Privacy Policy

1. Scope and Controller

This Privacy Policy explains how minMall collects, uses, shares, and protects personal data when you use our marketplace, including browsing, purchases, seller onboarding, and customer support interactions.

For data processing on this platform, minMall acts as data controller for core marketplace operations. Individual sellers may act as independent controllers for their own legal obligations (for example, bookkeeping and warranty handling).

2. Data We Collect

• Identity and account data: name, email, phone, account role, and authentication identifiers.
• Order and transaction data: purchased items, order totals, shipping selections, invoices, and payment status.
• Delivery data: recipient details, address, postal code, city, and shipment tracking references.
• Seller data: business profile details, payout onboarding status, and compliance information required to process payouts.
• Support data: messages you send through contact forms, support tickets, and related communication metadata.
• Technical data: device/browser details, IP address, session logs, and usage analytics required for security and performance.

3. How We Use Personal Data

• Provide marketplace features, including checkout, multi-vendor order routing, and order lifecycle updates.
• Process and reconcile payments, refunds, and payout workflows.
• Detect fraud, secure accounts, prevent abuse, and investigate suspicious activity.
• Respond to support requests and operational communications (order confirmations, shipping updates, refund notifications).
• Improve product discovery, search relevance, and user experience through aggregated analytics.
• Comply with legal obligations, accounting requirements, and dispute handling procedures.

4. Lawful Bases for Processing

Depending on the processing activity, we rely on: performance of a contract (to deliver marketplace services), legitimate interests (platform security and improvement), legal obligations (bookkeeping and regulatory duties), and consent where required (for specific optional communications or non-essential tracking).

5. Sharing and Recipients

• Sellers: only the data necessary to fulfill your order, provide support, and manage returns/refunds.
• Payment providers (for example, Stripe and connected payout systems): payment authorization, fraud checks, and settlement operations.
• Shipping/logistics providers: delivery details needed to dispatch and track shipments.
• Infrastructure and support vendors: hosting, analytics, customer communication, and reliability monitoring under confidentiality obligations.
• Authorities or legal counterparties: when required by law, court order, or to protect legal rights and platform safety.

6. Cookies and Similar Technologies

We use essential cookies and local storage for core functionality such as session continuity, cart persistence, and security controls. We may also use analytics technologies to understand performance and usage trends. Where legally required, optional technologies are activated only after consent.

7. Data Retention

We retain personal data only for as long as needed for the purposes described in this policy, including legal and accounting requirements. Retention periods vary by data type, transaction history, and dispute risk. When data is no longer required, it is deleted or irreversibly anonymized.

8. Security Measures

• Role-based access controls for marketplace administration and seller operations.
• Audit trails for financial events such as refunds and payout-related updates.
• Transport encryption and secure processing through trusted payment integrations.
• Monitoring, rate controls, and suspicious activity checks to protect user accounts.

9. Your Privacy Rights

• Request access to personal data we hold about you.
• Request correction of inaccurate or incomplete information.
• Request deletion where legal retention duties do not override the request.
• Object to or restrict certain processing where applicable.
• Request portability of eligible data.
• Withdraw consent where processing is based on consent.

10. International Transfers

If data is transferred outside your jurisdiction, we use appropriate safeguards as required by applicable law, such as contractual safeguards and provider commitments that protect your rights and data security.

11. Children

The marketplace is not directed to children under the minimum age required by local law. If we learn that personal data has been collected from a child without appropriate authorization, we will take steps to remove the data in accordance with legal requirements.

12. Policy Updates

We may update this policy to reflect platform changes, legal developments, or operational improvements. The effective date at the top of this page indicates the latest version.

13. Contact

For privacy questions, rights requests, or complaints, contact our support team and mention "Privacy Request" in your message for faster handling.

• Email: support@minmall.no
• Contact page: /contact