Placeholder text. This document is a structural placeholder supplied with the software. It is not legal advice and has not been reviewed by a lawyer. The operator must replace it with counsel-reviewed text for each jurisdiction it operates in before accepting real customers.
1. Controller
[Operator legal name and contact for privacy requests.]
2. What we collect
- Account data: name, email, password hash, two-factor settings.
- Customer order data (for merchants' orders): name, email, shipping address, order contents.
- Traffic data: anonymised click and visit events. IP addresses are only stored as salted hashes for rate limiting and fraud prevention and are deleted within a day.
3. Who sees customer data
The merchant who sells the order and platform support staff. Affiliates never receive a customer's name, contact details or shipping address.
4. Retention
Customer contact details are anonymised after the retention period [set by the operator, default 730 days]; financial records (amounts, ledgers, audit trail) are kept as legally required without personal fields.
5. Your rights
[Access, correction, erasure, objection — how to contact us.]
