1. Who We Are
VendHub operates the website vendhub.store. We are committed to protecting your personal data and respecting your privacy in accordance with the General Data Protection Regulation (GDPR) and other applicable laws.
For any privacy-related questions, contact us at contact@vendhub.store.
2. What Data We Collect
We collect only the minimum data necessary to process your order:
- Name — provided by you at checkout
- Email address — used to deliver your order and send confirmation
- Payment information — processed by Stripe or PayPal. We never store your card details
- Order details — products purchased, amount paid, payment method, date
We do not collect IP addresses, browsing behaviour, or any data beyond what is needed to fulfil your order.
3. How We Use Your Data
Your data is used exclusively to:
- Process and fulfil your order
- Send your order confirmation and purchased documents by email
- Respond to your support requests
- Comply with legal obligations
We do not use your data for marketing, profiling, or any purpose beyond the above.
4. Legal Basis for Processing
We process your personal data on the following legal bases under GDPR:
- Contract — processing is necessary to fulfil your purchase
- Legal obligation — we may be required to retain certain data for tax or legal purposes
5. Third Parties
We share your data only with the following trusted third-party services, solely to operate our store:
- Supabase — secure database storage for orders
- Stripe — payment processing. Stripe Privacy Policy
- PayPal — payment processing. PayPal Privacy Policy
- Resend — transactional email delivery
We do not sell your data to any third party.
6. Data Retention
We retain your order data for as long as necessary to comply with legal and tax obligations, typically up to 5 years. After this period, your data is deleted.
7. Your Rights (GDPR)
Under GDPR, you have the following rights:
- Access — request a copy of the data we hold about you
- Rectification — request correction of inaccurate data
- Erasure — request deletion of your data ("right to be forgotten")
- Portability — request your data in a portable format
- Objection — object to certain types of processing
To exercise any of these rights, email us at contact@vendhub.store. We will respond within 30 days.
8. Cookies
This site uses only essential session cookies required for the shopping cart and admin login to function. We do not use tracking cookies, advertising cookies, or any third-party analytics.
9. Security
We take reasonable technical measures to protect your data, including encrypted connections (HTTPS), secure database storage, and restricted access to order data. No method of transmission over the internet is 100% secure, but we do our best to protect your information.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date. We encourage you to review it periodically.
11. Contact
For any privacy concerns or to exercise your rights, contact us at contact@vendhub.store.