BizHeroFor is committed to protecting the privacy of the personally-identifiable information that we collect from you as you use this website and for internal recording within the company. The scope of BizHeroFor's commitment is detailed in this Privacy Policy. By submitting information, you agree to BizHeroFor's use of such information as described herein. Please see our Terms and Conditions for more information about our on-line policies in general.

Last Updated: December 3, 2025
Privacy Policy Version: 1.0

What personally-identifiable information is collected?

BizHeroFor collects the following personally-identifiable information when you register for an account:

• Name
• Email address
• Phone number
• Country
• Password (stored as an encrypted hash, never in plain text)

We also collect information about your use of our software and services for the purpose of providing and improving our services.

How may my Personal Info be used?

BizHeroFor uses your Personal Information to:

• Create and manage your account
• Provide access to our software and services
• Send you account-related notifications (e.g., password resets, service updates)
• Process payments and manage subscriptions
• Provide customer support

How do we protect your information?

BizHeroFor implements a variety of security measures to maintain the safety of your personal information when you take a new trial or enter, submit or access your personal information.

Technical Security Measures

We implement industry-standard security measures including:

• Passwords: Hashed using bcrypt algorithm (never stored in plain text). Legacy passwords are automatically upgraded to bcrypt upon login.
• Data in transit: All data transmitted between your browser and our servers is encrypted using HTTPS with TLS 1.2 or higher.
• Database: Hosted on Amazon Web Services (AWS) RDS in the EU-West-1 (Ireland) region with encryption at rest.
• Access Control: Role-based permissions and multi-factor authentication for administrative access.
• Regular Security Audits: Ongoing monitoring and security assessments of our systems.

Data Storage and Third-Party Processors

Your data is stored on secure servers provided by Amazon Web Services (AWS) in the EU-West-1 (Ireland) region, ensuring your data remains within the European Union. We use the following GDPR-compliant third-party processors:

Infrastructure & Storage:

• Amazon Web Services (AWS) - Cloud hosting and database services (Ireland)

Optional Third-Party Services (only if you enable them):

• SendGrid - Transactional email delivery (if you configure email settings)
• Mailchimp - Email marketing (if you configure Mailchimp integration)
• Stripe - Credit card payment processing (if you enable payment processing)
• PayPal - Payment processing (if you enable payment processing)
• Big Red Cloud - Accounting software integration (if you connect your accounting system)
• Xero - Accounting software integration (if you connect your accounting system)
• QuickBooks - Accounting software integration (if you connect your accounting system)
• SortMyBooks - Accounting services integration (if you connect this service)
• Stock in the Channel - Stock management integration (if you connect this service)

Each third-party processor operates under a Data Processing Agreement and is required to maintain GDPR compliance. These service providers may access and process personal data only as necessary to perform services on our behalf or comply with legal requirements.

Data Breach Notification

In the event of a personal data breach that may affect your personal information, we will:

• Notify the Irish Data Protection Commission within 72 hours of becoming aware of the breach, as required by GDPR Article 33.
• If the breach poses a high risk to your rights and freedoms, we will also notify you directly without undue delay via the email address associated with your account.
• Provide information about the nature of the breach, the potential consequences, and the measures we have taken or propose to take to address the breach.

Cookies and IP Addresses

We use the following types of cookies on our site:

Strictly Necessary Cookies

• PHPSESSID (Session Cookie) - Required for login and authentication. This cookie is essential for the site to function and expires when you close your browser. Without this cookie, you cannot access your account.

Security Cookies

• Google reCAPTCHA - Used to protect against automated abuse and spam. These cookies help us verify that you are a real person, not a bot. This is necessary for security purposes.

The cookies we use (PHPSESSID and reCAPTCHA) are essential for the operation and security of our service. We do not use advertising, tracking, or analytics cookies.

Is personal information disclosed to third parties?

BizHeroFor does not sell, trade, or transfer your personally identifiable information to outside parties. This does not include trusted and secure third parties who assist us in conducting our business, as listed in the "Data Storage and Third-Party Processors" section above. We may also release your information when we believe it is appropriate to comply with the law, enforce our site policies, or protect ours or others' rights, property or safety.

Links to third-party sites

We may provide links to third-party Websites as a service to our users. In addition, some of the content appearing to be on this Site is in fact supplied by third parties, for example, in instances of framing of third-party Websites or incorporation through framesets of content supplied by third-party servers. We cannot control and are not responsible for the information collection and privacy practices of such third-party Websites, which may differ from those of this Site.

How can I access, change, and/or delete information?

You may access, correct, update, and/or delete any Personal Info that you submitted to the Site. To do so, please either follow instructions on the page of the Site on which you have provided such information or subscribed or registered, or send us an e-mail at darren@semad.ie.

You also have the "right to be forgotten" (GDPR Article 17) where you can decide to be completely erased from our systems. If you request this, please send an email to darren@semad.ie.

Retention

To meet our legal and regulatory obligations, while you are a customer of ours, we hold all information. If you have chosen the right to be forgotten, all personally identifiable information will be erased from our system leaving behind invoices and other financial documents that must be retained by law for a period of six years as required by Irish tax law.

Security

BizHeroFor has implemented generally accepted standards of technology and operational security to protect Personal Info from loss, misuse, alteration, or destruction. Only authorized BizHeroFor personnel are provided access to Personal Info, and these employees are required to treat this information as confidential. Despite these precautions, BizHeroFor cannot guarantee that unauthorized persons will not obtain access to your Personal Info.

Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us at darren@semad.ie.

Consent and Terms Acceptance

By using the Site and creating an account, you consent to the collection, use, and storage of your information by us in the manner described in this Privacy Policy and elsewhere on the Site. When you create an account, you are required to accept our Terms and Conditions and this Privacy Policy. We record the date and time of your acceptance for compliance purposes.

We reserve the right to make changes to this Privacy Policy from time to time. We will alert you to any such changes by updating this Privacy Policy and the "Last Updated" date at the top of this page. Continued use of our services after changes constitutes acceptance of the updated policy.

Data Protection Contact

If you have any questions about our Privacy Policy, wish to exercise your GDPR rights, or have concerns about data protection, please contact:

Data Protection Officer
Email: darren@semad.ie
Address: Unit 5, Portmarnock Town Centre, Co. Dublin, Ireland