Privacy policy
1. Who we are
Chibany Business Advisory (“CBA”, “we”) is an accounting and cost-control business in Zahle, Lebanon, and the provider of the CBA POS point-of-sale service. Our full legal details are on the legal information page. For anything about your personal data, write to jad.chibany@gmail.com or send a WhatsApp message to +961 71 441 407.
2. What this policy covers
This policy covers four situations, and our role is different in each:
- Visiting this website. We are responsible for the little data involved.
- Contacting us by WhatsApp, phone or email. We are responsible for what you send us.
- Being our client for CBA POS or for accounting services. We are responsible for the data we need to serve and invoice you.
- Data inside your CBA POS: your customers, your staff and your sales. You decide what goes in and why. We only store and process it to run the service for you, on your instructions.
3. This website
This website does not use cookies, analytics, advertising pixels or any other tracking. It loads nothing from other companies: fonts, styles and images are all served from our own server. It has no forms.
Like every web server, ours records technical logs of each request: the IP address, the time, the page asked for and the browser's name. We use them only to keep the site running and to detect attacks. They are deleted automatically after 14 days.
4. When you contact us
When you message us, we receive your name, your phone number or email address, and what you choose to tell us, such as your business name and what you sell. We use it to answer you, to arrange a demonstration and to follow up on your request. Giving it is voluntary; without it we cannot answer.
If you do not become a client, we delete your details within 24 months of our last exchange, or earlier if you ask. We send you offers only if you have agreed to receive them, and every such message tells you how to stop them, free of charge.
5. Our clients
For clients we keep the details needed to provide the service and to invoice it: the business name and legal details, the names and contact details of the people we deal with, the plan, and the payment records. We keep our invoices and accounting records for as long as Lebanese tax and commercial law requires.
For accounting services we also receive the documents you send us, such as supplier invoices, receipts, bank statements and payroll information, and where you ask us to, the login details of your own accounting software so we can enter your records there. We use them only to do the work you engaged us for. We keep them confidential.
6. Data inside your CBA POS
Your CBA POS holds what you and your staff enter: products and prices, sales, stock, suppliers, your customers' names, phone numbers, balances and purchases, and your staff's names, PINs and working hours. For this data:
- You are responsible for having a lawful reason to record it and for telling your customers and staff about it.
- We process it only to run the service for you: to store it, keep it safe, show it to your users, and produce the documents and reports you ask for.
- We never sell it, never use it for our own marketing, and never share it with another client.
- Our staff open your data only to support you, to fix a fault, when you ask us to, or when the law requires it.
- Each shop's data is kept in its own separate database.
- When your subscription ends, you can export your data, and we delete it as set out in our terms of service.
If one of your customers asks you to see, correct or delete their record, we help you do it within the legal deadline.
7. Who receives data
We use a small number of service providers, only for the purposes described:
| Recipient | Why | Where |
|---|---|---|
| Contabo GmbH | Rents us the server that runs this website and CBA POS, and stores its data. | Germany |
| Provides the email account we use (Gmail) and file storage (Google Drive). | USA and other countries | |
| WhatsApp (Meta) and Telegram | Carry the messages and documents you choose to send us through those apps. | Various countries |
| A document-recognition service provider | Reads the figures on invoices, receipts and daily sheets when you or we choose to scan them, so they do not have to be typed. | USA |
| Your own accounting software | Receives your records when you engage us to enter them there. | As chosen by you |
| Public authorities | Only when Lebanese law requires us to disclose information. | Lebanon |
Lebanese law allows personal data to be stored and processed outside Lebanon. We choose providers that protect it, and we tell you here where it goes.
8. How we protect it
All connections to this website and to CBA POS are encrypted. Each shop's data is kept separately. Access to the server is restricted to CBA and requires a cryptographic key. Users sign in with a password and, where the shop turns it on, each person with their own PIN; and sensitive actions in CBA POS are recorded against the login or person that made them. No system is beyond risk. If a security incident affects your data, we will tell you without delay and tell you what we are doing about it.
9. Your rights
Under Law No. 81/2018 you can ask us, at any time:
- to tell you whether we hold data about you, and to give you a copy of it;
- to correct, complete, update or delete it where it is wrong, incomplete, out of date or no longer needed for the purpose it was collected for;
- to stop using it for any legitimate reason, and to stop sending you offers at any time.
We also delete your data whenever you ask, unless the law requires us to keep it.
Write to jad.chibany@gmail.com or send a WhatsApp message to +961 71 441 407. We answer within 10 days. Access and correction are free; for a copy, we may ask only for the cost of producing it.
If your data is in a shop's CBA POS, the shop is the one to ask first; we help the shop answer you.
10. Children
Our services are for businesses. We do not knowingly collect data from children.
11. Changes
If we change this policy, we publish the new version here with its date. If the change matters to clients, we tell them before it takes effect.