Privacy Notice

Privacy and information security is of very high priority to Sitoo. We comply with the General Data Protection Regulation (GDPR) giving you control of your personal data.

Latest update: 2021-04-13


Sitoo AB (“Sitoo”, “we”, “us”, or “our”) is committed to protecting your privacy. This privacy notice (“Privacy Notice”) applies to those who visit (the “Website”), participates in sales processes to potential Sitoo customers (“Sales”), visitors to our pages on third party social media platforms, and to candidates who participate in our recruitment activities. This Privacy Notice also applies to data we gather from other online services.

The Privacy Notice explains who we are, how we collect, share and use personal information about you, and how you can exercise your privacy rights. It also describes the choices available to you regarding the use of, your access to, and how to update and correct your personal information.

Your confidence is very important to us and we seek to protect your interest through careful and responsible treatment of the information you provide to us.

The Privacy Notice is effective as of 13 April 2021.

What does Sitoo do?

Sitoo is a world-leading Unified Commerce platform with a point of sale (POS) for global retailers. Providing a cost efficient, game-changing technology, enabling retailers to unify all in-store and online sales channels, in real time. The result is streamlined inventory management, empowered store associates, exceeded customer expectations and never-missed sales. Sitoo is trusted by brands and retail chains in Europe, Middle-East, Asia-Pacific and North America. Sitoo is a fast-growing Swedish tech company with HQ in Stockholm.

Key Terms of the Privacy Notice

Who is covered by this Policy?

Online visitors to, potential customers who submit their details for enquiries and marketing purposes, as well as job applicants. The Privacy Notice does not apply to usage of the Sitoo Unified Commerce platform.

What Information do we collect?

Depending on who you are and how we engage with you, we may collect information including full name, email, phone number, organisation address, billing address, card address, IP address, and other information collected through custom fields, if any.

How do we use this information?

Mainly for marketing and recruitment purposes.

Who else may access this information?

In addition to authorised Sitoo personnel who may access your information for the purposes set out in this policy, some of our third-party vendors may also gain access to your information. Vendors of the sub-processors may also have access to your information.

Do we use Cookies?

Yes, we do. We also may collect log files for behavioural advertising (which you can opt out of). This includes information relating to website usage, analytics services (such as Google, DoubleClick, LinkedIn, HubSpot and Facebook), and IP information for performance monitoring.

How can you exercise your rights as a data subject?

Most rights can be exercised by contacting us at

What personal information does Sitoo collect when you visit our Website?

The personal information that we may collect about you when you visit our Website broadly falls into the following categories:

Information that you provide voluntarily

We collect personal information that you provide voluntarily through our Website, for example when completing online forms to contact us or register for events that we are organising.  The information we collect about you may include some or all of the following:

  • Name and job title; 
  • Company or organisation;
  • Contact information, including email address and telephone number(s); 
  • Demographic information such as postcode, preferences and interests; 
  • Information about job applicants;
  • Information pertinent to our sales to potential customers; and 
  • Any other personal information that you voluntarily choose to provide to us.

Information that we collect automatically

Certain technical information is normally collected as a standard part of your use of Such information includes, for example, your IP-address, access times, the website you linked from, pages you visit, the links you use, ad banners and other content you viewed, information about your devices and other such technical information your browser provides us with or as may be otherwise collected in connection with certain products and services. 

Some of this information may be collected using cookies and similar tracking technology.

When you use our services or otherwise interact with us over telecommunications networks, certain additional information, such as your mobile subscription number, may be transmitted to us by the telecommunications operator as a standard part of that communication.

Information obtained from social media platforms 

We may maintain pages for Sitoo on social media platforms, such as Facebook, LinkedIn, Twitter, Google, YouTube, Instagram, and other third-party platforms. When you visit or interact with our pages on those platforms, the platform provider’s privacy policy will apply to your interactions and their collection, use and processing of your personal data.

Information obtained from other third parties

We may also obtain your personal data from other third parties, such as marketing partners, publicly-available sources and data providers. For example, a business partner may share your contact information with us if you have expressed interest in learning specifically about our products or services, or the types of products or services we offer.

Cookies and other information collected by automated means

On our webpages, this information is collected using cookies and browser web storage (also known as locally stored objects). Our service providers, and our business partners may automatically log information about you, your computer or mobile device, and activity occurring on or through our Website. The information that may be collected automatically includes your computer or mobile device operating system type and version number, manufacturer and model, browser type, screen resolution, IP address, general location information such as city, state or geographic area; and information about your use of and actions on the website, such as pages or screens you viewed, how long you spent on a page or screen, navigation paths between pages, information about your activity on a page, access times, and length of access. Our service providers and business partners may collect this type of information over time and across third-party websites and mobile applications.

How we use your personal information

We use your personal data for the following purposes and as otherwise described in this Privacy Notice or at the time of collection:

To send you marketing and promotional communications

We may send you Sitoo-related marketing communications as permitted by law. You will have the ability to opt-out of our marketing and promotional communications.

