Privacy Policy.

3.0. How We Use Your Information

We use your Personal Information to provide, improve, and secure our Services, including:

Providing Services: Facilitating Vendor-Customer connections, processing transactions, managing accounts, and fulfilling orders.

Vendor Onboarding and Verification: Reviewing company registration documents to ensure legitimacy and compliance with our terms.

Customer Support: Responding to inquiries, resolving disputes, and providing assistance

Personalization and Marketing: Recommending products, sending promotional emails (with opt-out options), and analyzing user preferences.

Analytics and Improvement: Monitoring usage to enhance the Services, detect fraud, and conduct research.

Legal Compliance: Complying with laws, responding to legal requests, or enforcing our terms.

Security: Protecting against unauthorized access, fraud, or technical issues.

We may use de-identified or aggregated data (which does not identify you) for any purpose, including sharing with third parties.

4.0. Sharing Your Information Policy

We do not sell your Personal Information. However, we may share it in the following ways:

With Vendors and Customers: Customers' shipping and contact details are shared with Vendors to fulfill orders. Vendors' business information is visible to Customers browsing the platform

Service Providers: With third-party vendors who assist us, such as payment processors (e.g. Stripe), shipping companies (e.g., UPS), cloud storage providers (e.g., AWS), and analytics firms. These providers are contractually obligated to protect your information.

Business Transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred to the new entity.

Legal Requirements: If required by law, subpoena, or government request, or to protect our rights, safety, or property.

With Your Consent: For any other purpose with your explicit permission

We may use de-identified or aggregated data (which does not identify you) for any purpose, including sharing with third parties.

5.0. International Data Transfers

Qartt operates globally, with servers potentially located in the United States and other countries. By using our Services, you consent to the transfer, storage, and processing of your information outside your country of residence, including to the United States, where data protection laws may differ from those in Africa or elsewhere. We implement appropriate safeguards, such as standard contractual clauses, to protect transferred data.

6.0 Data Security

We employ reasonable administrative, technical, and physical safeguards to protect your Personal Information from unauthorized access, loss, misuse, or alteration. For example:

Encryption of sensitive data in transit (e.g., via HTTPS) and at rest.

Access controls and regular security audits.

Secure storage of Vendor registration documents.

However, no system is completely secure. We cannot guarantee absolute security, and you use our Services at your own risk.

7.0 Your Rights and Choices

You have certain rights regarding your Personal Information, subject to applicable laws (e.g., CCPA for California residents or similar laws in other jurisdictions):

Access and Correction: Request access to or correction of your information.

Deletion: Request deletion of your information, subject to legal retention requirements.

Opt-Out: Opt out of marketing communications or certain data sharing

Do Not Sell: We do not sell Personal Information, but you may opt out of any future sales if applicable.

Cookies: Manage preferences via browser settings.

To exercise these rights, contact us at support@qartt.me. We may verify your identity before responding. Responses will be provided within applicable legal timeframes.

For Vendors, note that company registration documents are retained for verification and compliance purposes and may not be deletable.

8.0 Retention of Information

We retain Personal Information for as long as necessary to provide the Services, comply with legal obligations, resolve disputes, and enforce agreements. For example:

Account information is retained while your account is active and for a reasonable period thereafter.

Transaction records are kept for at least 7 years for tax and auditing purposes.

After retention periods, we securely delete or anonymize data.