Home

Privacy Policy

Home

Kartco International Ltd

Privacy Policy

Declaration: This document includes legal information, policies and copyright terms and conditions which solely belong to Kartco International Ltd.

Information shared in this document is for the sole purpose of the content created for Kartco and should not be imitated, modified or shared by any third parties.

The following pages are listed in this document:

Principles
Privacy Policies

Our principles -

Kartco International Ltd is dedicated to safeguard intellectual property rights in order to ensure the integrity and safety of our e-commerce ecosystem whilst upholding the trust of both consumers and sellers in our platform. Leveraging cutting-edge technology and fostering collaboration with various stakeholders, such as right holders, industry associations and governmental bodies, we implement industry-leading methods to preserve intellectual property rights. Our approach involves comprehensive procedures for notification and removal, practice scrutiny and removal of infringing products and any misconduct or inappropriate behaviour displayed by any parties who access our platform our approach has active support for law enforcement agencies in their investigative and enforcement endeavours.

At Kartco International Ltd, we are dedicated to establishing ourselves as industry frontrunners and trusted partners in the realm of intellectual property protection. We are fully committed to efficiently assisting legitimate complaints of intellectual property infringement. In order to safeguard rights within our platform, right holders are required to adhere to our platforms relevant submission guidelines for deletion request, which include providing evidence of their intellectual property ownership and sustaining the existence of infringement

We will take decisive actions against individuals or entities that violate our platforms policies on intellectual property protection and, if and when necessary we will hold the right to compel them to assume both civil and criminal responsibilities. We maintain a strong stance against accepting takedown requests and other complaints with malicious intent, such as those aimed at disrupting a competitor’s operation or tarnishing their reputation on our platform. Should we, in good faith, determine that a removal request or complaint was submitted in bad faith, we will impose sanctions on the party responsible. Kartco International Ltd takes matters like such very seriously and therefore such actions much be taken to safeguard users on our platform and make it a pleasurable experience for all.

Our commitment extends to implementing and enforcing our intellectual property protection policy in a strict accordance with the relevant local laws applicable in various jurisdictions.

Policy outline -

At Kartco International Ltd, we are dedicated to safeguarding the privacy and data protection rights of our users across the globe. While our operations extend worldwide (excluding a few countries, please see exclusion section), we are based in the United Kingdom. Therefore, we have chosen to establish our Privacy Policy’s foundational principle in accordance with two pivotal frameworks: the General Data Protection Regulation (GDPR) and the Data Protection Act 2018 (DPA). These regulatory frameworks form the cornerstone of our commitment to data protection and privacy, setting the standards by which we collect, process and manage protection personal data, no matter where our users may reside. By adhering to the GDPR and DPA, we ensure that individuals who entrust us with their personal information experience a consistent and robust level of data protection and privacy, irrespective of their geographic location. These regulations are the bedrock of our approach to data protection, underpinning our global services and fortifying our dedication to maintaining the highest standards of data security and privacy for all Kartco users. In addition to the GDPR and DPA, we have also incorporated key principles and guidelines from various global data protection regulations, such as the Australian Privacy Act, PIPEDA LGPD and CCPA as well as international privacy standards, ensuring a comprehensive approach to privacy compliance for our diverse user base.

Our policy at Kartco International outlines how intellectual property right holders, including their authorised representatives, are able to file complaints regarding products and product descriptions they suspect infringe upon their intellectual property rights by

submitting deletion requests through the Kartco Intellectual Property Protection Platform.

The types of complaints we will address encompass the following:

Trademark violations, such as misuse of identical or confusing similar trademarks and the sale of counterfeit trademarks.
Copyright infringements, such as the unauthorised use of third-party copyrighted images and the sale of the unauthorised copies, included all products available on our platform.
Patent infringements, including infringements related to invention and design patents.
Deliberate circumvention, such as intentionally concealing or blurring product trademarks.

In line with global norms, we generally accept deletion requests based on the territorial scope of intellectual property protection. As we are an international company but based in the United Kingdom, deletion requests will be handled in relation to where the initial registration of the company is and the property right which are aligned with that.

With this being said, there are specific types of complaints which our platform will not accept:

Distribution agreements and distribution channel management disputes, which are contractual matters unrelated to intellectual property infringement. Such disputes should be resolved by the parties involved in the agreements.
Complaints concerning prohibited, restricted, or illegal products, such as weapons and explosives, should be reported using the ‘report’ option on the product details page as this shows the product violates any legal restrictions we have embedded in our policies.
Complaints about sales price control, such as products being sold below minimum advertised prices (MAP) or manufacturers guided retain prices (MSRP), are not within the scope of out intellectual property protection policy.

Sellers responsibilities include the following:

At Kartco International, we are dedicated to intellectual property protection and providing users with transparent and secure trading environment. All merchants on our platform are required to ensure that the products they offer do not contravene upon the intellectual property rights of others. Activities such as selling counterfeit or pirated goods, as well as any violation of intellectual property rights are strictly prohibited. Merchants must refrain from posting misleading information, this includes intentionally obscured trademarks, misspelt brand names in keywords as well as misleading product

descriptions and images. Violation of Kartco International’s Intellection Property Protection Policy may lead to product removal, store oversight or store closure. Additionally, we reserve the right to hold sellers accountable for civil and criminal liabilities when deemed necessary.

At Kartco International Ltd, we highly value the importance of safeguarding your privacy and ensuring the confidentiality of your personal information.

Kartco International Ltd operates as a business to consumer platfrom (also known as B2C), connecting and facilitating transactions between business sellers and consumers, also known as buyers/customers.

Our Privacy Policy outlines the procedures through which we gather, utilise and disclose information in relation to the operation of our platform. This includes: personal information pertaining to all platfrom users, visitors and representatives. Please be aware that this Privacy Policy also extends to the use of our platform on mobile devices, from our apps and our website. For other Kartco services we may offer, separate Privacy Policies are appliable and we recommend reviewing the appropriate Privacy Policy for those particular services. The entity responsible for handling your personal information will be the following:

Kartco International Ltd, United Kingdom. Company reg: 15149474

The categories of personal information we collect encompass the following:

Information provided by you:
For buyers/consumers/customers, we request the following:
- Contact infomraiton, which includes your name, address, phone number and email address.
- Purchase and payment information, such as credit card details or similar payment methods, billing address and delivery address.
- Details about your purchases, including the products you bought and their quantity.
- Information necessary for handling complaints related to the platfrom or products and services purchased through it.
- Identification documentation (ID card, passport etc) for verification in specific circumstances, such as when applying for after-sales services.

For sellers (including employee or representative sellers and sole trader sellers, we require the following information:

Information pertaining to the sellers business, including corporate registration, business licenses, tax information (if applicable).
Specifications of the goods and prodcuts intended for sale on the platfrom.
Purchase and payment information, including bank account details or other payment methods for receiving payments.
Contact details which include: name, address, phone number, fax number and email address. If you attend any of our industry events or functions.
In the event that you are a certified blogger or influencer for Kartco (or affiliate and other partner), we may also ask for your contact details and information in relation to your social media accounts and blog.
Additionally, if you choose to share additional information with us through market research or analytics questionnaires, this may encompass details such as; marital status, nationality, gender, date and year of birth, annual income, monthly spending and user preferences. Rest assured, your decision to withhold such information will not impact your use of our services and products.

Information Automatically Collected:

For buyers/consumers/customers or prospective users we automatically collect:

Copies of any communications with us, including verification information requested during contact via our customer service department through chat, telephone or email.
Transaction and communication details carried out on the platform, encompassing the types and specifications of products bought and sold, pricing, delivery information, dispute records, conversations between buyers/consumers/customers and sellers on the platform and any information shared in discussion forums.
Information regarding browsing and buying activities on the platform. This entails the automatic collection of device-related information. In certain regions, including countries within the European Economic Area and the UK, this dara is classified as personal information according to applicable data protection laws. It may include details like IP addresses, access timestamps, device type, unique device identification numbers, browser type, approximate geographic location (e.g. country or city), browsing patterns and interactions with our platform and its offerings. Additionally, we collect data about the platform and its visitors, including browser software, operating systems, software and hardware attributes, viewed pages, session counts and unique visitors. Some of this data may be gathered using cookies and other similar tracking technologies, as further explain in section F ‘Cookies’ below. When necessary, under appliable law, we will seek your prior consent for information collection through cookies and related tracking

technologies. Furthermore, we may generate or collect inferences about you based on your purchasing and browsing activities, in addition to other data we have gathered about you. In the event that you select the ‘Personalised Wardrobe’, we will use the data we have gathered based on your activity which is generated based on your purchasing and browsing history, this will be presented as a consent prior to you signing up for this feature.

For those who have been successfully certified by Kartco International Ltd as bloggers, partners, affiliates or influencers, we may also collect information such as your social media account handles and any posts or comments in relation to the platform.

We may also collect details about the individuals or accounts with whom you share content or interact, along with contact information if you choose to upload or import it from a device, such as an address book.

Information Obtained from External Sources:

Social Media Platforms: if you register for a Platform account via a social media profile, we may acquire certain personal information based on your privacy settings on the respective platform. This typically includes your social media user handle, alias, or username, your profile picture or company name presented on social media, your country of residence and your company name if applicable.

Kartco International Ltd ensures that we only access this information from social media platforms after confirming that they have obtained your consent or possess legal authorisation to disclose this data to us, in compliance with GDPR’s consent and authorisation requirements.

Third-Party Verification Services: Kartco International Ltd engages in third-party entities to provide verification services, including anti-money laundering checks, fraud assessments and customer/buyer and seller validations. This data includes your name, email address, company particulars and additional contact details.

We ensure that third parties have your consent or legal authorisation to disclose this personal information to us, aligning with GDPR consent and authorisation principles.

Utilisation of Personal Data:

Authentication and Security Checks: Kartco International Ltd employs personal information for account registrations which includes fraud assessments and security checks, in order to approve your seller account. Detailed requirements for opening a seller account can be found in our seller information or ‘Become a Seller on Kartco’ page, where instructions and further guidance can be found.

We ensure to adhere to GDPR principles when processing this data, ensuring lawful and transparent processing.

Verification for Bloggers and Influencers: personal information is used to verify your eligibility as a platform blogger or influencer, in compliance to GDPR requirements for consent and processing legitimacy.

Account Establishment and Administration: Kartco International Ltd collects personal information for establishing and administering buyer, consumer, customer and seller accounts which includes the issuance of login IDs and setup of payment and transaction accounts, all while complying with GDPR principles of data minimisation and purpose limitation.

Customer Service and Support: personal data is employed to provide customer service support, including addressing enquiries, feedback and claims or disputes in accordance with GDPR standards of transparency and user rights.

Platform Services and Communications: we ensure to facilitate general platform services, such as fostering communication between users and transpaction processing, whilst ensuring that personal data usage aligns with GDPR requirements.

Customer Service and Support: Kartco International Ltd takes the privacy and data protection rights of its users seriously. Personal data will be used exclusively to provide efficient customers service and support. When users reach out with enquiries, feedback or concerns, we will use their personal data to address these matters promptly. We will do so transparently, ensuring users are aware of how their data is being utilised and respecting their rights under GDPR. Our customer service representatives will be trained to handle data with care and in line with GDPR requirements. Users can be confident that their personal data will be handled securely and responsibly.

Platform Services and Communications: our platform’s core services include connecting buyers and sellers, facilitating secure transactions and fostering communications between users. When personal data is used for these purposes, we will adhere to GDPR requirements, ensuring that the processing is lawful and carried out transparently. For example; when processing payment transactions, we will ensure that user data is protected using robust security measures, consistent with GDPR Article 32. Communication tools and feautures on the platform will be designed with user privacy in mind aligning with GDPR principles of data minimisation and purpose limitation.

Buyer and Seller Declarations: processing buyer, customer, consumer and seller declarations or applications is vital for the operation of our platform. In this regard, Kartco International Ltd will ensure that the processing of personal data is transparent and aligned in GDPR principles. Users will be informed about the purposes of collecting their data and where necessary, their consent will be obtained. Declarations and applications will be processed efficiently whilst upholding the privacy rights of users as stipulated in GDPR Articles 15-18.

Membership Benefits and Rewards: our users can enjoy various membership benefits such as birthday rewards, membership offers, coupons and seasonal rewards. In order to provide these benefits, we will utilise personal data in a manner that respects GDPRs consent and purpose limitation requirements. Users can expect transparency in how their data is used for these purposes and will have the option to withdraw their consent at any time, as per GDPR Article 7.

Security and Risk Assessment: Kartco International Ltd is committed to ensuring the security and integrity of user data. We will use personal data for risk assessment and security purposes, focusing on the prevention of fraud, money laundering and other security incidents. This processing aligns with GDPR’s article 32, which emphasises the importance of data security. The data used for security and risk assessment will be subject to strict access controls and monitoring to safeguard user information.

Marketing and Advertising: our marketing and advertising efforts are designed to be user-centric. To tailor marketing content effectively, we may analyse user behaviour, browsing history and order records. If we use Cookies and related technologies for targeted marketing, we will do so in compliance with GDPR’s Cookie consent requirements. Users will have clear information on how Cookies are used and the option to provide or withdraw consent. This ensures that our marketing practices are transparent and respectful of user choices.

Research and Analytics: Kartco International Ltd conducts research and analytics to enhance platform security, improve content and layout and refine our products and services. All data used for these purposes will be handled in accordance with GDPR principles. These analyses are designed to support the continuous improvement of our platform, ensuring that user data is used transparently and with respect for their privacy.

Locating Contacts: our platform may offer features that help users find individuals they may know who are also using Kartco. When personal information is used for this purpose, we will ensure GDPR-compliant data processing. Users will have clarity about

how their data is used and the option to participate or opt-out as per GDPR Article 7.

Our processes will prioritise data minimisation and consent where applicable.

Other Compatible Purposes: Kartco International Ltd may, in accordance with applicable data protection laws, use personal data for other compatible purposes. Users can request further information about these purposes and we will provide details, ensuring that users understand how their data is processed and respecting their rights under GDPR. We will maintain compliance with GDPR principles of transparency purpose limitation and user rights in all data processing activities.

Disclosure or sharing of personal information:

We disclose or share personal information with the following categories of recipents:

Other platform buyers/consumers/customers and or sellers when necessary in order to support transactions and communications amongst yourselves. Sellers from whom buyers will make purchases from will also hold personal information about you, pertaining to or linked with your platform transactions and communications. For information regarding how they handle your data, please refer to their seller privacy policies which are displayed on their seller information section.
Third-party partners, service providers and affiliates or partners engaged by or collaborating with us in order to assist in providing services to you or to otherwise process personal information as described in this Privacy Policy or as informed to you during data collection. These partners and service providers fall into categories such as:
Any partners and affiliate companies and their designated service providers who work with Kartco, collaborating with us to offer processing services like software, tools, systems and messaging services as detailed in this Privacy Policy.
Our business partners, with your consent if required by applicable data protection laws, in order to provide you with discounts or offers that may be of interest to buyers/customers/consumers.
Marketing and advertising partners which currently include: Google, Facebook, Twitter, Instagram and TikTok. These platforms may tailor the content you encounter when visiting our platform for analytics and advertising purposes. These partners may merge information collected on our platform with data from their own platforms and data acquired from other websites or sources to facilitate targeted advertising. The processing activities of these third-party marketing platforms adhere to their respective privacy

policies, rather than this particular one. You may refer to our ‘Cookies’ section below in order to view further information regarding this.

Payment service providers who are responsible for rendering payment processing services. The activities of these payment service providers are governed by their own individual privacy policies, rather than this current one created by Kartco International Ltd.
Credit risk assessment providers for delivery services to buyers/consumers and sellers, including product returns and exchanges as well as warehousing services for sellers/manufactorers.
Logistics partners for providing delivery services to buyers/consumers/customers and sellers which include product returns and exchanges as well as warehousing services for sellers.
Customs agents for customs clearance where applicable, supporting international sales and purchases for buyers/customers/consumers and sellers.
Cloud computing or other hosting service providers for delivering cloud storage services.
Warranty service providers for offering product warranty servies when requested by buyers/consumers/customers and or sellers.
Ustomer service support providers for providing after-sale services and additional customer service support.
Risk control service providers for evaluating the security of buyer/customer/consumer and seller accounts and transaction risks.
Third-party rating and reviewing service providers for conducting reviews of our services with customers, if you opt to participate in reviewing or rating platform products and or its services.
Professional advisers, law enforcement agencies, insurers, government and regulatory bodies and other organisations where we believe that such disclosure is necessary in order to comply with applicable laws or to assert, establish or defend our legal rights, or to safeguard your vital interests or those of any other individual. This is also applied when required or permitted by applicable laws followed by us.
Actual or potential buyers/consumers/customers who are in connection with any actual or proposed acquisition, purchase or merger of any part of our business. We will inform the buyer that they must use your personal information solely for the purposes outlined in this Privacy Policy.
Any other person or professional body after receiving your consent to the disclosure.

In the event that we partner or have affiliations with other parties or websites in order to provide you with the benefit of products and services that we do not offer. We grant access to you in order to access these parties and their websites either through hyperlinks on our Platform. In some cases, you may be required to submit personal information in order to register or apply for products or services which are provided by such third parties or partners/affiliations. This privacy policy does not extend to these third-party sites or partners/affiliations. The privacy policy of these third-party sites may differ from the privacy policies that have been set by us and we present no control over the information you provide to those other sites. We do however, strongly recommend reviewing the relevant privacy policy of these third-party sites and affiliations prior to engaging with any offers, products or services which are advertised by them.

Retention:

We will retain your personal information for as long as we have an ongoing legitimate business requirement to do so, for prodivding services or products to you or as required or permitted by applicable laws. Once we longer hold a legitimate business requirement to process your personal information, we will either delete or anonymise it. If felection is not immediately feasible which could occur for a number of reasons including data stored in backup archives etc, we will seurely store your personal information and cease any further processing. The duration of data retention is also influenced by your use of our website (e.g. whether you are logged in as a member or visiting our website as a guest) and the purposes for which the information you provide to us is employed. For instance, in the case that you are a registered member, specific data will be retained for a duration following account termination or deletion to comply with applicable laws or to address disputes. In other cases, the retention period may be dictated by your activity on the platform or for compliance with a particular arbitration period of dispute resolution.

Rights pertaining to personal data:

Under applicable laws, you may possess rights of access to personal information held by us, among other rights. For visitors from different regions such as European Economic Area, United States, Brazil etc) specific rights and details are outlined in the policy below. If you are any queries concerning this privacy policy or if you wish to access or correct your personal information as a user of Kartco International Ltd, please accesss the link below:

Cookies:

This section elucidates our usage of cookies and analogous technologies (collectively referred to as ‘cookies’) in order to recogise your presence when you visit our platform. It expounds on the nature of these technologies, our reasons for using them and your entitlement to regulate them.

What are cookies?

A ‘cookie’ is a sequence of data dispatched to your web browser and deposited on your computer or mobile device’s hard drive. Unless the cookie is deactivated or erased each time you employ the same browser or device to access the platform, our web servers will be alerted to your visit to the platform which allows us to recognise your visit and discern your usage pattern.

Cookie originated by the site or app proprietor are designated ‘first-party Cookies’. Cookies initiated by entities other than the site or app proprietor are denoted as ‘third-party cookies’; who enable the provision of third-party features or functionality on the website such as advertising, interactive content and analytics etc. the parties administering these third-party cookies are able to identify your device both when it accesses and pertinent website and when it accesses specific other websites.

Cookies are also categorised into ‘session Cookies’ (obliterated upon closing the browser or powering down the device) and ‘persistent cookies’ (persist even after closing the browser or turning off the device/application and reactivating eah time you revisit the Platform. Session cookies employ encrypted data for authentication. Whilst persistent cookies od not store account numbers or passwords. We employ both session and persistent cookies at Kartco International Ltd.

Why do we use cookies?

We utitlise both first-party and third-party cookies for various purposes:

Certain cookies are imperative for technical and or security reasons which allows the seamless operation of our platform. We label these as ‘essential’ or ‘strictly necessary’ cookies. First-party cookies chiefly enable fundamental functionality on our platform which encompasses web analytics cookies that aid us in comprehending how users utilise our platform and how we can enhance their utility. For example; essential or strictly necessary cookies facilitate the recollection of items that are added to your shopping cart and the recognition of your sign-in to your account.

Social media cookies are employed when you register your platform membership and ‘share’ platform content through social media platforms such as Facebook, Instagram etc. on occasion, we integrate videos form websites such as YouTube. These external websites have their own privacy policies governing information use, which are accessible on their respective websites and platforms.

Cookies enable us to trace and target the interests of platform visitors, which enhances their experience by examining visitation patterns and conducting interest-based advertising. They also assist our partners in tracking user visits to the platform and monitoring progress and participation in promotions.

Further information on tracking technologies:

Cookies are not the only way we identify or track visitors on Kartco, Occasionally, we may utilise similar technologies such as web beacons which are also referred to as ‘tracking pixels’ or ‘clear gifs’. These are small graphic files which contain a unique identifier that permits us to recognise when individuals have visited our platforms or opened an email we have composed. This functionality enables us to monitor user traffic patterns from one Kartco page to another, deliver or communicate with cookies, determine if you have arrived on any Kartco platform through an online ad or other websites or platforms, engance site performance and measure the success of our email marketing campaigns. In various cases, these technologies rely on cookies to function properly, therefore declining cookies may affect their operation.

Controlling Cookies:

You are able to decide whether and how to accept cookies by adjusting the privacy settings of the browser you use to access Kartco or your device’s privacy settings. Since the methods for refusing cookies thorugh web browser controls vary from one browser to another, please consult your browsers help menu for specific instructions. If you make changes to your browsers privacy settings, data collection on your mobile device will continue unless you also modify your devices privacy settings and vice versa. Alternatively, most advertising networks provide an opt-out option for targeted advertising, you may visit http://www.aboutads.info/choices/ for more information. Some of Kartco’s features depend on cookies, please be advised that blocking cookies could result in a prevention of you signing in or using the features on Kartco that rely on cookies and any preferences tied to cookies may be lost.

Minors:

Kartco is designed for adults and users must be at least 18 years of age to use our platform. We have no intention of selling any of our product or services to individuals

who are considered minors under applicable UK law. If, in the rare event, a minor has provided us with personal information without proper parental or guardian consent, we kindly request the parent or guardian or any individual who has come to light about this to reach out to us as: management@kartco.co.uk so we are able to promptly remove the information.

Security Measures:

At Kartco, we prioritise the security of your information. We have put in place suitable technical and organisational measures to safeguard against unauthorised access to our platform, maintain data accuracy and ensure the appropriate use of the data we hold. In the event of a data breach, we will notify you and the relevant regulatory authorities in accordance with the timelines and requirements specified by applicable data protection laws.

For our registered users, you have the ability to view and edit some of your information through your account, which is protected by a password. It is your responsibility to keep your password secure and confidential. We strongly advise against sharing your password with anyone and our team has been instructed to never request your password from you. If you share a devise with others, it is best not to save your login details on that shared devise. Always remember to log out of your account and close the browser window once you have completed your session.

While we employ appropriate technical and organisational measures to protect your information, it is important to note that no data transmission over the internet or any wireless network can be guaranteed as entirely secure. Consequently, while we do our upmost to safeguard your data, we cannot provide an absolute guarantee of the security of any information you transmit over the internet.

Changes to our Privacy Policy

We may periodically update this Privacy Policy in order to align with evolving legal, technical or business developments. When we make changes to this policy, we will take the necessary steps to inform you in accordance with the significant of the modifications and as mandated by applicable laws. This may include posting an updated Privacy Policy on the Kartco platform.

Visitors from the European Economic Area and UK

Additionally, if you are a buyer on Kartco, sellers may also serve as data controllers for personal information related to your platform purchases and communications with them, we recommend consulting the privacy policies of these sellers for further insights into how they manage such information.

Legal Basis for Data Processin

At Kartco, we handle personal information in accordance with the purposes outlined in this Privacy Policy. The legal foundation for processing your personal information depends on the specific data involved and the context in which we collect it. Our legal basis for processing may include situations where it is:

Necessary for Contractual Performance: this indicates processing your data in order to fulfil our contractual obligations with you. For instance; it is essential for us to identify and authenticate you to provide the services you request on our platform.
Required to Comply with Legal Obligations: we may process your data in order to meet legal requirements. This includes adhering to applicable accounting standards and making mandated disclosures to law enforcement authorities.
Based on Legitimate Interests: in some cases we process your data based on our legitimate interests, provided your rights aren’t compromised. Our legitimate interests typically revolve around operating Kartco, managing our relationship[ with you and ensuring the security of our platform. This includes responsing to your enquiries, enhancing our services, conducting marketing activities and preventing fraudulent or illegal activities. We will transparently communicate these interests when relevant.
With your Consent: we may process your data when you have given us explicit consent to do so.

