Privacy Policy

This Privacy Policy explains how information is collected, used, shared, and protected when you visit our website (“Site”) or use ONE ERP and related services (“Service”).

Who we are

ONE ERP is operated by Three Shelves and its affiliates (“Company”, “we”, “us”). If you or your organization enters into an Order Form, subscription agreement, or other written agreement for the Service, the contracting entity will be the Three Shelves entity or affiliate identified in that agreement.

1) Information we collect

A) Information you provide

• Name, email, phone number, company, job title
• Account details (username, role/permissions)
• Demo/sales inquiries and communications
• Support requests, messages, and attachments

B) Information collected automatically (Site)

• Device and usage data (IP address, browser type, pages viewed, referring URLs, approximate location based on IP)
• Cookies and similar technologies for essential functionality and analytics

C) Customer Data (Service)

Business customers may upload or generate operational data in the Service (“Customer Data”), which may include:

• inventory movements, transfers, adjustments, receiving/GRN, audits/cycle counts
• product identifiers such as SKU, batch/lot, expiry (where used), and operational logs
• sales transactions and costing/margin-related operational records

2) How we use information

We use information to:

• provide, operate, secure, and maintain the Service (authentication, access control, audit logging)
• respond to requests (demos, onboarding, support)
• monitor and improve performance, reliability, and user experience
• send service communications (security notices, billing, product updates)
• market ONE ERP (where permitted), including newsletters and event invitations
• comply with legal obligations and enforce agreements

3) Legal bases (where applicable)

Depending on your jurisdiction, we process information based on:

• contract performance (to provide the Service)
• legitimate interests (security, service improvement, B2B communications)
• consent (certain cookies/marketing where required)
• legal obligations

4) Sharing and disclosure

We may share information with:

• Service providers (hosting, monitoring, analytics, support tools, CRM, email delivery) under confidentiality obligations
• Integration partners you enable (data shared per your configuration)
• Professional advisors (legal, audit, finance) as needed
• Authorities where required by law or to protect rights/safety/security
• Business transfers (merger/acquisition/asset sale), with appropriate safeguards

We do not sell personal information.

5) Data retention

We retain information only as long as necessary for the purposes described above, including legal compliance and dispute resolution. Customer Data retention/deletion is governed by the Customer’s contract and configuration.

6) Security

We maintain safeguards designed to protect information, including access controls and audit logging. No system is 100% secure.

7) International transfers

Information may be processed in countries other than where you reside. Where required, we apply appropriate safeguards for cross-border transfers (for example, contractual protections for transfers from the EEA/UK).

8) Your rights and choices

Depending on your jurisdiction, you may have rights to access, correct, delete, restrict, object to processing, and/or request portability. If you are a User under a Customer account, requests may need to be handled through the Customer administrator.

You can unsubscribe from marketing emails at any time.

9) Cookies

We use cookies for essential Site functionality and may use analytics cookies. You can manage cookies in your browser settings and, where available, through our cookie preferences tool.

10) Children

The Site and Service are not intended for children under the age required by applicable law. We do not knowingly collect children’s personal information.

11) Changes

We may update this Privacy Policy from time to time. Updates will be posted with a revised “Last updated” date.

12) Contact

For privacy questions or requests: [email protected]