1. Purpose and scope
This Privacy Policy explains how ailcommerce processes, stores, protects, and shares personal data for visitors, members, and customers using the storefront.
The platform processes data required for product browsing, account registration, cart, order, payment, delivery, returns, customer support, newsletter subscription, and campaign operations.
2. Categories of data processed
The data processed may vary by transaction. Main categories include identity and contact details, delivery and billing addresses, order and cart data, payment transaction references, return and support requests, account security records, preference and consent records, IP address, device/browser data, and cookie records.
Card data is processed through the secure infrastructure of the selected payment provider. The platform is designed not to store full card details, except for transaction references required by payment providers.
3. Purposes of processing
Personal data is processed to manage accounts, receive orders, verify payments, prepare and deliver products, handle returns and cancellations, provide customer support, fulfill invoicing and legal obligations, perform security and abuse checks, and send campaign or newsletter communications where permitted.
4. Legal bases
Data is processed based on the establishment and performance of a contract, compliance with legal obligations, establishment/exercise/protection of rights, legitimate interests, and, where required, explicit consent. Marketing communications and non-essential cookies are subject to separate preference and consent mechanisms.
5. Sharing with third parties
Data may be shared, to the extent necessary, with shipping and logistics providers, payment service providers, e-invoice/accounting services, infrastructure/hosting/backup providers, security and fraud prevention services, support and communication tools, competent public authorities, and other parties where required by law.
6. Retention period
Personal data is retained for as long as required for the processing purpose and for the statutory retention periods. At the end of the retention period, data is deleted, destroyed, or anonymized. Order, invoice, payment, and legal transaction records may be retained for longer where required by applicable law.
7. Your rights
You may request information about whether your data is processed, ask for details of the processing, learn whether it is used for its intended purpose, learn the third parties to whom it is transferred, request correction of incomplete or inaccurate data, request deletion or destruction where applicable, and exercise other rights available under applicable data protection laws.
8. Contact
For privacy and personal data requests, you can contact us through the email address shown in the footer. Requests are evaluated within a reasonable period according to their nature and applicable legal requirements.