In the event that we do collect and use your personal information based on our legitimate interests or other lawful grounds, we will clarify these interests at the appropriate time.

When we request your personal information to fulfil a legal obligation or enter into a contract with you, we will make it clear at that point. We will also inform you whether providing your personal infomratiton is mandatory and the potential consequences if you choose not to do so. In some cases, provising personal information may be.

Required for us to offer our full range of services and for you to access all the features of our platform.

Should you have any questions about or need further clarification regarding the legal bsis for collecting and using your persona information, please reach out to us via email: management@kartco.co.uk or you may use our online chat feature which is available 24/7, alternatively in cases of emergency you may contact us on: admin@kartco.co.uk

Your Rights:

If you reside in the EEA or the UK, you possess specific data protection rights that you can exercise anytime by contacting us, the rights below are indicated for anyone based in the UK or EEA:

Right to Access: you have the right to access your personal information and confirm that it is being processed.
Right to Correction and Deletion: you can request the correction, updating, anonymisation, blocking or deletion of your personal information.
Right to Object: when we process your personal information based on our legitimate interests, you have the right to object to this processing.
Rgiht to Restrict Processing and Data Portability: in certain situations, you can request that we restrict the processing of your personal information or ask for your data to be ported.
Right to Opt-Out of Marketing: You can opt-out of marketing communications, including email marketing at any time. Simply click on the

‘unsubscribe’ or ‘opt-out’ link in our marketing emails/ if you wish to opt-out of other forms of marketing such as portal or telemarketing, please contact us following the guidelines on our ‘contact us’ page.

Right to Withdraw Consent: if we have collected and processed your personal information with your consent, you have the right to withdraw your consent at any time. This will not affect the legality of prior processing, nor will it affect processing based on lawful grounds other than consent.
Right to Challenge Automated Decisions: you can request a review of decisions solely based on automated processing, especially if they affect your interests.
Right to Lodge a Complaint: If you have concerns about how we collect and use your persona information, you hold the right to file a complaint with your local data protection authority.

We respond to all requests from individuals seeking to exercise their data protection rights in line with applicable data protection laws.

If you become aware of any changes or inaccuracies in your information, please inform us promptly so we can update or correct our records accordingly.

Visitors from the United States

This section is relevant to those who are located in the United States. Please be aware that if you are a buyer, sellers on our platform may also serve as data controllers for personal information related to your purchases and interactions with them. In order to understand how they handle such information, please consult the Privacy Policy of those individual sellers.

Information Pertraining to Children

Our platform is not designed for and nor do we intentionally collect or solicit personal information online from individuals who are under the age of 18, nor from children under the age of 13. We have no knowledge of, nor do we have any reasonable grounds to believe that children under the age of 13 are accessing or using our platform. If you suspect that a child under 13 may have provided us with personal information, please promptly contact us using the contact details provided below in the ‘contact us’ section.

Additional Information for California Residents:

This section supplements our description of data collecting and sharing practices to provide specific disclosures for Californnia residents in accordance with the California Consumer Privacy Act (CCPA).

Collect, Use and Disclosure of Personal Information

We collect, utilise and/or share personal information as described in ‘Collection of Information. This may include users IP addresses, email address etc, commercial data such as records of product services (mainly attained for users who use our Personalised Basket feature), internet or electronic network activity information (browsing and purchasing history and acitivity on Kartco), geolocation data such as your country and address, and records of interactions with our customer support service. Additionally, it may encompass inteferences we derive from other collected information.

Use of Personal Information

The business purposes for collecting and processing personal information are detailed in ‘Use of Personal Data’ section.

Disclosure of Personal Information

We disclose or share personal information as outlined in ‘Disclosure of Personal Data’ which includes allowing third parties that provide us with analytics and advertising services to collect data using cookies and similar technologies. We do not believe that we currently engage in the sale of personal information under state law, although you do have the choie we describe in this Privacy Policy. We believe that third-party cookies associated with our platform adhere to data processing standards permitted by the CCPA. Consequently, we do not consider this as a sale of personal information under state law, although you do have the choices we describe in this Privacy Policy. We believe that third-party cookies associated with our platform adhere to data processing standards permitted by CCPA service providers and do no constitute a sale of personal information by us. You can opt out of any potential future sale of personal information using the contact details provided in the ‘contact us’ section.

We are committed to addressing all requests from individuals who wish to exercise their data protection rights in accordance with relevant data protection laws. If you notice any changes or inaccuracies in your information, please notify us so that we can update or correct our records.

To exercise these rights, you or your authorised legal representative can reach out to us using the contact details provided in the ‘contact us’ section below upon receiving your request, we may verify your identity by requesting sufficient information, including details about your use of the Kartco platform.

International Transfers of Personal Data

As part of delivering our services through the Kartco platform, we may store and process your personal data in various countries, including but not limited to; China, Netherlands, United Kingdom, United States, United Arab Emirates. The specific country where your data is processed depends on your location and your history as a buyer. It is vital to note that these countries may have data protection laws that differ from those in your own country. Additionally, there may be instances of international data transfers among the mentioned countries

We want to emphasise that we take the upmost care to safeguard your personal information, ensuring it remains confidential and protected, as outlined in this Privacy Policy. In order to achieve this, we employ appropriate measures and standards. These

measures may include utilising standard contractual clauses or other mechanisms in compliance with applicable laws to ensure your personal data’s continued protection.

Should you wish to review the relevant clauses or seek further information on this matter, please contact us using the details in the ‘contact us’ section below.

Language

In the event of any discrepancies or conflicts between the English version of this Privacy Policy and versions in other languages, the English version shall take precedence and be considered the authoritative and controlling version. The version in other languages has been translated for the convenience of others.

The California Consumer Privacy Act (CCPA) is a comprehensive privacy law that primarily applies to businesses, including Kartco as we collect person information from California residents who use our platform. Therefore, although we are based in the UK, we serve consumers and sellers worldwide (excluding certain countries, please see list in the ‘Exclusion’ section below), including those in California, it is thus vital for us to implement CCPA compliance in order to protect the privacy rights of California users. Please see he following guidelines which apply to those who reside in California:

Transparency and Notice:

Collection of Personal Data: Kartco International Ltd collects personal data for buyer account such as your full name, email address, home address, residency and mobile number etc. this information is essential for account creation, order processing and communication with buyers and sellers. It is securely stored and accessed only for legitimate purposes such as order fulfilment and customer support. Users are informed that providing this information is a requirement to be able to use our platform at Kartco International Ltd.
Cookies and Personalisation: please refer to our ‘Cookies’ section in this Privacy

Policy. We request user consent for accessing browsing history and personalisation ads and offers sent by Kartco International Ltd. This consent is sought in compliance with GDPR and CCPA requirements. Users are able to manage their cookie preferences with ease which includes opting out of personalised ads and offers by using the provided opt-out button. More information regarding this matter can be found in our ‘Cookies’ section highlighted in this Privacy Policy.

Marketing and Promoions: user data is user for marketing purposes to enhance the platform experience. Kartco International Ltd may send promotional emails and offers based on user preferences. However, users retain the right to opt out of these communications at any time through the provided opt-out mechanism.

Data Collection and Processing:

Collection Sources: Kartco International Ltd collects personal information directly from consumers during account creation and order placement. Additionally, as permitted by law, we may obtain information from third-party sources to enhance user experience and ensure order accuracy.
Lawful Bases for Processing: our platform processes personal data based on lawful grounds, including contract performance (for order processing), legitimate interests (for marketing and platform enhancement) and user consent (if and when required). These legal bases align with both CCPA and GDPR regulations.
Data Retention: Kartco International Ltd is committed to data minimisation and retention best practices. We retain personal information only for the duration that is necessary in order to fulfil the purposes for which it was collected. Detailed criteria for data retention and deletion are provided in our Privacy Policy to ensure compliance with CCPA and GDPR standards.

Consumer Rights:

xercising Rights: Kartco International Ltd outlines the process for consumers, including California residents, to exercise their rights under CCPA and GDPR. This includes the right to access, delete and opt out of data processing. We have established a user-friendly mechanism for submitting requests including a toll-free number and a web form.
Methods for Submission: in order to ensure accessibility and compliance with CCPA and GDPR, Kartco International Ltd provides at least two methods for consumers to submit requests; a toll-free number and a web form. This simplifies the process for users to exercise their privacy rights.
Identity Verification: we take data security seriously. Kartco International Ltd will verify the identity of consumers making requests in order to protect against unauthorised access and data breaches, in accordance with both CCPA and GDPR requirements.

Non-Discrimination:

Kartco International Ltd assures users that we do not discriminate against those who exercise their privacy rights. Users will not face different prices or be denied services based on their decision to exercise these rights, in line with CCPA and GDPR mandates.

Data Sales:

In the event that Kartco International Ltd engages in personal data sales, we will transparently disclose this in our Privacy Policy, adhering to CCPA and GDPR requirements.
Opt-Out Link: in order to comply with CCPA, we will include a ‘Do Not Sell My Personal Information’ link or page where consumers ca opt out of the sale of their data. This aligns with GDPR consent requirements as well.

Third-Party Sharing:

1. Third-Party Sharing Explanation: we are transparent about third-party data sharing, specifying the purposes for sharing, the categories of personal information involved and the categories of third parties with whom data is shared with. This transparency ensures compliance with both CCPA and GDPR requirements.

Security Measures:

1. Kartco International Ltd takes extensive security measures to protect personal information from unauthorised access, disclosure, alteration or destruction. These security measures are regularly updated and tested to maintain data confidentiality and integrity, aligning with GDPR principles.

Children’s Privacy:

Children’s Privacy Compliance: Our platform is not designed for and nor do we intentionally collect or solicit personal information online from individuals who are under the age of 18, nor from children under the age of 13. We have no knowledge of, nor do we have any reasonable grounds to believe that children under the age of 13 are accessing or using our platform. If you suspect that a child under 13 may have provided us with personal information, please promptly contact us using the contact details provided below in the ‘contact us’ section.

Contact Information:

1. Contact Details: we provide comprehensive contact details for consumers to reach out with questions, concerns or privacy-related requests. This includes a designated email address or contact form for Privacy enquiries, in accordance with CCPA and GDPR standards.

Updates to Privacy Policy:

Our Privacy Policy clearly states that we may periodically update it to reflect changing privacy regulations and standards. We specify how we will inform consumers of these changes ensuring transparency and compliance with CCPA and GDPR requirements.

Data Processing Principles and LGPD/GDPR Compliance for Kartco International Ltd

The Lei Geral de Proteção de Dados (LGPD), Brazil’s General Data Protection Law, is designed to protect the privacy and rights of the individuals in Brazil. Although Kartco is based in the UK, we serve consumers and sellers worldwide, (please see exclusion list in our ‘exclusions’ section below), including those in Brazil. Therefore, it is essential for us to imply LGPD compliance in our Privacy Policy, please see the following guidelines which are in compliance with LGPD principles:

Data Processing Principles: Kartco International Ltd will process personal data in strict compliance with LGPD and GDPR principles. This includes ensuring that data processing is lawful, fair and transparent. We will clearly specify the legal bases for processing personal data which may include the necessity for contract performance, compliance with legal obligations, consent and the protection of legitimate interests.
Consent and Purpose: our Privacy Policy will transparently explain the specific purposes for which we collect and process personal information. These purposes will align with LGPD and GDPR requirements. In cases where explicit consent is required by LGPD or GDPR, we will obtain informed consent from individuals and provide a user-friendly mechanism for withdrawing consent.
Data Minimisation: Kartco International Ltd will implement data minimisation practices. We will collect only the data that is strictly necessary for the specified and legitimate purposes. Our Privacy Policy will clearly communicate the potential consequences of not providing requested information where applicable, ensuring users are well-informed.
Rights of Data Subjects: we will empower individuals to exercise their rights under LGPD and GDPR. Our Privacy Policy will provide detailed instructions on how individuals are able to access, rectify, delete or port their data. We will establish a structured process for handling data subject requests, ensuring that responses are prompt and fully compliant with LGPD and GDPR requirements. Data Security and Transfer
Data Security: Kartco International Ltd will maintain a robust data security framework. We will implement stringent security protocols to protect personal information from unauthorised access, disclosure, alteration or destruction. Our ongoing commitment to data confidentiality and integrity will be explicitly highlighted in our Privacy Policy.
Data Transfer: when personal data must be transferred internationally, we will transparently specify the countries to which data must be transferred. We will alo elaborate on the safeguards in place to ensure data protection during these transfers. Safeguards will be aligned with LGPD and GDPR requirement and may include standard contractual clauses or other mechanisms to secure data.

Data Breach Response and Governance:

Data Breach Response: Kartco International Ltd will have comprehensive procedures in place for detecting, reporting and responding to data breaches. We will follow LGPD’s and GDPR’s notification requirements. In case of a data breach, we will notify the appropriate authorities and affected individiauls promptly and transparently, ensuing compliance and user awareness.
Accountability and Governance: in order to demonstrate accountability and governance, our team is responsible for data protection. You may contact us using the information provided in the ‘contact us’ below for further information. We will diligently document and maintain records of data processing activities, as required by LGPD and GDPR.

Additional Privacy Considerations:

Complaints and Contact Information: Kartco International Ltd will provide clear and accessible contact details for individuals to reach out with enquiries, concerns or requests in relation to privacy. You may find our contact information in the ‘contact us’ section below where you may contact us regarding any privacy-related enquiries.

Updates to this Privacy Policy: our Privacy Policy will communicate our commitment to regular updates. We will ensure that any changes made align with the requirements and principles of LGPD and GDPR. Additionally, we will explain how we will inform individuals of these updates.

The Personal Information Protection and Electronic Documents Act (PIPEDA) is Canada's federal privacy law governing the collection, use, and disclosure of personal information. Even if your online marketplace is based in the UK, you may still need to consider PIPEDA compliance if you collect personal information from Canadian residents. Here are some guidelines to help you create a privacy policy that aligns with PIPEDA principles:

For users in Canada:

The Personal Information Protection and Electronic Documents Act (PIPEDA) is Canada’s federal privacy law governing the collection, use and disclosure of personal information. Although our platform, Kartco International Ltd is based in the UK, we have considered PIPEDA and moulded our Privacy Policy in compliance with this for users in Canada if we happen to collect your personal information.

At Kartco International Ltd, we prioritise transparency and accountability in our data handling practices. We are dedicated to safeguarding your privacy and ensuring compliance with data protection regulations, which includes Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA), when applicable. To uphold these principles, we ensure our team at Kartco International Ltd to oversee out data protection efforts and address any privacy-related concerns or enquiries you may have, you may send your requests for this information using our contact information found in the ‘contact us’ section below.

The following guidelines outlined are for the residents in Canada who access our platform:

Data Collection and Consent: we collect personal information to facilitate and enhance your experience on our global online marketplace platforms. It is vital for us that you understand and acknowledge what information we collect, why we collect it and how we use it. We seek your informed consent before collecting, using or disclosing your personal information for any purpose not previously disclosed. Your consent is not only crucial for compliance but also to ensure that you have control over your data. You hold the right to withdraw your consent at any time, subject to legal or contractual restrictions and a 14 day reasonable notice period.
Purpose Limitation: we strictly adhere to the principle of purpose limitation, which means that we only collect personal information for specific, legitimate purposes that we have clearly communicated with you. Your data will never be used for purposes beyond what you have consented to. If we ever intend to use your information for a new purpose, we will inform you and seek your consent if necessary. This ensures that your personal information is always handled with transparency and respect for your privacy is maintained.
Data Minimisation and Accuracy: in alignment with data protection regulations, we follow the practices of data minimistion and accuracy. This means that we collect only the personal information that is necessary for the purposs we have identified. We take reasonable steps to ensure that the information we hold about you is accurate, complete and up-to-date. This not only helps us provide you with better services, but also ensures the integrity of your data.
Security and Safeguards: the security of your persona information is of paramount importance to us. We employ a range of security meausres to protect your data from unauthorised access, disclosure, alteration or misuse. These measures include but are not limited to: encryption, access controls, regular secutity audits and employee training on data protection best practices. Our commitment to safeguarding your data extends to preventing data breaches and maintaining the confidentiality and integrity of your information.
Data Subject Rights: under data protection laws, including PIPEDA and UK data protection regulations, you hold certain rights in regards to your personal information. These rights include the right to access your personal data held by us,t the right to correct inaccuracies in your data nd the right to address any concerns you may have about how we handle your information. We have established a clear process for you to exercise these rights andw e are comitte to responding promptly and effectively to your requests. Your privacy matters to us and we want you to have control over your data.

