No raw card data
Card and payment details are processed securely by Stripe. Venroys does not store full card numbers or CVC codes.
This policy explains in clear language what data Venroys processes, why it is needed, and the choices and rights available to you.
Venroys OÜ is established in Estonia and is subject to the GDPR. Depending on the service, Venroys, an independent seller and a service provider may each have a separate role.
Card and payment details are processed securely by Stripe. Venroys does not store full card numbers or CVC codes.
A seller is responsible for its products, customer service and its own legal obligations. Venroys operates the technical infrastructure.
You can exercise privacy rights, stop marketing and manage non-essential cookies.
Founders: Constantino Aemilius Darshan Changoe and Muhammet Fatih Koçyigit
Bergantung pada cara anda menggunakan Venroys (membeli-belah, membuat akaun, menghubungi kami atau menjual di platform), kami mungkin memproses kategori data peribadi berikut:
| Kategori | Contoh |
|---|---|
| Data Pengenalan dan Hubungan | Nama, alamat pengebilan/penghantaran, alamat e-mel, nombor telefon, ID akaun |
| Data Pembayaran dan Pengebilan | Token penyedia pembayaran, ID transaksi, butiran invois, butiran pembayaran (untuk penjual) |
| Data Pesanan dan Pemenuhan | Barang yang dipesan, kuantiti, kaedah penghantaran, status penghantaran, maklumat pemulangan/bayaran balik |
| Data Akaun dan Log Masuk | Nama pengguna/e-mel, kata laluan hash, pilihan akaun, cap masa log masuk |
| Data Komunikasi dan Persetujuan | Mesej sokongan, status ikut serta surat berita, pilihan persetujuan kuki |
| Data Teknikal dan Peranti | Alamat IP, jenis pelayar, maklumat peranti, log sesi, peristiwa keselamatan |
| Data Penggunaan dan Tingkah Laku | Halaman yang dilihat, pertanyaan carian, klik, tingkah laku tatal, produk yang dilihat |
| Seller and verification data | Business details, representatives, date of birth, tax details, verification status and Stripe Connect account references |
| Storefront and content data | Brand name, domain, website content, product media, theme settings and published pages |
| Derived risk and trust signals | Delivery outcomes, refund and chargeback rates, policy status, suspicious activity and marketplace progress |
Kami tidak sengaja mengumpul kategori data peribadi khas (contohnya, data kesihatan). Sila jangan sertakan maklumat peribadi sensitif dalam nota pesanan, mesej sokongan atau medan teks bebas yang lain melainkan jika ia benar-benar perlu.
| Tujuan | Asas Perundangan (GDPR) | Butiran |
|---|---|---|
| Penciptaan dan pengesahan akaun | Pelaksanaan kontrak (Perkara 6(1)(b)) | Untuk membuat akaun anda, anda boleh log masuk dengan selamat dan memastikan akaun anda tersedia. |
| Pemprosesan pesanan, pembayaran dan penghantaran | Pelaksanaan kontrak (Perkara 6(1)(b)) | Untuk memproses pembelian, mengesahkan pesanan, mengatur penghantaran dan mengurus pemulangan atau bayaran balik. |
| Sokongan pelanggan dan komunikasi perkhidmatan | Kepentingan sah (Perkara 6(1)(f)) | Untuk menjawab soalan, menyiasat isu dan meningkatkan kualiti sokongan. |
| Komunikasi pemasaran dan tawaran promosi | Persetujuan (Perkara 6(1)(a)) | Hanya jika dikehendaki oleh undang-undang dan selepas anda memilih untuk menyertai. Anda boleh berhenti melanggan atau menarik balik persetujuan pada bila-bila masa. |
| Keselamatan, pencegahan penipuan dan integriti platform | Kepentingan sah (Perkara 6(1)(f)) dan kewajipan undang-undang (Perkara 6(1)(c)) | Untuk mengesan penyalahgunaan, melindungi akaun, mencegah penipuan dan mematuhi obligasi berkaitan keselamatan. |
| Pematuhan undang-undang, cukai dan perakaunan | Kewajipan undang-undang (Perkara 6(1)(c)) | Untuk memenuhi keperluan pembukuan, cukai, pelaporan dan keperluan berkanun yang lain. |
| Seller verification and payouts | Contract, legal obligation and legitimate interests | To onboard sellers, verify identity and business details, enable payouts and limit financial fraud. |
| Marketplace trust and policy administration | Legitimate interests and contract | To monitor seller performance, review marketplace applications and protect customers and the platform. |
| Service | Role and data | More information |
|---|---|---|
| Stripe | Payments, direct charges, seller verification, fraud prevention and payouts. Stripe receives data directly through secure payment and onboarding components. | Stripe Privacy |
| Printful | Optional product, fulfillment, shipping, tracking and return services. Name, address, contact and order data may be shared for fulfillment. | Printful Privacy |
| Hosting and database | Cloud hosting, secure storage, backups, network delivery and operational logging. | Contractually restricted providers |
| Email and communications | Transactional messages, verification, order updates, support and consented marketing. | Necessary contact and message data only |
Specific vendors and subprocessors may change as our infrastructure changes. We assess providers before they process personal data.
