Privacy Policy
At wallmarkets, we believe your data belongs to you. This policy explains what we collect, why, and how we protect it.
We don't sell your data
Your business data is never sold to third parties or used for advertising purposes. Period.
Encrypted at rest and in transit
All data is protected with industry-standard TLS encryption in transit and AES-256 encryption at rest.
You can export anytime
Download a full copy of your data in CSV or JSON format whenever you need it.
GDPR compliant
We comply with GDPR and applicable data protection regulations, giving you full control over your personal data.
Information We Collect
We collect information necessary to operate the wallmarkets platform and provide our B2B logistics services. We limit data collection to what is directly relevant to delivering and improving the service.
Account Information
- Full name and email address
- Company name and business address
- Phone number
- Password (stored as a one-way hash, never in plain text)
Business Data
- Delivery records and logistics history
- Product catalog and inventory data
- Return records and reason codes
- Supermarket partner accounts and relationships
- Financial data such as invoice amounts and credit notes
Usage Data
- IP address and browser type
- Pages visited and features used
- Session duration and interaction patterns
Cookies
- Session cookies for authentication
- Preference cookies for language and theme settings
- Analytics cookies for aggregate usage patterns
How We Use Your Information
We use the information we collect for the following purposes:
- Provide and operate the wallmarkets platform
- Process deliveries, returns, and related logistics operations
- Generate reports, analytics, and business insights
- Send transactional notifications such as delivery confirmations and return alerts
- Improve the service through aggregate, anonymized usage analytics
- Provide customer support and respond to your inquiries
We NEVER use your data for advertising. We NEVER sell your personal information to third parties. Your business data is used solely to provide the services you signed up for.
Data Storage and Security
We take the security of your data seriously. The following measures are in place to protect your information:
All connections to wallmarkets are encrypted using TLS (Transport Layer Security). Data stored on our servers is encrypted at rest using AES-256 encryption.
- Data stored on encrypted servers with restricted physical access
- TLS encryption enforced for all client-server connections
- Regular security audits and vulnerability assessments
- Access limited to authorized personnel on a need-to-know basis
- Documented incident response procedures to handle potential breaches
Third-Party Services
We work with a limited number of third-party service providers to operate the platform. We ensure all third parties meet our security and data protection standards through contractual agreements.
- Payment processing — Card details are handled directly by our payment processor. We do not store credit card numbers on our servers.
- Email delivery service — Used to send transactional notifications such as delivery confirmations and return alerts.
- Hosting infrastructure — Our hosting providers maintain physical and network security for the servers where your data resides.
Data Sharing and Disclosure
We do NOT sell your data. We do not share personal information with third parties for their marketing purposes.
We may share your information only in the following limited circumstances:
- Service providers: Third parties under contract who assist in operating the platform (subject to confidentiality obligations).
- Legal requirements: When disclosure is required by law, regulation, or valid legal process.
- Business transfers: In connection with a merger, acquisition, or sale of assets, with advance notice provided to affected users.
In the context of our B2B platform, delivery data is shared only between a supplier and their registered supermarket partners as necessary to operate the service. This data sharing is an essential part of the logistics workflow you signed up for.
Your Rights
Under applicable data protection laws, you have the following rights regarding your personal data:
Access
Request a complete copy of the personal data we hold about you.
Correction
Update or correct inaccurate personal information in your account.
Deletion
Request the deletion of your account and associated personal data.
Portability
Export your data in a machine-readable format (CSV or JSON).
Restriction
Limit how we process your data in certain circumstances.
Objection
Object to certain types of data processing where applicable.
Withdrawal of Consent
Withdraw your consent to data processing at any time. This will not affect the lawfulness of processing carried out before withdrawal.
To exercise any of these rights, contact us at privacy@wallmarkets.org.
Data Retention
- Active accounts — Your data is retained for as long as your account remains active and you continue to use the service.
- After cancellation — Account data is retained for 90 days following cancellation, then permanently deleted from our systems.
- Financial records — Invoices and financial transaction records are retained for 7 years as required by tax regulations.
- Early deletion — You can request early deletion of your data at any time. Some records may be excluded where retention is required for legal compliance.
Children's Privacy
wallmarkets is a business-to-business platform designed for use by companies and their authorized representatives. Our service is not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If we become aware that we have collected data from a person under 18, we will take prompt steps to delete that information.
International Data Transfers
Your data may be processed in countries where our infrastructure providers operate. When transferring data internationally, we take the following steps to ensure your data remains protected:
- We use standard contractual clauses approved by relevant data protection authorities where required.
- We verify that adequate data protection safeguards are in place regardless of the processing location.
- Your consent to this Privacy Policy, followed by your submission of information, represents your agreement to such transfers.
Changes to This Policy
- We will provide at least 30 days advance notice before any material changes to this policy take effect.
- Notifications will be sent via email and displayed as an in-app banner.
- Continued use of the service after the effective date of changes constitutes your acceptance of the updated policy.
- We encourage you to review this page periodically. The "Last updated" date at the top of this page indicates when the policy was last revised.
Contact Us
If you have any questions about this Privacy Policy or wish to exercise your data protection rights, you can reach us through the following channels:
Our Data Protection Officer is available for GDPR-related inquiries at the email address above.