Privacy Policy

1. Information We Collect

A. Information You Provide Directly

• Account registration: Name, email address, and password when you create an account.
• Business listings: Business name, address, phone number, website, description, categories, photos, and other listing details.
• Profile information: Profile photo, bio, and other optional details you add to your account.
• User Content: Reviews, ratings, job postings, event details, marketplace listings, blog comments, and messages.
• Communications: When you contact us, we collect the content of your messages and your contact details.
• Payment details: Billing information collected by our payment processor (Stripe). We do not store full card numbers on our servers.

B. Information Collected Automatically

• Usage data: Pages visited, features used, time spent, and actions taken on the Platform.
• Device information: IP address, browser type and version, operating system, device identifiers, and screen resolution.
• Log data: Server logs recording requests made to our servers, including timestamps and referring URLs.
• Cookies and similar technologies: As described in Section 3 below.

C. Information from Third Parties

• Social login: If you sign in using a third-party service, we may receive your name, email, and profile photo from that provider.
• Publicly available data: We may supplement business listing information with publicly available data to improve accuracy.

2. How We Use Your Information

We use the information we collect for the following purposes:

• Providing the Platform: Creating and managing your account, displaying listings, processing transactions, and delivering requested services.
• Account security: Verifying your identity, enabling two-factor authentication, and detecting unauthorized access.
• Billing and payments: Processing subscription payments, issuing invoices, and handling refund requests.
• Improving the Platform: Analyzing usage patterns, identifying bugs, and developing new features.
• Communications: Sending transactional emails (account verification, booking confirmations, password resets), service updates, and support responses.
• Marketing: Sending promotional communications about WooMarketplace features, where you have consented or where permitted by law.
• Legal compliance: Complying with applicable laws, resolving disputes, and enforcing our Terms of Service.
• Fraud prevention: Detecting, investigating, and preventing fraudulent, unauthorized, or illegal activity.

We process your data based on one or more of the following legal bases: performance of a contract, legitimate interests, your consent, or compliance with a legal obligation.

3. Cookies & Tracking Technologies

We use cookies and similar technologies to operate the Platform, remember your preferences, and understand how you use our services.

You can control cookies through your browser settings. Disabling essential cookies may affect Platform functionality. For more information on how to manage cookies, visit allaboutcookies.org.

4. Analytics

We use Google Analytics to collect aggregated information about how users interact with the Platform, including page visits, session duration, geographic location (at the city level), and device type. This data helps us improve the user experience.

Google Analytics uses cookies and may transmit data to Google's servers in the United States. For details, see Google's Privacy Policy. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

We configure Google Analytics with IP anonymization enabled, meaning your full IP address is not stored by Google.

5. Payment Processing (Stripe)

All payment transactions are processed by Stripe, Inc., a PCI-DSS compliant payment processor. When you make a payment:

• Your payment card details are entered directly into Stripe's secure interface and are not transmitted to or stored on WooMarketplace's servers;
• WooMarketplace receives only a tokenized reference and basic transaction metadata (amount, currency, status);
• Stripe may store your payment information in accordance with its own privacy policy, available at stripe.com/privacy.

6. Third-Party Services

We share data with the following third-party service providers solely to operate the Platform. We do not sell your personal data.

We may also disclose information to law enforcement or government authorities when required by applicable law, court order, or to protect the rights, property, or safety of WooMarketplace, our users, or the public.

7. Data Retention

We retain your personal data for as long as necessary to provide the Platform and fulfill the purposes described in this policy, unless a longer retention period is required by law.

• Active accounts: Data retained for the lifetime of your account.
• Deleted accounts: Personal data is deleted or anonymized within 90 days of account deletion, except where retention is required for legal or financial compliance.
• Transaction records: Billing and payment records are retained for up to 7 years as required by tax and accounting regulations.
• Anonymized data: Aggregated, non-identifiable data may be retained indefinitely for analytics purposes.

8. Data Security

We implement appropriate technical and organizational measures to protect your information against unauthorized access, loss, destruction, or alteration, including:

• HTTPS encryption for all data transmitted between your browser and our servers;
• Bcrypt hashing for all user passwords — we never store passwords in plain text;
• CSRF token protection on all forms;
• Optional two-factor authentication (2FA) for accounts;
• Access controls limiting employee access to personal data on a need-to-know basis;
• Regular security reviews and software updates.

Despite our efforts, no security measures are 100% foolproof. In the event of a data breach that affects your personal data, we will notify you and relevant authorities as required by applicable law.

9. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

For all users

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data, subject to legal retention requirements.
• Portability: Request your data in a commonly used, machine-readable format.
• Opt-out of marketing: Unsubscribe from promotional emails at any time.

For EEA / UK users (GDPR)

• Right to restrict processing;
• Right to object to processing based on legitimate interests;
• Right to lodge a complaint with your local data protection authority.

For California residents (CCPA)

• Right to know what personal information is collected and how it is used;
• Right to opt-out of the sale of personal information — we do not sell personal information;
• Right to non-discrimination for exercising your privacy rights.

To exercise any of these rights, contact us at privacy@woomarketplace.com. We will respond within 30 days.

10. Marketing Communications

We may send you promotional emails about new features, special offers, and platform updates. You can opt out at any time by:

• Clicking the "Unsubscribe" link in any marketing email;
• Updating your notification preferences in your account settings;
• Emailing us at privacy@woomarketplace.com.

Opting out of marketing emails does not affect transactional emails — we will still send emails necessary for operating your account (e.g., password resets, booking confirmations, billing receipts).

11. Children's Privacy

WooMarketplace is not directed to children under the age of 18. We do not knowingly collect personal information from anyone under 18. If you believe we have inadvertently collected information from a minor, please contact us immediately at privacy@woomarketplace.com and we will take steps to delete that information promptly.

12. International Data Transfers

WooMarketplace is operated from the United States. If you access the Platform from outside the United States, your information may be transferred to, stored in, and processed in the United States, where data protection laws may differ from those in your jurisdiction.

For users in the European Economic Area (EEA) or United Kingdom, we rely on appropriate legal mechanisms for cross-border data transfers, including Standard Contractual Clauses where applicable. By using the Platform, you consent to such transfers.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

• Update the "Last updated" date at the top of this page;
• Notify you via email (for significant changes) or via a notice on the Platform.

We encourage you to review this policy periodically. Your continued use of the Platform after changes become effective constitutes acceptance of the updated policy.

14. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: