Privacy Policy

Last updated: January 2025

Privacy Policy

DynoMart ("we", "us", "our") is committed to protecting your personal information. This policy explains what data we collect, how we use it, and your rights.

1. Information We Collect

• Account data: Name, email address, phone number, password (hashed), profile photo
• Order data: Shipping address, billing address, order history, payment references you provide
• Usage data: Pages visited, products viewed, search queries, IP address, browser type
• Communications: Messages sent through our chat system, support tickets
• Vendor data: Business name, store information, payment account details (bank/PayPal/crypto)

2. How We Use Your Data

• To operate and improve the marketplace
• To process and fulfil orders
• To communicate with you about your account and orders
• To detect and prevent fraud and abuse
• To send promotional communications (only with your consent)
• To comply with legal obligations

3. Data Sharing

We do not sell your personal data. We share limited data with:

• Vendors: Your name and shipping address are shared with the vendor fulfilling your order
• Service providers: Email delivery, analytics (with anonymisation where possible)
• Law enforcement: When required by law or to protect rights and safety

4. Data Retention

Account data is retained while your account is active and for up to 3 years after account closure for legal and fraud purposes. Order records are retained for 7 years for tax and legal compliance.

5. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data ("right to be forgotten")
• Object to or restrict certain processing
• Data portability

To exercise any of these rights, email privacy@dynomart.com.

6. Cookies

We use session cookies (essential for login), and optional analytics cookies. You can disable non-essential cookies in your browser settings.

7. Security

We use industry-standard security measures including encrypted passwords (bcrypt), HTTPS, CSRF protection, and regular security audits. However, no system is 100% secure.

8. Children

DynoMart is not intended for users under 16 years of age. If you believe a child has provided us with personal data, contact us immediately.

9. Changes to This Policy

We may update this policy periodically. Material changes will be notified by email or site notice.

10. Contact

Privacy-related enquiries: privacy@dynomart.com