Privacy Policy

1. Introduction

AfghanistanOnline.shop ("we", "our", or "us") is committed to protecting your personal information. This Privacy Policy explains how we collect, use, and safeguard your data when you use our marketplace platform.

2. Information We Collect

We collect the following types of information:

• Account information: name, email address, and password when you register
• Profile information: profile photo, location, and store details (for sellers)
• Transaction data: order history, payment amounts, and shipping addresses
• Payment information: processed securely by Stripe — we never store card details
• Usage data: pages visited, search queries, and interactions with the platform
• Communications: messages between buyers and sellers through our platform

3. How We Use Your Information

We use your information to:

• Create and manage your account
• Process orders and payments
• Facilitate communication between buyers and sellers
• Send transactional emails (order confirmations, shipping updates)
• Improve our platform and user experience
• Comply with legal obligations
• Prevent fraud and enforce our terms of service

4. Data Sharing

We do not sell your personal data. We share data only with:

• Stripe: for secure payment processing
• Supabase: our database and authentication provider
• Vercel: our hosting provider
• Sellers: your shipping address and order details necessary to fulfill your order

5. Cookies

We use essential cookies to keep you signed in and maintain your session. We do not use advertising or tracking cookies. Your cart is stored in your browser's local storage for convenience.

6. Data Retention

We retain your account data for as long as your account is active. Order records are kept for a minimum of 7 years for legal and accounting purposes. You may request deletion of your account and personal data at any time.

7. Your Rights (GDPR)

If you are in the European Economic Area, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data ("right to be forgotten")
• Object to or restrict processing of your data
• Data portability — receive your data in a machine-readable format
• Lodge a complaint with your local data protection authority

To exercise any of these rights, email us at privacy@afghanistanonline.shop.

8. Data Security

We use industry-standard security measures including encrypted connections (HTTPS), secure authentication via Supabase, and payment processing via Stripe which is PCI DSS compliant. We never store payment card details on our servers.

9. Children's Privacy

Our platform is not intended for children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by posting a notice on our platform. Continued use of the platform after changes constitutes acceptance of the updated policy.

11. Contact Us

For privacy-related questions or requests, contact us at: privacy@afghanistanonline.shop