection Board of India.
11. Changes
Countr will tell a Shop of a material change at least 15 days before it takes
effect. This notice carries its own version and changes on its own: a
change here does not re-open the Merchant Agreement, and a change to the
Merchant Agreement does not change this.