Privacy Policy

1. Information We Collect

We collect different types of information depending on whether you're a customer or seller on our platform:

Customer Information

• Personal details: Name, email address, phone number, date of birth
• Account information: Username, password (encrypted), profile preferences
• Address information: Billing and shipping addresses
• Payment information: Credit card details, payment history (processed securely)
• Purchase history: Orders, wishlist items, product reviews and ratings
• Communication records: Support tickets, chat conversations, feedback

Seller Information

• Business details: Business name, type, description, registration documents
• Financial information: Bank account details, tax information, commission rates
• Product data: Product listings, images, descriptions, inventory levels
• Performance metrics: Sales data, customer feedback, seller ratings
• Communication records: Seller support interactions, policy updates

Automatically Collected Information

• Device information: IP address, browser type, device identifiers
• Usage data: Pages visited, time spent, click patterns, search queries
• Location data: General geographic location (city/country level)
• Cookies and tracking: Session data, preferences, analytics information

2. How We Use Your Information

We use your information for various purposes to provide and improve our e-commerce platform:

Core Platform Operations

• Process and fulfill customer orders and payments
• Manage seller accounts and product listings
• Facilitate communication between buyers and sellers
• Provide customer support and technical assistance
• Send order confirmations, shipping updates, and delivery notifications

Platform Enhancement

• Personalize your shopping experience with product recommendations
• Improve search functionality and product discovery
• Analyze usage patterns to enhance platform features
• Conduct research and development for new services
• Optimize website performance and user interface

Business Operations

• Calculate and process seller commissions and payments
• Generate financial reports and analytics
• Conduct fraud detection and prevention
• Enforce platform policies and terms of service
• Comply with legal and regulatory requirements

Marketing and Communications

• Send promotional offers and marketing materials (with your consent)
• Notify you about new products from followed sellers
• Share platform updates and policy changes
• Conduct surveys and gather feedback
• Provide seller performance insights and recommendations

3. Information Sharing

We do not sell your personal information. We may share your information in the following limited circumstances:

Essential Service Providers

• Payment Processors: Stripe, PayPal, and other payment gateways to process transactions securely
• Shipping Partners: DHL, FedEx, local couriers to deliver your orders
• Cloud Services: AWS, Google Cloud for secure data storage and processing
• Analytics Providers: Google Analytics for website performance insights
• Email Services: SendGrid, Mailchimp for transactional and marketing emails

Platform Operations

• Seller Information: We share necessary order details with sellers to fulfill your purchases
• Customer Reviews: Your reviews and ratings are displayed publicly (with your consent)
• Seller Analytics: Aggregated sales data is shared with sellers for business insights
• Fraud Prevention: Information may be shared with fraud detection services

Legal and Safety Requirements

• Legal Compliance: When required by law, court order, or government request
• Safety Protection: To protect our users, platform, or public safety
• Business Transfers: In case of merger, acquisition, or sale of business assets
• Consent: When you explicitly consent to sharing your information

4. Data Security

We implement comprehensive security measures to protect your personal information:

Technical Safeguards

• Encryption: SSL/TLS encryption for all data transmission and AES-256 for data at rest
• Secure Infrastructure: Cloud-based servers with enterprise-grade security
• Access Controls: Multi-factor authentication and role-based access permissions
• Regular Updates: Automated security patches and system updates
• Monitoring: 24/7 security monitoring and intrusion detection

Operational Safeguards

• Employee Training: Regular data protection and security awareness training
• Access Management: Limited access to personal data on a need-to-know basis
• Incident Response: Comprehensive data breach response procedures
• Regular Audits: Third-party security assessments and compliance reviews
• Data Minimization: We only collect and retain data necessary for our services

Payment Security

• PCI Compliance: We are PCI DSS compliant for payment processing
• Tokenization: Payment data is tokenized and never stored on our servers
• Secure Gateways: All payments are processed through certified payment processors
• Fraud Detection: Advanced fraud detection and prevention systems

5. Cookies and Tracking

We use cookies and similar tracking technologies to enhance your browsing experience. Cookies are small files that are stored on your device and help us:

• Remember your preferences and settings
• Keep you logged in to your account
• Analyze website traffic and usage patterns
• Provide personalized content and recommendations

You can control cookie settings through your browser preferences. However, disabling cookies may affect the functionality of our website.

6. Your Rights and Choices (GDPR Compliance)

Under the General Data Protection Regulation (GDPR) and other applicable laws, you have the following rights:

Data Subject Rights

• Right of Access: Request a copy of all personal data we hold about you
• Right to Rectification: Correct inaccurate or incomplete personal data
• Right to Erasure: Request deletion of your personal data (with some exceptions)
• Right to Restrict Processing: Limit how we use your personal data
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests or for marketing

Consent Management

• Marketing Communications: Opt-out of promotional emails at any time
• Cookie Preferences: Manage cookie settings through your browser or our cookie banner
• Data Processing: Withdraw consent for non-essential data processing
• Account Deletion: Request complete account deletion and data removal

How to Exercise Your Rights

• Account Settings: Update your information directly in your account settings
• Contact Us: Email us at privacy@oneshopdavao.com for data requests
Response Time: We will respond to your request within 30 days
• Verification: We may need to verify your identity before processing requests

7. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. When we no longer need your information, we will securely delete or anonymize it.

8. Children's Privacy

Our service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure that such transfers comply with applicable data protection laws and implement appropriate safeguards to protect your information.

10. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically for any changes.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us: