Privacy Notice

1. Who we are

This Privacy Notice describes how ABC ("we", "us", "our"), the operator of the Cartloop platform ("Cartloop", the "Service"), collects and processes personal data. ABC acts as the data controller of the personal data described in this notice.

2. Personal data we collect

• Account data: name, email address, password (hashed), and account preferences.
• Merchant data: business name, store configuration, products, orders, and customer records you upload or generate through the Service.
• Support data: messages you send us and any information you include in them.
• Usage / telemetry: pages viewed, features used, device and browser identifiers, IP address, and diagnostic logs.
• Payment-related data: billing details required to process your subscription. Payment card data is collected and processed by Paddle (our Merchant of Record) and is not stored by us.

3. How we use personal data

• To create and operate your account and provide the Service (legal basis: performance of a contract).
• To secure the Service, prevent fraud, and enforce our terms (legitimate interests).
• To provide customer support and respond to your requests (performance of a contract).
• To improve the Service, including analytics and product research (legitimate interests).
• To send service and, where permitted, marketing communications (legitimate interests or consent, depending on your jurisdiction).
• To comply with legal, tax and accounting obligations (legal obligation).

4. Sharing your personal data

We share personal data with:

• Service providers / sub-processors that host and operate the Service (hosting, database, email delivery, analytics, error monitoring, customer support tooling).
• Paddle.com Market Limited, our Merchant of Record, for sale of subscriptions, subscription management, payments, tax compliance and invoicing.
• Professional advisers such as accountants and lawyers where necessary.
• Authorities where required by law or to protect our rights.

5. International transfers

Where personal data is transferred outside the UK/EEA, we rely on appropriate safeguards such as the UK International Data Transfer Agreement, EU Standard Contractual Clauses, or transfers to countries the UK/EU has deemed adequate.

6. Retention

We retain personal data for as long as your account is active and for a reasonable period afterwards to meet legal, accounting, tax and dispute-resolution requirements. When it is no longer needed, it is deleted or anonymised.

7. Your rights

Depending on where you live, you may have the right to access, rectify, erase, restrict or object to the processing of your personal data, to data portability, and to withdraw consent. You also have the right to lodge a complaint with your local supervisory authority. To exercise these rights, contact us using the details below. We aim to respond within one month.

8. Security

We use appropriate technical and organisational measures to protect personal data, including encryption in transit, access controls, and regular reviews of our security practices.

9. Cookies

The Service uses essential cookies to keep you signed in and to remember your preferences, and analytics cookies to help us understand product usage. You can manage cookies through your browser settings.

10. Contact

Questions about this notice or your personal data? Contact ABC by opening a support request from within Cartloop or by emailing our support address listed on the Cartloop website.

This page is maintained by ABC to describe how Cartloop handles personal data.