Cratebase Privacy Policy
Last Updated: 18 September 2023
Welcome to Cratebase. As the operating platform for merchants in the vinyl world, we understand that every record, like every piece of data, needs precision and care. Our Privacy Policy clarifies our stance on safeguarding the data entrusted to us by connected merchants.
1. Introduction
By opting for our platform, merchants agree to the terms set out in this Privacy Policy. We act as a service provider to merchants, processing order data as directed by them. It's important to note that while we process consumer data, we do so on behalf of the merchants, and we do not establish direct ties with consumers.
2. Information We Collect
To ensure seamless order fulfilment for merchants, we process:- Order details: items, quantities, and related notes.- Shipping details: delivery and billing addresses.- Contact details: email addresses and phone numbers.
3. Purpose and Legal Basis for Processing
In adherence to the GDPR and Dutch law:- Order Fulfilment for Merchants: The primary objective is to aid merchants in managing and fulfilling orders.- Transparent communication regarding order specifics and status with the merchants.- Regular enhancement of our services based on merchant feedback and usage patterns.
4. Information Sharing and Disclosure
Accurate Deliveries for Merchants: Collaborating with shipping carriers is integral for order delivery. We share relevant details, primarily addresses, to facilitate accurate order deliveries on behalf of the merchants. Beyond this, we share data selectively:- Other essential service providers underpinning our operations.- Legal entities if mandated by law.
5. Data Retention and Erasure
Merchant data is stored as long as it serves its intended purpose. Once fulfilled or upon a merchant's request, we ensure its secure removal.
6. Security
Protecting merchant data is our priority. Comprehensive measures, like encryption, secure servers, and routine assessments, uphold this data's security.
7. Your Rights under the GDPR
Merchants operating within the EU and their customers have specific rights regarding their data:
- Access: View the stored data.
- Rectification: Address inaccuracies.
- Erasure: Request deletion.
- Restriction: Set limits on our processing.
- Portability: Transfer or get a personal copy.
- Objection: Express concerns about our processing techniques.
Please reach out to the merchant for any order-related concerns or directly to us for any rights-related concerns.
8. Changes to this Privacy Policy
Our policy may undergo adjustments, and we pledge to keep our merchant partners updated on significant changes.
9. Contact
For any inquiries or GDPR-related queries:
Cratebase.io / The New Black BV
Amsterdam, The Netherlands
privacy@cratebase.io