Third Party Sharing: we may share personal data with third parties for specific purposes in relation to our platforms operations. These purposes include but are not limited to: payment processing, logistics and delivery services, customer service support and marketing and advertising. When we share your data with third parties, we will specify the categories of personal information involved and the categories of third parties with whom it is shared with. Rest assured, we maintain strict contractual agreements with these third parties to ensure thatyour data is treated with the same level of care and protection as when it is in our custody.
Data Retention: we are committed to retaining your personal information for only as long as we have a legitimate business requirement to do so, as required by law or as necessary to fulfil the purposes for which it was collected. When your data is no longer required for these purposes, we will securely delete or anonymise it. In some cases, such as legal or dispute resolution requirements, we may be required to retain your data for longer periods. Our data retention practices are designed to align with applicable data protection laws and ensure that your data is handled responsibly and ethically.
Complaints and Dispute Resolution: your satisfaction and trust is essential to us. If you ever have concerns regarding how we handle your personal information or believe that your privacy rights have been violated, we provide clear contact information for you to submit privacy complaints for concerns. We take your concerns very seriously and have established a process for addressing and resolving privacy complaints efficiently and effectively. Your feedback helps us continually improve our data protection practices and maintain the highest standards of privacy.
Cross-Border Data Transfers: as a global online marketplace, we may transfer personal information outside of Canada and the UK to provide our services. When we do so, we ensire that your information remains protected in accordance with data protection regulations, including PIPEDA and UK data protection laws. We take measures to safeguard your data during international transfers and we remain committed to maintaining the privacy and security of your information regardless of its location.
Children’s Privacy: if our platform is accessible to children, we are committed to complying with applicable laws in regards to children’s privacy, including obtaining parental consent for the collection of personal information from minors. We take extra percaution to handle the persola information of minors responsibly and protect their privacy. Please be aware that users must be the age of 18 years and above to use our platforms at Kartco International Ltd, therefore this part of the policy only comes into affect if minors attempt to access our platform, from which our team will take action if this comes to light to us that the user is of a minor age and we will take necessary steps to remove them from the use of our platform.

Accountability and Governance: in order to uphold our commitment to data protection, we document our Privacy Policies and practices. We maintain records of data processing activities and conduct regular privacy impact assessments to identify and mitigate privacy risks. These practices ensure that we remain accountable for protecting your personal information and continually improving our data protection efforts.
Updates to our Privacy Policy (this Privacy Policy): our commitment to transparency extends to updates to this Privacy Policy. We may periodically update this policy in order to reflect changes in our data handling practices or to comply with evolving data protection regulations. We will inform you of any significant changes to this policy and provide a clear explanation of how those changes may impact you. Your privacy maters to us and we want you to remain informed about how your data is handled.

The Australian Privacy Act 1988 is a comprehensive privacy law governing the handling of personal information in Australia. If your online marketplace operates globally and handles personal information of Australian users, you should ensure compliance with the Act. Here are some guidelines to help you create a privacy policy that aligns with the Australian Privacy Act principles:

The Australian Privacy Act 1988 is a comprehensive privacy law governing the handling of personal information in Australia. Although Kartco International Ltd is based in the UK, we are aware that some of our consumers may be visitors from Australia, therefore we have ensured to comply with The Australian Privacy Act (1998) principles. Please view the following guidelines which apply to the users who are residents of Australia:

Open and Transparent Management of Personal Information: at Kartco International Ltd, we take your privacy seriously and are committed to complying with the Australian Privacy Act 1988. Our dedication to transparency means that we openly communicate our commitment to privacy and adherence to the Australian Privacy Act. In order to ensure easy accessibility for our users, we provide a Privacy Policy that outlines our data handling practices, helping you to understand and acknowledge how your personal information is managed.
Collection of Personal Information: we collect a range of personal information to enhance your experience on our global online marketplace platform. This includes details such as your name, address, contact information and transaction history. We collect this data for specific legitimate purposes such as processing orders, providing customer support and improving our services. Our data collection practices adhere to the principles of lawfulnesss, fairness and non-intrusiveness.

Use and Disclosure of Personal Information: transparency is a cornerstone of our data handling practices. We specify the purposes for which we collect oersonal information and explain how it will be used. This includes: processing orders, facilitating communications between buyers and sellers and enhancing user experiences. We are transparent about sharing personal information with third parties, such as payment processors and logistic partners and only do so when necessary to fulfil our services.
Data Security and Storage: the security and integrity of your personal information are paramount to us. We employ robust security measures in order to protect your data from unauthorised access, disclosure or misuse. Our secutity practices include ecryption, access controls and regular security audists. We specify how long personal information will be retained and once data is no longer required for its original purpose, we ensure secure disposal.
Access and Correction: we respect your privacy rights and provide mechanisms for you to exercise them. You have the right to access your personal information held by our platform and request corrections or deletions if required. Our user-friendly process ensures that you are able to manage your data easily and effectively.
Anonymity and Pseuudonymity: your privacy prefereces matter to us. Whrerever possible and legally permissible, we provide yo with the option to use our platform anonymously or under a pseudonum. Your control over your interactions with us is essential.
Sensitive information: in the unlikely event where we collect sensitive information suchb as health records or biometric data, we handle it with the most upmost care and transparency. We ensure explicit consent for such data collection and follow stringent security measures are in place.
Cross-Border Data Transfers: we understand the importance of data protection during international transfers. We specify the countries here data may be transferred and outline the safeguards in place to ensure your information remains protected during these transfers.
Direct Marketing: we value your privacy preferences when it comes to marketing communications. Our practices regarding direct marketing are outlined in our Privacy Policy and we provide clear options for you to opt out of receiving marketing communications.
Complaints and Dispute Resolution: your satisfaction and trust are our priority. We provide contact information for individuals to submit privacy complaints or concerns and we explain our process for addressing and resolving these concerns promptly and fairly.

Privacy Impact Assessments (PIAs): in order to safeguard your privacy when introducing new practices or technologies that may impact it, we conduct Privacy Impact Assessments. These assessments help us identify and mitigate potential privacy risks, ensuring your data remains secure.
Cookies and Tracking: our use of cookeis and tracking technologies for analytis or advertising purposes is transparently explained in our Privacy Policy. We provide options for users to manage their cookie preferences, permitted you to tailor your online experience.
Notifiable Data Breaches (NDB): we take data security seriously and have a robust data breach response plan in place. We specify how we will notify affected individuals and relevant authorities in the event of a data breach, ensuring transparency and compliance.
Consent: your informed and explicit consent for the collection and use of personal information is crucial to us. We provide clear explanations of what you are agreeing to when you provide your consent.
Children’s Privacy: in the unlikely event that our platform becomes accessible to children, we take special care in handling their personal information. We outline how we handle the data off minors, including obtaining parental consent in order to protect their privacy. Please be aware that users must be the age of 18 years and above to use our platforms at Kartco International Ltd, therefore this part of the policy only comes into affect if minors attempt to access our platform, from which our team will take action if this comes to light to us that the user is of a minor age and we will take necessary steps to remove them from the use of our platform.
Accountability and Governance: we document our privacy policies and practices, maintaining records of data processing activities. These practices ensure that we remain accountable for protecting your personal information and continually improving our data protection efforts.
Updattes to the Privacy Policy: we believe in transparency when updating our Privacy Policy. We may periodically update this policy in order to reflect changes in our data handling practices or to comply with evolving data protection regulations. We will inform you of significant changes and provide clear explanations of their impact.

