Privacy Policy

This policy explains what personal data ChargePanda collects, why, and what you can do about it. It covers the ChargePanda service itself. Individual stores run by sellers on this platform publish their own privacy policies covering their own customers.

Who is responsible

The data controller for the ChargePanda service is:

ChargePanda
Last apartment street no 7 millat colony, Bahawalpur, Pakistan
contact[at]chargepanda.com

If you have any question about this policy, or want to exercise any of the rights described below, that address is the place to write.

What we collect, and why

When you create an account

Your name, email address, password (stored only as a cryptographic hash — we never see it), and the subdomain you choose for your store. We need these to create your account and your store, to verify your email address, and to let you sign back in.

When you subscribe to a paid plan

Billing details and a record of your subscription, invoices and payments. Your card details are handled by our payment provider and are not stored on our systems. We keep payment records because we are required to, and to answer questions about your billing.

When you use the service

Technical records generated by using a website: IP address, browser and device information, the pages you request and when. We use these to keep the service secure, to diagnose faults, and to understand how the service is used in aggregate.

When you contact us

Whatever you choose to tell us, kept so that we can answer you and so that a later question about the same problem has its history.

Data belonging to your customers

Your store collects personal data about your customers — their email address, billing details and order history. That data is stored in a database belonging to your store.

For that data, you are the controller and we act only as a processor on your instructions. We do not use it for our own purposes, we do not sell it, and we do not market to your customers. You are responsible for telling your customers how you use their data and for having a lawful basis to do so.

Our lawful bases

• Performance of a contract — running your account, your store and your subscription.
• Legitimate interests — keeping the service secure, preventing abuse, and improving the product; balanced against your rights and interests.
• Legal obligation — keeping financial and tax records.
• Consent — where we ask for it, such as optional email you can unsubscribe from at any time.

Who we share it with

We do not sell personal data, and we do not share it for anyone else's marketing. We use a small number of service providers who process data on our behalf in order to run the service — hosting and infrastructure, payment processing, email delivery, and error monitoring. Each is bound to use the data only as instructed by us.

We will disclose data where the law requires it, and where it is necessary to protect our rights, our users, or the security of the service.

Where data is held

Our infrastructure and some of our service providers may be located in a different country from yours, so your data may be transferred and stored outside the country you live in. Where that happens we take steps to ensure it remains protected to an equivalent standard.

How long we keep it

Account and store data is kept for as long as your account is open. When a store is deleted there is a grace period during which it can still be restored; after that the store's data is permanently destroyed. Financial records are kept for as long as accounting and tax rules require, which is longer than the account itself.

Your rights

Depending on where you live you may have the right to ask us for a copy of your personal data, to correct it, to delete it, to restrict or object to how we use it, and to receive it in a portable form. You can also withdraw consent where we relied on it. Write to contact[at]chargepanda.com and we will respond.

If you are not satisfied with our response, you may have the right to complain to the data protection authority where you live.

Security

Traffic is encrypted in transit. Passwords are stored only as hashes. Each store's data is kept in its own separate database rather than pooled with other stores'. Access to production systems is restricted to the people who need it. No system can be guaranteed perfectly secure, but if a breach affects you we will tell you as required by law.

Cookies

We use cookies that are necessary for the service to work — keeping you signed in, keeping your cart, and protecting forms against cross-site request forgery. Where we use anything beyond that, we ask first.

Children

The service is not intended for children, and we do not knowingly collect their personal data. If you believe a child has given us data, write to us and we will delete it.

Changes to this policy

We may update this policy as the service changes. If a change materially affects how we use your personal data, we will tell you before it takes effect.