Privacy Policy.

1. Who is responsible

CartKo (cartko.store) is the personal information controller for the data described here. For anything about your data, including your rights below, email support@cartko.store.

2. What we collect

• Creators: name, email, password (stored encrypted by our login provider), mobile number, city and province, business details you choose to add, profile photo, and the payment details you put on your page, such as a GCash or Maya number, QR code or PayPal email.
• Buyers: name, email, phone number and country, delivery address for physical items, payment reference numbers or screenshots you upload, and your order history.
• Messages and reports you send, including any files attached.
• Visits: the pages you open, the type of device, the site that sent you and the time. We use this only as totals for creators and for running CartKo. We do not use advertising trackers.

3. Why we use it

• To run accounts and creator pages.
• To process orders, deliver files and send order emails.
• To handle support, reports and refunds.
• To keep CartKo safe and prevent fraud.
• To understand how CartKo is used, in totals, so we can improve it.
• To send product news from a creator, only if you ticked the sign-up box at checkout.
• To meet legal obligations, such as tax and accounting rules.

4. Who we share it with

• The creator you buy from receives your order details so they can deliver and support your purchase. They use this data for your order and are responsible for how they handle it.
• Service providers that run CartKo for us: Supabase (database, logins and file storage, in Singapore), Vercel (website hosting), Resend (email delivery) and PayPal (when you pay with PayPal). Some of this processing happens outside the Philippines, under contracts that require them to protect it.
• Authorities, when the law requires it.
• We do not sell your personal information.

5. Emails

• Order emails (receipts, files ready, shipping updates) are part of the service.
• Creator newsletters and product news are only sent if you agreed at checkout. To stop them, reply “unsubscribe” or email support@cartko.store.

6. How long we keep it

We keep account information while your account is open. We keep order records as long as needed for the purchase, support and refunds, and as long as tax and accounting rules require. After that we delete or anonymise it.

7. How we protect it

Data is sent over encrypted connections and stored with access rules, so creators see only their own orders and customers, and only CartKo admins can see platform data. Passwords are never stored in plain text.

8. Your rights

Under the Data Privacy Act you have the right to be informed, to access your data, to object, to have it corrected, to have it erased or blocked, to data portability, to claim damages, and to file a complaint with the National Privacy Commission. Email support@cartko.store to use any of these rights; we may ask you to confirm your identity first.

9. Cookies and browser storage

CartKo uses your browser’s storage to keep you logged in, remember your light or dark mode, remember the email you used for My purchases and count visits as one session. We do not use advertising cookies.

10. Children

CartKo is not meant for children under 18 without a parent or guardian’s permission.

11. Changes

If we change this policy in a way that matters, we will tell you by email or on the site before it takes effect.