Privacy Policy
This Privacy Policy explains how Cartisto (“Cartisto”, “we”, “us”) collects, uses, shares and protects personal data when you visit our website, create an account, or use our e-commerce platform and related services (the “Services”). By using the Services you agree to the practices described here.
1. Who we are
Cartisto provides a multi-tenant e-commerce platform that lets merchants create and operate online stores, together with payments, shipping, point-of-sale, marketing and analytics tools.
For merchants and store visitors, Cartisto acts as a data processor for the store data a merchant controls, and as a data controller for the account and platform data we collect directly. Questions about this policy can be sent to privacy@cartisto.com.
2. Information we collect
Account data you provide: name, email address, phone number, store details, and billing information.
Usage and device data collected automatically: IP address, browser and device type, pages viewed, referring URLs, and interactions with the Services.
Transaction data when you or your customers place orders: order contents, amounts, and the status of payments and shipments. Full card numbers are handled by our PCI-compliant payment providers, not stored by Cartisto.
Communications you send us, including support requests and survey responses.
3. How we use your information
To provide, operate, secure and improve the Services, and to create and manage your account.
To process transactions, prevent fraud, and enforce our terms.
To provide customer support and send service, security and transactional messages.
With your consent where required, to send product updates and marketing you can opt out of at any time.
To produce aggregated, non-identifying analytics about how the Services are used.
4. Legal bases for processing
Where data-protection law such as the GDPR applies, we rely on: performance of a contract (to deliver the Services); our legitimate interests (to secure and improve the Services); your consent (for optional marketing and non-essential cookies); and compliance with legal obligations.
You may withdraw consent at any time without affecting processing already carried out.
6. Cookies and tracking
We use strictly necessary cookies to run the Services (for example, to keep you signed in), and, with your consent, analytics and marketing cookies.
You can control non-essential cookies through your browser settings or any cookie controls we provide. Disabling some cookies may affect functionality.
7. Data retention
We keep personal data only as long as needed for the purposes described here, to comply with legal, tax and accounting obligations, and to resolve disputes and enforce agreements.
When data is no longer required, we delete or anonymise it.
8. Security
We use technical and organisational measures — including encryption in transit, access controls and tenant isolation — to protect personal data. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
9. International transfers
Your data may be processed in countries other than your own. Where we transfer data internationally, we use appropriate safeguards such as standard contractual clauses.
10. Your rights
Subject to applicable law, you may request access to, correction of, or deletion of your personal data; object to or restrict certain processing; withdraw consent; and receive a copy of your data in a portable format.
To exercise these rights, contact privacy@cartisto.com. You also have the right to complain to your local data-protection authority.
11. Children’s privacy
The Services are not directed to children under 16, and we do not knowingly collect their personal data. If you believe a child has provided us data, contact us and we will delete it.
12. Changes to this policy
We may update this policy from time to time. Material changes will be posted here with a new effective date, and where appropriate we will notify you.
13. Contact us
For any privacy question or request, email privacy@cartisto.com.