Privacy Policy

Last updated: 13 July 2026

---

1. Data Controller

market_prod_v3 (referred to as "we", "us", or "our") is the Data Controller for personal data processed through our platform. We operate in compliance with Regulation (EU) 2016/679 (GDPR).

Contact: privacy@marketprodv3.com

---

2. What Data We Process and Why

We process personal data solely for the purpose of managing orders placed through integrated marketplaces (including Temu). This includes:

Data	Purpose
Customer name, delivery address, email, phone number	Order fulfilment and shipping
Products purchased, order value, order date	Order management
Shipping and tracking information	Courier coordination

We do not use this data for any other purpose — no marketing, no profiling, no analytics beyond what is necessary for order processing.

---

3. Data Sharing

We share order data only with:

• Temu and other marketplaces you integrate with — to process and fulfil orders
• Courier partners (Fan Courier, Cargus, DPD, Sameday, PACTIC) — for delivery
• Cloud hosting providers (within the EEA) — for infrastructure

All recipients are bound by data processing agreements in accordance with Article 28 of the GDPR.

---

4. Data Retention — 30 Days

Order-related personal data is automatically anonymised 30 days after the order is completed. After anonymisation, the data can no longer be linked to an identifiable person and is retained only in aggregate form for statistical purposes.

Account and billing information is retained as required by Romanian fiscal law (5 years).

---

5. International Data Transfers

When you use our Temu integration, order data may be transferred to servers in China. We rely on Standard Contractual Clauses (SCCs) as the safeguard for these transfers, in compliance with Articles 44–49 of the GDPR.

---

6. Your Rights

Under the GDPR you have the right to:

• Access your data (Article 15)
• Rectify inaccurate data (Article 16)
• Erase your data (Article 17)
• Restrict processing (Article 18)
• Port your data (Article 20)
• Object to processing (Article 21)
• Lodge a complaint with the Romanian supervisory authority: ANSPDCP

To exercise your rights, contact us at privacy@marketprodv3.com. We will respond within 30 days.

---

7. Data Security

We protect personal data using:

• AES-256 encryption at rest
• TLS 1.2+ encryption in transit
• Field-level encryption of PII (names, addresses, phones, emails)
• Strict access controls on a need-to-know basis

---

8. Contact

Data Controller	market_prod_v3
Privacy Inquiries	privacy@marketprodv3.com

Supervisory Authority: Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP) — www.dataprotection.ro

---

Last updated: 13 July 2026. This policy complies with the General Data Protection Regulation (EU) 2016/679.