Some providers or their subprocessors are located outside the European Economic Area. Where the GDPR requires it, we rely on an adequacy decision, European Commission Standard Contractual Clauses or another valid safeguard. We assess supplementary organizational and technical measures where appropriate.
European Commission Standard Contractual Clauses ↗| Kategori Data | Tempoh Pengekalan |
|---|---|
| Invois dan rekod transaksi | At least 7 years under applicable Estonian accounting and tax rules, calculated from the legally prescribed starting date |
| Data akaun pelanggan | Sepanjang tempoh akaun dan tempoh terhad selepas tidak aktif atau penutupan |
| Keutamaan pemasaran dan rekod persetujuan | Sehingga persetujuan ditarik balik atau tidak lagi diperlukan untuk menunjukkan persetujuan |
| Data keselamatan, log dan analitik | Untuk tempoh terhad yang sesuai untuk tujuan keselamatan dan analitik |
| Seller KYC and payout records | While needed for the payment relationship and afterward as required for financial, anti-fraud and legal obligations; Stripe also applies its own retention periods |
| Order and fulfillment records | As needed for delivery, returns, disputes, warranties and applicable accounting and tax periods |
After the applicable period, we delete or anonymize data unless it remains necessary for a legal claim, investigation, dispute or other legal obligation.
Kami melaksanakan langkah-langkah teknikal dan organisasi yang sesuai untuk melindungi data peribadi, termasuk:
No system is entirely risk-free. Protect your account with a unique password and two-factor authentication where available.
Bergantung pada lokasi anda dan undang-undang yang terpakai, anda mungkin berhak untuk:
Send requests to info@venroys.com. We may request additional information to verify your identity. We normally respond within one month; the GDPR permits a reasoned extension for complex requests.
Venroys uses security, fraud and performance indicators such as delivery outcomes, refunds, chargebacks, account age, policy incidents and verification status. These signals support risk management and marketplace review. Marketplace access is not automatically guaranteed by a score. Decisions with a material effect may be reviewed by a person, and you may contact us to request an explanation or review.
We investigate suspected personal-data breaches, limit their effects and notify the competent authority and affected people where legally required. Report suspected security issues to info@venroys.com without sending passwords or complete payment details.
Sellers receiving personal data through Venroys must use it lawfully, securely and only for permitted business purposes. They may not use customer data for unsolicited marketing, sell it or disclose it outside necessary order and support processes. Sellers must provide their own privacy information where required and respond to data-subject requests for which they are responsible.
Venroys tidak bertujuan untuk kanak-kanak di bawah umur yang dikehendaki oleh undang-undang yang terpakai untuk memberi persetujuan terhadap pemprosesan data sendiri (contohnya, 16 tahun di sesetengah bidang kuasa). Kami tidak sengaja mengumpul data peribadi daripada kanak-kanak tanpa persetujuan yang diperlukan.
Kami mungkin mengemas kini Dasar Privasi ini dari semasa ke semasa. Tarikh "Terakhir dikemas kini" di bahagian atas menunjukkan bila halaman ini diubah buat kali terakhir. Jika kami membuat perubahan penting, kami mungkin akan memaklumkan anda melalui laman web, e-mel atau pemberitahuan akaun jika sesuai.
Founders: Constantino Aemilius Darshan Changoe and Muhammet Fatih Koçyigit
info@venroys.com