What we collect when you open a store with Carttrix, what we do with it, and what you can ask us to do about it.
Carttrix lets you open and run an online shop on your own web address. This policy explains how we handle information when you sign up for the platform and when you run your store on it. It is written to be read, not to be survived - if anything here is unclear, write to us and we will explain it.
There are two different sets of information involved in running a shop on this platform, and this policy treats them differently.
If you are someone's customer and you are trying to reach the shop you bought from, contact that shop directly. We do not answer for a merchant's own privacy practices.
When you sign up we ask for your name, your email address, the name of your store, the web address you want, the country you are selling from and the plan you have chosen. We also keep the password you set for your store's admin panel, stored only as a one-way hash that cannot be read back.
Everything you put into your store - products, images, categories, settings, pages, and the orders and customer records that build up as you sell.
Information your browser and our servers generate as you use the platform: your IP address, browser and device details, the times you sign in, the pages and features you use, how much storage your store is using, and diagnostic logs when something goes wrong. We keep a record of sign-ins to your store's admin panel so that you and we can tell whether an account has been used by someone who should not have it.
Subscription payments are taken by a payment provider on a page hosted by that provider. Your card number never reaches our servers and we do not store it. What we keep is what we need to show you a billing history and to know whether a payment worked: the amount, the currency, the date, the status, and the reference the provider gave the transaction.
When you email support we keep the message and our reply, so we have the history the next time you write.
Depending on where you are, the law may require us to name a basis for each use of your information. Ours are:
We do not sell your information, and we do not sell your customers' information. We do not use the contents of your store to advertise to you or to anyone else.
The people who buy from you are your customers, not ours. You decide what your store asks them for, what you do with it, and how long you keep it. We process that information on your behalf so that your shop functions - so that an order can be placed, an address can be shipped to, and a receipt can be sent.
That makes some things your responsibility, and they are worth stating plainly:
Each store runs on its own separate database. One merchant's store cannot read another's products, orders or customers.
No system is perfectly secure, and we will not pretend otherwise. Keep your password to yourself, use a different one here than elsewhere, and turn on two-step sign-in. If you think someone has got into your account, write to us straight away.
Before you close a store, take a copy of anything you want to keep. Write to us and we will help you get it out.
The platform and the providers we rely on may process information in countries other than your own, which may have different data protection laws. Where we transfer information across a border we take reasonable steps to see that it stays protected to the standard described in this policy.
Depending on where you live, you may have the right to:
Most of these you can do yourself from your store's admin panel. For anything else, write to support@carttrix.com from the email address on the account. We will ask you to confirm it is you before we act, and we will answer within a reasonable time.
If you are one of a merchant's customers asking about your own details, ask that merchant - they hold that data, not us.
The platform is for adults running a business. It is not directed at children, and we do not knowingly collect information from them. If you believe a child has given us information, write to us and we will remove it.
We may update this policy as the service changes or the law does. When we do, we change the revision and the effective date at the top of the page, and for a material change we email the address on your account before it takes effect. Carrying on using the service after that means the new version applies to you.
Questions about this policy, or about information we hold, go to support@carttrix.com. A person reads it and replies.
See also our Terms of Service, which set out the rules for using the platform.