Privacy Policy

01Scope of This Policy

This policy applies to visitors, registered users, sellers, and business customers who interact with ECOMVERSE through our website, mobile applications, APIs, customer support channels. It covers information we collect directly from you, information collected automatically as you use our Services, and information we receive from trusted third parties, such as payment processors.

This policy does not extend to the practices of companies we do not own or control, including any third-party sites you may reach through links on ecomvers.com.

02Information We Collect: ECOMVERSE Data Collection

ECOMVERSE data collection is limited to what we reasonably need to run our Services, support your account, and improve your experience. We collect the following categories of information:

2.1 Information You Provide Directly

• Contact details, such as your name, email address, phone number, and mailing address
• Account credentials, including your username and password
• Order and transaction details, including billing address, shipping address, and purchase history
• Payment information, collected and processed by our PCI-compliant payment processors; ECOMVERSE does not store full card numbers on our own servers
• Business or store information, if you sell through ECOMVERSE, including business name, tax details, and store performance metrics
• Anything you submit through forms, surveys, support tickets, live chat, or direct communication with our team

2.2 Information Collected Automatically

• Device and browser data, such as IP address, device type, operating system, and browser version
• Usage data, including pages viewed, links clicked, time on page, and referring or exit URLs
• Approximate location derived from your IP address, or precise location if you grant permission
• Log files and analytics events generated as you interact with our Services

2.3 Cookies and Similar Technologies

We use cookies, pixels, and similar technologies to recognize your browser, remember preferences, and understand how our Services are used. See our cookie policy below for full details.

2.4 Information From Third Parties

We may receive information about you from payment processors, marketing partners, identity-verification providers, social platforms you choose to connect, and publicly available sources.

03How We Use Your Information

We use personal data for the following purposes:

• To provide our Services — processing orders, managing accounts, fulfilling contracts, and delivering support
• To personalize your experience — tailoring recommendations, search results, and content
• To communicate with you — order confirmations, service updates, security alerts, and, where you've consented, marketing messages
• To improve our Services — analyzing usage trends, testing features, and diagnosing issues
• To maintain security — detecting and preventing fraud, abuse, and unauthorized access
• To meet legal obligations — complying with tax, accounting, and regulatory requirements

3.1 Our Legal Bases for Processing (GDPR)

Where the GDPR applies, we rely on one or more of these legal bases: performance of a contract with you, your consent, our legitimate interests (weighed against your rights and freedoms), and compliance with legal obligations. Where we rely on consent, you can withdraw it at any time without affecting processing carried out beforehand.

04How We Share Your Information

We do not sell your personal information for money. We do share information in these limited circumstances:

• Service providers — payment processors, cloud hosting, email/SMS delivery, and analytics providers, bound by contracts limiting their use of your data to the services they perform for us
• Business partners — shipping carriers, marketplace platforms, and other partners needed to fulfill orders or deliver requested services
• Advertising partners — aggregated or pseudonymized data may be shared to measure and deliver relevant ads; we do not hand advertisers directly identifying information for their own independent marketing without your consent
• Legal and safety purposes — when required by law or legal process, or to protect the rights, property, or safety of ECOMVERSE, our users, or the public
• Business transfers — in a merger, acquisition, financing, or asset sale, your information may transfer as part of that transaction, subject to this policy or a comparable one

Under the CCPA, some advertising-related data sharing can count as a "sale" or "share" even when no money is exchanged. California residents can opt out at any time — see "Your Privacy Rights" below.

05Cookies and Tracking Technologies

This part of our cookie policy explains the categories of cookies ECOMVERSE uses and why:

• Strictly necessary cookies — required for core functionality, like staying logged in and keeping your cart intact; these can't be switched off in our cookie settings
• Performance and analytics cookies — help us understand how visitors use ecomvers.com so we can improve speed and content
• Functional cookies — remember preferences like language or currency
• Advertising and targeting cookies — used by us and our partners to deliver relevant ads and measure campaign performance

You can manage cookie preferences through our cookie banner on first visit, or anytime through your browser settings. Turning off certain cookies may limit some functionality.

06Data Retention

We keep personal data only as long as necessary to fulfill the purposes in this policy, including legal, accounting, or reporting obligations. Retention periods vary by data type and purpose — transaction records, for instance, are typically kept longer than marketing preferences. Once data is no longer needed, we securely delete, anonymize, or archive it under our internal retention procedures.

07Data Security

How ECOMVERSE protects your data comes down to the safeguards built into every layer of our Services:

• Encryption of sensitive data in transit and, where appropriate, at rest
• Role-based access controls limiting internal access on a need-to-know basis
• Regular security reviews, vulnerability testing, and monitoring for suspicious activity
• Due diligence on any service provider that processes personal data on our behalf

No method of transmission or storage is completely secure, and we can't guarantee absolute protection. If we become aware of a breach affecting your personal data, we will notify you and relevant authorities as required by applicable law.

08Your Privacy Rights

8.1 GDPR Privacy Rights (EEA, UK, and Switzerland)

If the GDPR or UK GDPR applies to you, you hold the following GDPR privacy rights:

• Access — request a copy of the personal data we hold about you
• Rectification — correct inaccurate or incomplete data
• Erasure — request deletion of your data, subject to certain exceptions
• Restriction — limit how we process your data in certain circumstances
• Portability — receive your data in a structured, commonly used format
• Objection — object to processing based on legitimate interests or direct marketing
• Withdraw consent — at any time, where processing relies on consent
• Lodge a complaint — with your local data protection supervisory authority

8.2 CCPA Privacy Notice (California Residents)

This CCPA privacy notice outlines the rights available to California residents under the CCPA and CPRA:

• Right to know what personal information we collect, use, disclose, and, where applicable, sell or share
• Right to delete personal information we've collected from you, subject to exceptions
• Right to correct inaccurate personal information
• Right to opt out of the sale or sharing of personal information
• Right to limit use and disclosure of sensitive personal information
• Right to non-discrimination for exercising any of these rights

To exercise any of these rights, contact us at privacy@ecomvers.com. We will verify your request and respond within the timeframes required by law.

8.3 Other Jurisdictions

Depending on where you live, you may hold similar rights under other frameworks, such as Canada's PIPEDA or Brazil's LGPD. We honor applicable rights requests regardless of location to the extent required by law — contact us and we'll guide you through the process relevant to your jurisdiction.

09Children's Privacy

ECOMVERSE Services are not directed to children, and we do not knowingly collect personal data from children under 13 (or the applicable minimum age where you live). If we learn we've inadvertently collected data from a child without appropriate consent, we will take steps to delete it. Parents or guardians who believe we may hold information from a child should contact us at privacy@ecomvers.com.

10International Data Transfers

ECOMVERSE operates globally, so your information may be transferred to, stored, and processed in countries other than your own, including the United States. Where we transfer personal data out of the EEA, UK, or Switzerland to countries without an adequacy decision, we rely on appropriate safeguards, such as Standard Contractual Clauses, to keep your data protected.

11Third-Party Links

Our Services may link to third-party websites we don't own or control. This policy doesn't apply to those sites, and we encourage you to review their own privacy policies before sharing any personal data with them.

12Changes to This Privacy Policy

We may update this ECOMVERSE privacy policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we'll update the "Last Updated" date above and, where required by law, provide additional notice. We encourage you to check back periodically.

13Contact Us

Questions, concerns, or requests about this policy or our data practices are welcome:

• Email: privacy@ecomvers.com
• Website: ecomvers.com/contact