Privacy Policy · Ecom Polygon

Ecom Polygon is an enterprise e-commerce infrastructure and operating system (SaaS/PaaS) for merchants and organizations, provided by a limited liability company doing business under the Ecom Polygon name.

This Privacy Policy is established in accordance with generally applicable data protection principles and laws governing the processing of personal data by Limited Liability Companies and similar entities. In this Privacy Policy, "Ecom Polygon," "we," "our," and "us" refer to that company. The full legal name of the data controller appears in the notice at the bottom of this page. We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, platform, and services (collectively, the "Services").

DATA CONTROLLER

We act as the data controller for personal data where we determine the purposes and means of processing, and as a data processor or service provider for personal data we process on behalf of merchants using the Services.

PURPOSE OF DATA COLLECTION

We collect and process personal data for communication with you, for service improvement, for user experience optimization, and for the certification, account, legal, and operational purposes described in this Privacy Policy. When merchants use the Services, we also process information about their stores and end-customers as a data processor/service provider on behalf of those merchants.

1. INFORMATION WE COLLECT

1.1 Information You Provide When you apply for certification or create an account, we may collect: • Full name and contact information (email address, phone number) • Business name and website URL • Business details (industry, revenue range, product count, platform used) • Country of residence or business operation • Responses to certification assessment questions • Store and product information submitted for evaluation • Payment information (processed by third-party payment processors; we do not store card details) • Any other information you voluntarily provide

1.2 Information Collected Automatically When you access our Services, we may automatically collect: • IP address • Browser type and version • Device type and operating system • Pages visited and time spent • Referring website • Cookies and similar tracking technologies

1.3 Cookies We use cookies and similar technologies to operate our platform, remember your preferences, and analyze usage. You can manage cookie preferences through your browser settings. Essential cookies are required for the platform to function properly.

2. HOW WE USE YOUR INFORMATION

We use the information we collect to: • Provide, operate, and maintain the Ecom Polygon platform and related infrastructure • Process and evaluate certification applications • Provide assessments, analytics, dashboards, and issue certificates • Manage your account and provide customer support • Display certified brands on our public directory (with approval) • Send notifications about your account, certification status, and use of the Services • Send service-related communications (assessment results, certificate issuance, renewal reminders) • Analyze usage of the Services and improve and develop our products and features • Comply with legal, regulatory, and contractual obligations • Prevent fraud, abuse, and security incidents When we process end-customer or store data on behalf of merchants that use the Services, we do so in accordance with their instructions and applicable data protection obligations.

3. LEGAL BASES FOR PROCESSING

We process your personal information where necessary to: • Perform our contract with you and provide our certification Services • Pursue our legitimate interests in operating, securing, and improving the Services, where permitted by applicable law • Rely on your consent, where required by applicable law • Comply with legal obligations

4. INFORMATION SHARING

We do not sell your personal information. We may share your information with:

4.1 Service Providers Third-party service providers who help us operate our Services, including: • Payment processors (Stripe) • Email service providers (AWS SES) • Hosting providers (Vercel) • Analytics tools

4.2 Public Directory If your organization achieves certification and is approved for the Certified Brands directory, we may publicly display: • Organization name • Certification stages achieved • Certification scores • Certificate identifiers • Date of certification

4.3 Legal Requirements We may disclose information if required by applicable law, legal process, or government request, or to protect the rights, property, or safety of us, our users, or others.

5. DATA SECURITY

We implement appropriate technical and organizational measures to ensure the security and confidentiality of personal data. However, no method of transmission over the Internet or electronic storage is completely secure.

6. DATA RETENTION

We retain your information for as long as your account is active or as needed to provide our Services. We may retain certain information after account termination for legal compliance, dispute resolution, or enforcement of our agreements. Assessment data and certification records are retained for a minimum of three years for audit and verification purposes.

7. YOUR RIGHTS

Depending on where you live, you may have rights under applicable data protection laws, which can include: • Access: Request a copy of the information we hold about you • Correction: Request correction of inaccurate information • Deletion: Request deletion of your information, subject to our retention requirements • Portability: Request your data in a portable format, where applicable • Objection or restriction: Object to or ask us to restrict certain processing, where applicable • Withdrawal of consent: Where processing is based on consent

Requests may be made via email at contact@ecompolygon.com. We will respond within a reasonable time in line with applicable law.

8. INTERNATIONAL DATA TRANSFERS

Your information may be transferred to and processed in countries or territories where we or our service providers operate. By using our Services, you acknowledge that your information may be processed outside your country of residence. We take steps to ensure your data is treated securely and in accordance with this Privacy Policy.

9. CHILDREN'S PRIVACY

Our Services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child, we will take steps to delete it.

10. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time. The updated policy will be posted on our website with a new "Last Updated" date. Your continued use of the Services after changes constitutes acceptance of the updated policy.

11. REGIONAL VARIATIONS

Privacy and data protection laws differ by country and region. Depending on where you live, you may have additional rights or remedies under local law. Nothing in this Privacy Policy is intended to limit those rights where they apply. If you have questions about how this Policy applies to you, contact us using the details below.

12. CONTACT

For any questions about this Privacy Policy or to exercise your rights, contact us using the email below. The legal entity responsible for this Policy is identified in the copyright notice at the bottom of this page.

Email: contact@ecompolygon.com