Privacy Policy

1. Introduction

Ecpik ("we," "our," "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our ecommerce platform.

2. Information We Collect

We collect several types of information to provide and improve our services to you.

• Personal Information: When you register, we collect your name, email address, phone number, and shipping address.
• Identity Verification Information: To verify your account, we collect a copy of your National ID card and a profile picture. This is a mandatory part of our registration process.
• Location Information: We collect your device's precise location to determine delivery availability, calculate shipping costs, and personalize your shopping experience.
• Payment Information: We collect payment details (e.g., credit card number) to process transactions. This data is handled by our secure, third-party payment processors. We do not store full credit card numbers on our servers.
• Technical Data: We automatically collect information like your IP address, browser type, and pages you visit.

3. How We Use Your Information

We use the information we collect for the following purposes:

• To create and manage your account.
• To verify your identity using your National ID and profile picture.
• To process your transactions and deliver products.
• To provide customer support.
• To personalize your experience, including using your location to show relevant offers.
• To send you administrative messages, updates, and security alerts.
• To detect and prevent fraud and abuse.

4. Legal Basis for Processing (Especially for Sensitive Data)

The collection of your National ID card is considered the processing of sensitive personal data. We process this data based on the following legal grounds:

• Explicit Consent: By registering on our platform and submitting your National ID, you are giving us explicit consent to process this data for the specific purpose of identity verification.
• Legitimate Interest: We have a legitimate interest in preventing fraud and ensuring the security and integrity of our platform.
• Legal Obligation: In some jurisdictions, we may have a legal obligation to verify the identity of our users.

5. How We Share Your Information

We do not sell your personal information. We may share information with:

• Sellers: Necessary information (name, shipping address) is shared with the seller to fulfill your order.
• Service Providers: Trusted third parties who assist us in operating our platform, such as payment processors, delivery companies, and cloud hosting providers. They are contractually bound to protect your data.
• Legal Requirements: We may disclose information if required by law, such as to comply with a subpoena or similar legal process.

6. Data Retention

We will retain your personal information only for as long as necessary to fulfill the purposes outlined in this policy.

National ID and Profile Picture: This sensitive data will be deleted from our primary systems immediately after the verification process is successfully completed. Anonymized or hashed data may be retained for a longer period in a secure archive solely for the purpose of fraud prevention and legal compliance, as required by law.

7. Your Data Rights

Depending on your location, you may have the right to:

• Access the personal information we hold about you.
• Correct inaccurate data.
• Request the deletion of your personal data.
• Object to or restrict our processing of your data.
• Withdraw your consent at any time (without affecting the lawfulness of processing based on consent before its withdrawal).

To exercise these rights, please contact us using the details below.

8. Data Security

We implement robust security measures, including encryption, to protect your data, especially your sensitive National ID information, during transmission and storage. However, no method of transmission over the Internet is 100% secure.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We will ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.

10. Children's Privacy

Our Platform is not intended for individuals under the age of [Age, e.g., 18]. We do not knowingly collect information from children.

11. Changes to This Privacy Policy

We may update this policy. We will notify you of any changes by posting the new policy on this page and updating the "Last Updated" date.

12. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact our Data Protection Officer at: support@ecpik.com