The Asia Pacific region consists of several countries, each with its own data protection laws and regulations. Therefore, it's essential to be aware of the specific data protection laws that apply to your online marketplace based in the UK but serving consumers and sellers worldwide, including those in the Asia Pacific region. Here are some general guidelines that may apply, but please note that you should consult with legal experts familiar with the data protection laws of specific Asia Pacific countries:

Data Protection Impact Assessment (DPIA): At Kartco International Ltd, we understand and acknowledge the importance of evaluating the impact of data processing activities on individuals privacy. To uphold this commitment, we conduct comprehensive Data Protection Impact Assessments (DPIAs) as part of our data processing practices. These assessments help us to thoroughly analyse and mitigate potential risks to your privacy. Our DPIA’s ensure that your personal information is handled with the upmost care and in compliance with relevant data protection laws.
Consent and Transparency: we place significant importance on obtaining clear and informed consent from individuals before collecting and processing their personal information. Transparency is a cornerstone of our privacy practices. Our Privacy Policy is readily accessible to all users and provides a comprehensive overview of how we handle personal data. It outlines the purposes of data collection, the rights and choices available to users and how we use their information to enhance their experience on our platform.
Data Minimisation: respecting your privacy is central to our data collection practices. We strictly adhere to the principle of data minimisation, which means we only collect the information that is necessary for the specific purposes for which it was collected. This approach ensures that your personal data is not over-collected or used beyond its intended scope.
Purpose Limitation: we are committed to maintaining clarity regarding the purposes for which personal data is collected and processed. Our Privacy Policy explicitly states the reasons for data collection and assures users that their data will only be used for these state purposes. We do not engage in data activities that are unrelated to the original purpose of data collection.
Data Security: security is paramount when it comes to safeguarding your personal information. We employ robust data security measures to protect your data from breaches, unauthorised access or misuse. These security protocols are regularly updated and rigorously tested in order to ensure that your data remains secure throughout its lifecycle within our systems.
Data Transfer: in cases where data is transferred across borders, we uphold the highest standards of data protection. We explicitly specify the countries to which data may be transferred and employ mechanisms such as standard contractual clauses to ensure that your data enjoys the same level of protection as mandated by applicable data protection laws.
Data Subject Rights: At Kartco International Ltd, we deeply respect the rights of data subjects. You have the right to access, rectify, delete or port your data. We have established user-friendly mechaisms for you to exercise these rights, ensuring that you remain in full control of your personal information.

Data Breach Notification: our commitment to data security includes a comprehensive data breach response plan. In the unlikely event of a data breach, we strictly adhere to data breach notification requirements. This entails promptly notifying affected individuals and relevant authorities within the stipulated time frames, ensuring transparency and accountability.
Sensitive Data: in the unlikely event that certain types of data such as health records or biometric information are in our hands, we are aware that these types of information are particularly sensitive. We handle such data with the highest level of security and in strict accordance with specific legal requirements. Rest assured that your sensitive data is subject to stringent protection measures.
Children’s Privacy: at Kartco International Ltd, our Policy implies that users must be the age of 18 years or above to use our platform and services. In the unlikely event that children access our platform, we will comply with applicable laws regarding the collection and processing of data with minors. We obtain parental consent and ensure that the privacy of minors is preserved. Our team at Kartco International Ltd will actively work on removing such profiles created by minors or if we detect a minor has been using our platform or services, we will take necessary actions to prevent them from accessing our platform and remove their accounts.
Cookies and Tracking: we believe in providing clarity regarding our user of cookies and tracking technologies. Our Privacy Policy elaborates on how our platform utilises these technologies for analytics and advertising purposes. Importantly, we empower users to manage their cookie preference, granting them control over their online and in-app experience. Please refer to ourn‘Cookies’ section to view more information regarding this matter.
Accountability and Governance: to oversee compliance and enquiries in relation to data protection, our team is responsible for ensuring that data processing practices align with data protection laws and regulations. Additionally, we maintain meticulous records of data processing activities, demonstrating our unwavering commitment to accountability.
Cross-Border Data Flows: should our platform involve cross-border data flows, we rigorously adhere to relevant regulations. Our goal is to guarantee that your data remains secure, regardless of where it is processed. Adequate data protection measures are in place to safeguard your information.
Data Localisation: in events where data localisation requirements apply in specific countries, we take the necessary steps to comply. This ensures that data is stored and processed within the legal boundaries of each jurisdiction, prioritising your privacy rights.

Regular Audits and Assessments: we believe in continuous improvement and take proactive steps to maintain the highest standards of data protection. Regular privacy audits and assessments are conducted to identify compliance gaps and mitigate risks. Our commitment to your privacy remains unwavering.
Privacy by Design: privacy is an integral part of our platforms design. We intergrate privacy considerartions from the vert outset, ensuring that your data is protected at every stage of your interaction with us. By adhering to the princiiples of privacy by design, we prioritise your privacy rights.
International Standards: we align our privacy policies and practices with international privacy standards and best practices, such as GDPR. This ensures that your data is handled in accordance with the highest global privacy standards, providing you with the upmost assurance of privacy and security.

Privacy Shield (for Data Transfers to the US

Kartco International Ltd is dedicated to protecting user data and ensuring compliance with data protection regulations, including GDPR and the EU-U.S Privacy Shield framework. Our platform serves customers globally, including those in the United States and the European Union. To provide our services, we may transfer data internationally, including to the United States, while upholding the highest standards of data privacy and security.

Data Collection and Processing: our data collection and processing practices are essential for delivering our services. This may involve the collection and processing of user data, including data from residents of the United States and the Euroepan Union. For specific operations like analtics and storage, data may be transferred to servers located in the United States.

Data Usage and Purpose Limitation: we are committed to clear and transparent data usage. Data transferred to the United States is used exclusively for well-defined purposes that align with the principles of both the EU-U.S Privacy Shield and the GDPR. This ensures that data is not used for unrelated purposes and provides consistency in data handling.

Data Security Measures: security is paramount in our data processing, especially in international data transfers. Kartco International Ltd maintains stringent security measures which are designed to safeguard user data against unauthorised access, disclosure or misuse. These measures are regularly updated and tested to ensure integrity and security.

Data Subject Rights: we recognise and respect the rights of individuals, including those residing in the United States and the European Union. All users have the right to access, correct or request the deletion of their personal data. Our procedres for addressing data subject rights apply uniformly to all users, regardless of their locaton and comply with the GDPR.

Privacy Shield and GDPR Compliance: Kartco International Ltd is proud to announce its full compliance with the EU-U.S Privacy Shield framework, which is reinforced by our commitment to the principles of the GDPR.

Dispute Resolution: in cases where users have concerns about their data, Kartco International Ltd has established a dispute resolution mechanism. We are dedicated to resolving disputes in accordance with the principles of both the Privacy Shield and the GDPR. Please refer to our contact information which can be found in the ‘contact us’ section below if you have any concerns regarding your data.

Third-Party Data Processorts: at times, Kartco International Ltd collaborates with third-party data processors or service providers based in the United States. It is essential to note that these entities also adhere to Privacy Shield principle and GDPR requirements when handling user data transferred from the EU or other regions.

Updates to the Privacy Policy: transparency is a core principle of Kartco International Ltd. Any updates or modifications to our Privacy Policy will be communicated clearly to our users. Rest assured, any changes made will fully comply with the requirements and principles of both the Privacy Shield and the GDPR.

Data Breach Notification Law and GDPR Compliance

Kartco International Ltd places the upmost importance on the security and privacy of our users. We are committed to adhering to data breach notification laws globally, including compliance with the General Data Protection Regulation (GDPR) for users in the UK and European Economic Area (EEA). Our marketplace platform serves customers worldwide, including those in the United Kingdom, and the EU/EEA regeions. In the nfortunate event of a data breach, we have established comprehensive procedures to ensure timely notification and GDPR compliance.

Date Security and GDPR-Compliant Measures: our platform maintains a strong focus on data security and has implemented stringent measures to safeguard user data. We adhere to the principles outlined in the GDPR, ensuring that personal data is processed lawfully, fairly and transparently.

Notification Obligation under GDPR: in accordance with GDPR Article 33, we are committed to notifying the relevant supervisory authority without undue delay (where feasible, within 72 hours) in the event of a data breach that poses a risk to individuals’ rights and freedoms. This notification will include the nature of the breach, categories of affected data, potential consequences and mitigation steps.

Individual Notification: under GDPR Article 34, if a data breach is likely to result in a high risk to individuals’ rights and freedoms, we will also notify the affected individuals directly, providing clear and comprehensive information about the breach.

Timelines and International Compliance: we understand and acknowledge the importance of timely notifications and we will comply with the GDPR’s notification requirements. Furthermore, for users outside the EU/EEA, we will adhere to the specific data breach notification laws applicable in their respective regions.

User Responsibilities and GDPR: while we are dedicated to safeguarding user data, we also encourage users to take responsibility for their account security. This includes using strong, unique passwords, enabling two-factor authentication and promptly reporting any suspicious activity.

Reporting Data Breaches: our platform has well-defined proceduures for reporting data

breaches to our internal teams and supervisory authorities. If you suspect a data breach

or notice any unusual activity, please report it to our dedicated security team

immediately whose information can be found in our ‘contact us’ section below.

Continuous GDPR Compliance and Improvement: Kartco International Ltd is committed to maintaining compliance with the GDPR and continuously improving our data security practices. We regularly review and update our data breach response procedures to align with evolving GDPR requirements and best practices.

Cross-Border Data Transfers and GDPR

Kartco International Ltd operates a global marketplace platform that connects consumers and sellers worldwide. Our commitment to user data protection and privacy compliance extends across borders. While our company is based in the United Kingdom, we serve a global audience. This means we handle user data from various regions,, including the European Union (EU) and European Economic Area (EEA), and adhere to data protection laws and regulations, such as the General Data Protection Regulation (GDPR)

Cross-Border Data Transfers and GDPR: we recognise the significance of cross-border data transfers and are committed to ensuring compliance with GDPR principles, regardless of user location. Our approach to cross-border data transfers align with GDPR requirements and data protection safeguards.

Transparency and Informed Consent: we uphold GDPR Article 44 by maintaining transparency about cross-border data transfers. When necessary, we obtain informed consent from our users. We explicitly inform users about potential data transfers to countries outside their home regions, providing clear reasons for such transfers

Data Protection Safeguards: our commitment to data protection safeguards under GDPR Article 46 ensures that international data transfers meet the highest standards. We employ appropriate contractual clauses, technical measures or other mechanisms to secure data in accordance with GDPR.

Data Subject Rights and Cross-Border Data Transfers: under GDPR, the rights of data subjects are paramount. Regardless of user location, our procedures are designed to ensure consistent application of these rights. Users have the right to access, rectify, delete or port their data with procedures in place to facilitate these rights.

International Compliance: we respect the data protection laws and regulations of the countries where our users reside. Beyond GDPR, we adhere to relevant cross-border data transfer laws, ensuring data transfers comply with local requirements.

Data Localisation: in compliance with data localisation requirements where applicable, we store and process data within the legal boundaries of each jurisdiction. This approach respects regional data protection laws.

Data Privacy Impact Assessments: we conduct Data Protection Impact Assessments (DPIAs) as outlined in GDPR Article 35, to evaluate and address privacy risks associated with cross-border data transfers. This proactive approach demonstrates our commitment to addressing potential privacy concerns.

Privacy by Design: privacy considerations are integral to our platforms design. We ensure that data protection is embedded in our products and services from the outset, aligning with GDPR Article 25.

Continuous GDPR Compliance and Improvement Kartco International Ltd is dedicated to maintaining GDPR compliance and continuously enhancing data protection practices, particularly concerning cross-border data transfers. Regular reviews and updates to our procedures ensure alignment with evolving GDPR requirements and international data protection laws.

Data Protection Act 2018 (DPA 2018) GDPR

1. Legal Basis for Data Processing:

Kartco International Ltd processes personal data on the legal bases provided by bth the DPA 2018 and the GDPR. We collect and process data ased on the necessity of contract performance, in compliance with legal obligations and the protection of legitimate interest. For example; we process personal data in order to enable transactions between buyers and sellers and to comply with applicable laws and regulations.

2. Data Subject Rights:

Our users, irrespective of their age, have the right to exercise their GDPR rights as well as tthose granted by the DPA 2018. These rights include the right to access, rectify or erase their personal data, among others. Kartco’s Privacy Policy explains the process for users to exercise these rights and ensures that requests are handled in accoedance to GDPR Artciles 15-18.

3. Data Protection Officer (DPO):

While Kartco International Ltd restricts access to users under 18, we appoint a Data Protection Officer (DPO) in compliance with the DPA 2018 and GDPR. The DPO serves as the point of contact for privacy-related enquiries and plays a role in ensuring that our data processing activities remain compliant.

4. Data Transfers:

Kartco’s Privacy Policy explains our approach to international data transfers. Although we restrict access to users under the age of 18 years, the data protection mechanisms we have in place for international data transfers, including Standard Contractual Clauses (SCCs), align with the requirements of the GDPR and the DPA 2018.

5. Data Security:

Security is paramount to Kartco International Ltd. We implement technical and organisational measures to protect personal data from unauthorised access, disclosure, alteration or destruction, in compliance with Article 32 o the GDPR and the DPA 2018.

6. Data Retention:

Kartco’s data retention policies specify the criteria for determining data storage durations. Data is retained for as long as necessary for the specified purposes, as per GDPR Artcile 5(1)(e) and the DPA 2018.

7. Consent:

Kartco International Ltd, while restricting access to users under the age of 18, clearly explains how sers can provide and withdraw consent when applicable. Our consent mechanisms adhere to GDPR Article 7 and the DPA 2018, ensuring that consent is obtained in a transparent and user-friendly manner.

8. Cookies and Tracking Technologies:

Our Privacy Policy addresses the use of cookies and similar technologies, including the purpose and ability for users to opt out or give consent. These practices are in compliance with the Privacy and Electronic Communications Regulations (PECR) in the UK as well as the GDPR

9. Data Breach Notification:

Kartco’s Privacy Policy outlines our procedures for detecting, reporting and responding to data breaches. In compliance with the GDPR’s 72-hour breach notification requirement (Article 33), we inform affected users and the Information Commissioner’s Office (ICO) promptly.

10. Complaints:

Our users, regardless of age, have the right to lodge complaints with the relevant data protection authority, such as the Information Commissioner’s Office (ICO) in the UK. We provide contact information for the ICO’s office as per the GDPR and the DPA 2018.

11. International Data Transfers:

Our Privacy Policy clearly explains how international data transfers are handled, aligning with the legal mechanisms required to ensure an adequate level of data protection, such as SCCs and the BCRs. These mechanisms comply with the GDPR and the DPA 2018.

12. Updates to the Privacy Policy:

Kartco International Ltd commits to regularly reviewing and updating our Privacy Policy to reflect changes in data protection laws, ensuring compliance with both the evolving DPA 2018 and the GDPR

Contact us:

If you have any questions regarding any queries or any concerns regarding this

General enquiries: admin@kartco.co.uk

Urgent enquiries/Privacy concerns:

management@kartco.co.uk / kartco.international.ltd@gmail.com

Alternatively, you may contact our social media for a swifter response:

Instagram: @kartco.co.uk

Facebook: Kartco International Ltd

Twitter: Kartco

Categories

Men

Women

Kids

Car

Home

Shop by Room

Beauty

Sports, Fitness & Outdoors

Electronics

Essential & Household Appliances

Toys

Mobile Phones, Devices & Accessories

Car & Motors

Hand-painted

Lippan art

Kantha stitch umbrella

Macrame bags

T-shirts

Coats

Blazers & Waistcoats

Men Jeans

Ripped Jens

Jackets

Shirts

Sweatshirts & Hoodies

Cardigan & Sweaters

Suits

Shorts

Bags

Accessories

Shoes

Swimwear

Basic

Essentials

Nightwear

Wedding

Casual T-shirt

Fitted Coat

summer

Dresses

Jeans

Nightwear

Coats

Blazers & Waistcoats Dresses

Trousers

Shirts Women

Women Tops

Jumpsuits & Playsuits Bodysuits

Shape-wear

Sweatshirts & Hoodies

Jumpers & Cardigans Women

Shorts Swimwear

Loungewear Nightwear

Lingerie Basics

Perfume

Jewellery

Accessories

Shoes

Women Wedding

Coats 0-12 months

0-12 Months Jackets

0-12 Months Dresses

0-12 Months Rompers

0-12 Months Trousers/Bottoms

12-24 Months

12-24 Months Coats

12-24 Months Jackets

2 - 6 years

2-6 Years Coats

2-6 Years Jackets

6-10 Years Coats

6-10 Years Jackets

10-teenage Coats

6-10 Years Sets

BMW

Furniture

Security

Surveillance Essentials

Office