Vartt collects only necessary data in order to provide you with a safe and uninterrupted e-commerce infrastructure. Our data collection processes are based on the "Data Minimization" principle.
Identity and Contact Data: The name, email address and company information you provide when registering on the Platform or opening a store (for Sellers). Purpose: To create your account and provide in-platform authorization.
Transaction and Financial Data: Order history and billing information for purchases made through the Platform. Purpose: To complete the e-commerce flow and fulfill legal tax/invoice obligations.
Technical and Device Data: Your IP address, browser type, operating system and time zone settings. Purpose: To prevent fraud, detect cyber attacks and analyze system performance.
Community Data: Posts, comments and likes that you voluntarily create on community.vartt.com.
Vartt is a marketplace and SaaS (Software as a Service) provider.
When a Buyer makes a purchase from a Store (Seller) on Vartt, the shipping and contact information necessary for the order to be delivered are shared with the Seller.
In this scenario, Vendors are considered independent "Data Controllers" for their own customers' data. Sellers are prohibited from using this data outside the platform for their own marketing purposes without permission. Vartt cannot be held legally responsible for off-platform data breaches of Sellers.
Your data is protected by the world's most advanced security protocols in the Vartt ecosystem:
Zero Trust Architecture: Your store data and customer information are strictly isolated from other stores and users with advanced database rules (Row Level Security). No store can access anyone else's data.
Bank Level Financial Security: NEVER store full credit card number, CVV code or payment password on Vartt servers or databases. All financial data you enter during the purchase process is instantly encrypted and transmitted directly to Stripe, our global payment infrastructure with PCI-DSS Level 1 security certification. Responsibility for financial data flow belongs entirely to licensed payment institutions.
Vartt never sells your data to third-party advertising networks, data brokers or marketing companies. Your data is only shared with our global technology partners (Vercel, Supabase, Stripe), which is mandatory for the survival of the platform and the performance of the service, within the framework of strict confidentiality agreements (DPA) and anonymized. Additionally, your data may be shared with competent legal authorities when official court orders and legal obligations arise.
Your data is stored as long as your account is active or as necessary to provide you with services. When you delete your account, your entire personal digital footprint of your profile is deleted. However, invoices, chargebacks and tax records of commercial transactions continue to be kept in encrypted archives for the period of legal obligation (usually 5 to 10 years) in accordance with international trade laws.
Vartt is fully compliant with international privacy standards, especially the European Union General Data Protection Regulation (GDPR). The rights you have in this context are as follows:
Information and Access: The right to request what data we hold about you.
Correction: The right to request that your incomplete or inaccurate data be updated.
Right to be Forgotten (Deletion): The right to request the permanent deletion of all your personal data, except for commercial/financial records that we are legally obliged to keep.
Objection and Restriction: The right to object to the processing of your data.
Because Vartt is a global platform, your data may be processed and hosted on secure servers outside your country (for example, servers based in the European Union or the USA). These transfers take place under internationally recognized data protection shields, such as Standard Contractual Clauses (SCC) approved by the European Commission.
You can contact our Data Protection Officer regarding our privacy practices, your requests to exercise your rights over your data, or any official applications under the GDPR.
Privacy Communication Channels:
For your Data Protection and Privacy requests, contact our Data Protection Officer: privacy@vartt.com