You may opt out of marketing-related emails by following the optout or unsubscribe instructions at the bottom of the email, or by contacting us at You may continue to receive service-related and other non-marketing emails.

We will also use your information for marketing research.

To comply with law

We use your personal data as we believe necessary or appropriate to comply with applicable laws, lawful requests, and legal process, such as to respond to subpoenas or requests from government authorities.

For compliance, fraud prevention, and safety

We may use your personal data and disclose it to law enforcement, government authorities, and private parties as we believe necessary or appropriate to:  protect our, your or others’ rights, privacy, safety or property (including by making and defending legal claims) and to protect, investigate and deter against fraudulent, harmful, unauthorized, unethical or illegal activity.

What personal information does Sitoo collect when you engage with our Sales department?

We collect information from the Website as stated above. We also collect information from third party vendors. This information is used to engage with potential customers for sales purposes. Some of this information is shared with third parties.

What information does Sitoo collect when you partake in recruitment activities?

Sitoo collects information from and about candidates in connection with available employment opportunities at Sitoo.  This information may include CVs, identification documents, academic records, work history, employment and references.

Sitoo uses your personal information to match your skills, experience and education with the specific roles offered by us.  This information is passed to the relevant hiring managers and persons involved in the recruitment process to decide whether to invite you for interview.  Sitoo will collect further information from you if you are invited to the interview (or equivalent) stage and onwards.

Sitoo may collect personal information about candidates from the following sources:

Directly from you – for example, information that you have provided when applying for a position directly through the Sitoo recruitment website, as managed by us or a third party;

From recruitment agencies – for example, when a recruitment agency contacts us to identify you as a potential candidate;

Through publicly available sources online – for example, where you have a professional profile posted online (e.g. on your current employer’s website, or on a professional networking site like LinkedIn); and

By reference or word of mouth – for example, through a referral from a former employee/employer or from a referee you have identified.

When and with whom might Sitoo share your personal information?

We employ other third-party service providers to provide services on our behalf to visitors to our Website and our potential customers and may need to share your information with them to provide information, products or services to you.

Legal basis for processing personal information

Our legal basis for collecting and using the personal information described above will depend on the personal information concerned and the specific context in which we collect it. 

However, we will normally collect personal information from you only where we have your consent to do so, or where the processing is in our legitimate interests and not overridden by your data protection interests or fundamental rights and freedoms. 

If you have questions about or need further information concerning the legal basis on which we collect and use your personal information (including any legitimate interests relied upon), please send an email to

How does Sitoo keep my personal information secure?

We use appropriate technical and organisational measures to protect the personal information that we collect and process about you.  The measures we use are designed to provide a level of security appropriate to the risk of processing your personal information.

International data transfers

When we collect your personal information, it may be processed in countries that may have data protection laws that are different to the laws of your country. 

However, we have taken appropriate safeguards to require that the personal information we process will remain protected in accordance with this Privacy Notice when transferred internationally, including when processed internationally by our third-party service providers. The safeguards we have taken include implementing the European Commission’s Standard Contractual Clauses for transfers of personal information to our third-party service providers which requires our non-EEA members to protect personal information they process from the EEA in accordance with European Union data protection laws.

Data retention

We will retain personal information we collect from you where we have an ongoing legitimate business need to do so (for example, to provide you with a service you have requested or to comply with applicable legal, tax or accounting requirements). When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymise it or, if this is not possible (for example, because your personal information has been stored in backup archives), we will securely store your personal information and isolate it from any further processing until deletion is possible. If you have questions about, or need further information concerning, our data retention periods, please send an email to

Your data protection rights

You have the following data protection rights: 

If you wish to access, correct, update or request deletion of your personal information, you can do so at any time by sending an email to; 

You can object to the processing of your personal information, ask us to restrict processing of your personal information or request portability of your personal information. You can exercise these rights by contacting us by email at; 

You have the right to opt-out of marketing communications we send you at any time. You can exercise this right by clicking on the “unsubscribe” or “opt-out” link in the marketing e-mails we send you.  To opt-out of other forms of marketing (such as postal marketing or telemarketing), then please email; 

Similarly, if we have collected and processed your personal information with your consent, then you can withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your personal information conducted in reliance on lawful processing grounds other than consent; and 

You have the right to complain to a data protection authority about our collection and use of your personal information. For more information, please contact your local data protection authority. We respond to all requests received from individuals wishing to exercise their data protection rights in accordance with applicable data protection laws.

Updates to this Privacy Notice

We may update this Privacy Notice from time to time in response to legal, technical or business developments. When we update our Privacy Notice, we will take appropriate measures to inform you, which will be consistent with the significance of the changes we make.  We will obtain your consent to any material Privacy Notice changes if and where this is required by applicable data protection laws. You can see when this Privacy Notice was last updated by checking the Introduction section of this Privacy Notice.