Privacy policy
Last updated: September 11, 2026
1. Introduction and data controller
This policy describes how WaMarcket collects, uses and protects the personal data of Sellers who create a shop, as well as Customers who place orders there. The data controller is the site publisher as identified in the Legal notices, reachable at support@wamarcket.com for any question about your data.
2. Data we collect
Seller account: name, email address, phone/WhatsApp number, password (encrypted), country and currency. Shop: name, tagline, logo, cover photo, brand color, products (name, price, photos, description, stock), delivery zones and fees. Orders and Customers: name, phone number, delivery address and order content, entered by the Customer or the Seller at the time of ordering. Technical data: IP address, device and browser type, pages visited, cookies (see article 9), timestamps of logins and important actions (security, audit log).
3. Purposes of processing
Data is processed to: create and manage your account and Shop; display the public Shop to Customers; transmit and track orders; ensure the security of the service (authentication, fraud detection, logging); send emails essential to the service (address verification, password reset, confirmations); respond to your support requests; produce aggregated, anonymized usage statistics; comply with our legal and tax obligations.
4. Legal basis
Processing is based, depending on the case, on: performance of the contract binding you to WaMarcket (creation and operation of your account and Shop); your consent (for example for the newsletter or certain non-essential cookies); WaMarcket's legitimate interest (security, fraud prevention, service improvement); compliance with a legal obligation (billing, retention of certain data in the event of a dispute).
5. Recipients and sub-processors
Your data is never sold. It may be shared with the technical providers strictly necessary for the service to function, all bound by confidentiality commitments: application and database hosting (Railway Corporation, United States); transactional email and newsletter delivery (Brevo, France/Europe); domain name resolution and network protection (Cloudflare, Inc., United States); audience measurement and advertising conversion tracking where enabled and consented to (Meta Platforms, Inc. for the Meta Pixel, Google LLC for Google Analytics 4 — see article 9; Cloudflare Web Analytics, outside the scope of consent); where applicable, an online payment provider if that feature is enabled on a Shop. Your data may also be disclosed to competent authorities where required by law.
6. Retention period
Account and Shop data is kept for as long as the account is active. If the account is deleted, personal data is deleted or anonymized within a reasonable period, except where a longer legal retention obligation applies (accounting records, for example, kept for the applicable statutory periods). Order data is kept for as long as needed to process the order, then archived for the legal limitation and accounting retention periods.
7. Security
Passwords are hashed (bcrypt) and are never stored or viewable in plain text. Exchanges between your browser and our servers are encrypted (HTTPS/TLS). Access to production data is limited to what is strictly necessary and logged. Reasonable measures are implemented to prevent unauthorized access, alteration or loss of data, although absolute security against cyberattacks cannot be guaranteed.
8. Transfers outside your country
Some of our providers (hosting, email delivery, DNS resolution) are located outside your country of residence, notably in the United States. These transfers are governed by the contractual and security commitments of these providers. By using the service, you acknowledge that your data may be processed in these countries.
9. Cookies and trackers
The site uses strictly necessary cookies (keeping you logged in, protection against request forgery, language preference) without which the service cannot function properly, as well as, with your consent, audience-measurement and advertising conversion tracking tools: Cloudflare Web Analytics (cookieless, aggregated and anonymized data, outside the scope of consent) and, where a Shop or the platform enables them, the Meta Pixel (Facebook/Instagram) and Google Analytics 4, which measure the effectiveness of advertising campaigns and set a third-party cookie in your browser. These last two only load after you give your consent via the cookie banner shown on your first visit (changeable at any time from the "Manage my cookies" link in the footer), and are only active on the site's public pages (not in the dashboard). They send Meta Platforms, Inc. and Google LLC technical information (IP address, browser identifiers) and the events described in article 5. You can also opt out of this tracking via the ad-privacy settings of your Facebook/Instagram or Google account, or by configuring your browser to block third-party cookies, at the risk of degrading some features.
10. Your rights
In accordance with applicable data protection regulations, you have the right to access, rectify, erase and restrict the processing of your data, as well as a right to portability and a right to object on legitimate grounds. You can exercise these rights directly from your dashboard (profile changes, account deletion) or by writing to support@wamarcket.com. A response will be provided within a reasonable time, and no later than required by applicable law. You also have the right to lodge a complaint with the competent data protection authority in your country of residence.
11. Rights of a Shop's Customers
The information a Customer provides when placing an order (name, phone, address) is processed by WaMarcket on behalf of the Seller, who is responsible for it toward their Customer as part of their own commercial relationship. A Customer wishing to exercise their rights over data provided when placing an order may contact the relevant Seller directly, or support@wamarcket.com, which will forward the request and respond within 30 days.
12. Minors
The service is intended for people who are of legal age or legally capable of contracting. WaMarcket does not knowingly collect data from unaccompanied minors beyond the incidental information a Customer may provide for an order.
13. Changes to this policy
This policy may be updated to reflect changes to the service or regulations. The date of the last update appears at the top of this page. Any material change will be notified to you by email or via the dashboard.
14. Contact
For any question about your personal data or to exercise your rights, write to support@wamarcket.com or contact us via WhatsApp from the Contact page.