Privacy Policy

1. Information We Collect

Account information: When you sign up, we collect your name, email address, and business name.

Store data: Product listings, pricing, categories, order details, and customer information you enter into the platform.

Payment information: We use Stripe to process payments. We do not store your full card details — Stripe handles this securely under their own PCI-compliant systems.

Usage data: We collect information about how you interact with the platform (pages visited, features used, device type, browser) to improve our service.

Cookies: We use essential cookies to keep you logged in and functional cookies to remember your preferences. We do not use advertising cookies.

2. How We Use Your Information

• To provide, maintain, and improve the CartyClick platform
• To process your subscription and send billing communications
• To send transactional emails (order confirmations, reminders) on behalf of your store
• To send product updates and service announcements (you can opt out at any time)
• To detect and prevent fraud, abuse, or security incidents
• To comply with legal obligations

3. Data Sharing

We do not sell your personal data. Information collected by CartyClick may be disclosed to and stored on our servers (and backups) which are provided by leading cloud infrastructure providers including Google Cloud Platform (GCP) and Amazon Web Services (AWS). This may include overseas disclosures, and personal information may be transferred to cloud providers based in the United States of America.

We work closely with our service providers to ensure a high standard of security is maintained and that personal information is protected from unauthorised access. Our cloud service providers hold certifications including ISO 27001 and SOC 2, evidencing high standards of information security management.

We may also share your data with payment processors to facilitate subscription billing, and with email delivery providers solely for the purpose of sending transactional communications on your behalf. We do not permit these providers to use your data for their own purposes.

We may disclose personal information to law enforcement or regulatory authorities where required by law, or where necessary to protect the rights, property, or safety of CartyClick, our users, or the public.

4. Your Customers' Data

When your customers place orders through your CartyClick storefront, their personal information (name, email, phone, address) is stored in our systems on your behalf. You, as the Merchant, are the data controller for your customers' data. You are responsible for handling it in accordance with applicable privacy laws and for maintaining a privacy notice on your storefront.

5. Data Retention

We retain your account data for as long as your account is active. If you close your account, we will delete your personal data within 90 days, except where we are required to retain it for legal or compliance purposes. Order history may be retained for up to 7 years for financial record-keeping.

6. Security

We implement industry-standard security measures including encryption in transit (HTTPS/TLS), encrypted storage, access controls, and regular security reviews. However, no system is 100% secure. Please use a strong, unique password and notify us immediately if you suspect unauthorised access.

7. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data ("right to be forgotten")
• Object to or restrict certain processing
• Data portability — receive your data in a structured format

To exercise these rights, email us at cartyclickadmin@gmail.com. We will respond within 30 days.

8. Children's Privacy

CartyClick is not intended for use by anyone under the age of 18. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected such data, please contact us and we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "last updated" date and notify you by email for material changes. We encourage you to review this page periodically.

10. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact: