Privacy Policy
In our mission to make commerce better for everyone at Windo, we collect and use information about you. This Privacy Policy (“Privacy Policy”) will help you better understand how we collect, use, and share your personal information. If we change our privacy practices, we may update this Privacy Policy. If any changes are significant, we will let you know (for example, through the Windo admin or by email).
This Privacy Policy contains General Privacy Policy, Privacy Policy for merchants and Privacy Policy for buyers. In addition to reading the GENERAL PRIVACY POLICY (“General Privacy Policy”), the merchants and buyers are requested to also read the PRIVACY POLICY FOR MERCHANTS (“Privacy Policy for merchants”) and PRIVACY POLICY FOR BUYERS (“Privacy Policy for buyers”) respectively.
By visiting the Windo website (including URL for the merchant) and the Windo app (collectively called “Platform”), you agree to be bound by the terms and conditions of this Privacy Policy (as amended and updated from time to time). If you do not agree, please do not use or access out Platform. This Privacy Policy together with the Terms of Service is called “User Agreement”.
A. GENERAL PRIVACY POLICY
1. Consent
By using this Platform and/or providing your information, you consent to the collection and use of the information you disclose on the Platform in accordance with this Privacy Policy, including but not limited to your consent for sharing your information as per this Privacy Policy.
2. Our Values
Our Privacy Policy is built on principally three values – (a) You are the owner of your information, (b) We endeavor to protect your information from others and, (c) We help our partners and merchants to fulfil their privacy obligations.
You are the owner of your information
We carefully analyze what types of information we need to provide our services, and we try to limit the information we collect to only what we really need. Where possible, we delete or anonymize this information when we no longer need it. When building and improving our products, our engineers work closely with our privacy and security teams to build with privacy in mind. In all of this work our guiding principle is that your information belongs to you, and we aim to only use your information to your benefit.
Protecting your information from others
If a third party requests your personal information, we will refuse to share it unless you give us permission or we are legally required. When we are legally required to share your personal information, we will tell you in advance, unless we are legally forbidden.
Helping merchants and partners to meet their privacy obligations
Many of the merchants and partners using Windo may not have the benefit of a dedicated privacy team, and it is important to us to help them meet their privacy obligations. To do this, we try to build our products and services so they can easily be used in a privacy-friendly way. We also provide detailed FAQs, documentation and whitepapers covering the most important privacy topics, and respond to privacy-related questions we receive.
3. The reasons for processing your information
We generally process your information when we need to do so to fulfill a contractual obligation (for example, to process your subscription payments to use the Windo platform), or where we or someone we work with needs to use your personal information for a reason related to their business (for example, to provide you with a service).
These reasons include:
• preventing risk and fraud
• answering questions or providing other types of support
• helping merchants find and use apps through our app store
• providing and improving our products and services
• providing reporting and analytics
• testing out features or additional services
• assisting with marketing, advertising, or other communications
We process personal information for these reasons after considering the potential risks to your privacy—for example, by providing clear transparency into our privacy practices, offering you control over your personal information where appropriate, limiting the information we keep, limiting what we do with your information, who we send your information to, how long we keep your information, or the technical measures we use to protect your information.
One of the ways in which we are able to help merchants using Windo is by using techniques like “machine learning” to help us improve our services. When we use machine learning, we either: (1) still have a human being involved in the process (and so are not fully automated); or (2) use machine learning in ways that don’t have significant privacy implications (for example, reordering how apps might appear when you visit the app store).
4. Your rights over your information
We believe you should be able to access and control your personal information no matter where you live . Depending on how you use Windo, you may have the right to request access to, correct, amend, delete, port to another service provider, restrict, or object to certain uses of your personal information (for example, direct marketing). We will not charge you more or provide you with a different level of service if you exercise any of these rights.
If you buy something from a Windo-powered store and wish to exercise these rights over information about your purchase, you need to directly contact the merchant you interacted with. We are only a processor on their behalf and cannot decide how to process their information. We will of course help our merchants to fulfil these requests by giving them the tools to do so and by answering their questions.
If you are a merchant, partner, Shop user, Windo employee, or other individual that Windo has a direct relationship with, please submit your data subject request through your Account. Please note that if you send us a request relating to your personal information, we have to make sure that it is you before we can respond. In order to do so, we may use a third party to collect and verify identification documents.
If you are not happy with our response to a request, you can contact us at team@windo.live to resolve the issue. You also have the right to contact your local data protection or privacy authority at any time.
Finally, because there is no common understanding about what a “Do Not Track” signal is supposed to mean, we don’t respond to those signals in any particular way.
5. Where we send your information
We are incorporated in USA and India, but we work with and process data about individuals across the world. To operate our business, we may send your personal information outside of your state, province, or country. However, before sending your information which is Sensitive (for example, information about health, race, ethnicity, genetics, biometrics, trade union membership, political opinions, philosophical or religious beliefs, criminal history, or sexual interests), we will seek your permission. This data may be subject to the laws of the countries where we send it. When we send your information across borders, we take steps to protect your information, and we ensure that every entity, to which we send the information, has the same level of information security practices. We try to only send your information to countries that have strong data protection laws.
6. Information transfer outside of Europe and Switzerland If you are in Europe or Switzerland, your personal information may be collected by our affiliate entity(s). Your information is then sent to other Windo locations and to service providers who may be located in other regions, including India (where we are based). During all this process, we ensure that we handle your personal information as per applicable law.
If you are in Europe or Switzerland, when we send your personal information to India it is protected under strong Indian law which is adequately equipped to protect your personal information. If we then send this personal information outside of India (for example, when we send this information to our Sub-processors), this information is protected by contractual commitments.
Finally, while we do what we can to protect your information, we may at times be legally required to disclose your personal information (for example, if we receive a valid court order).
7. How we protect your information
Our teams work tirelessly to protect your information, and to ensure the security and integrity of our platform. We also have independent auditors assess the security of our data storage and systems that process financial information. However, we all know that no method of transmission over the Internet, and method of electronic storage, can be 100% secure. This means we cannot guarantee the absolute security of your personal information.
8. How we use cookies and other tracking technologies
We use cookies and similar tracking technologies on our website and when providing our services. A "cookie" is a small piece of information stored by a web server on a web browser so it can be later read back from that browser. Cookies are useful for enabling the browser to remember information specific to a given user. We place both permanent and temporary cookies in your computer's hard drive. The cookies do not contain any of your personally identifiable information.
We use data collection devices such as "cookies" on certain pages of the website to help analyse our web page flow, measure promotional effectiveness, and promote trust and safety. "Cookies" are small files placed on your hard drive that assist us in providing our services. We offer certain features that are only available through the use of a "cookie". Cookies can also help us provide information that is targeted to your interests. Most cookies are "session cookies," meaning that they are automatically deleted from your hard drive at the end of a session. You are always free to decline our cookies if your browser permits, although in that case you may not be able to use certain features on the website.
Additionally, you may encounter "cookies" or other similar devices on certain pages of the website that are placed by third parties. We do not control the use of cookies by third parties.
9. How to contact us
If you would like to ask about, make a request relating to, or complain about how we process your personal information, please contact team@windo.live, or mail us at one of the addresses below. If you would like to submit a legally binding request to demand someone else’s personal information, please contact team@windo.live.
B. SPECIFIC PRIVACY POLICY FOR MERCHANTS
This is the Privacy Policy for Merchants. Additionally, please also read the General Privacy Policy that applies to everyone whose information we process.
If you are a merchant using Windo to power your business, we collect and use your personal information to provide you with the use of our platform and its services, and generally to help you better manage your business and your relationship with your customers.
1. What information we collect about you and why
We collect personal information when you sign up for Windo, when you use our platform, or when you otherwise provide us information including by way of linking your Account with your Social Media accounts. We may also use third party service providers to help us review accounts for fraud or other concerns. In general, we need the below mentioned information for you to be able to use our platform. We collect information provided by you such as information about you and your business, like your name, the name of your staff or other individuals associated with your business, company name, address, email address, and phone number. We use this information to provide you with the use of our platform and other related services (e.g., to confirm your identity, to contact you about issues with the platform, to invoice you), to advertise and market products or features to you, or to comply with legal requirements. We collect Payment information you provide us, such as your credit or debit card number or your bank account number. We use this information to charge you for our services, and to provide you access to payment services.
We collect copies of government-issued and/or a picture of yourself holding your identification that you provide us. This information is used by us if we need to verify your identity (e.g., to protect you against identity theft or fraud), or to verify that we are speaking with you if you contact us, or to help us determine or verify your Account ownership, or to comply with legal requirements. We also work with companies that provide us with information about merchants or prospective merchants (for example, to protect against fraud or if we’re sponsoring an event).
2. When and why we share your information with others
Running a business is hard, and we work with a variety of companies to help us provide you with a range of services to help you support your business. We sometimes share your personal information with these companies to help us provide you with Windo services.
We also share your personal information with others:
• to prevent or investigate suspected fraud, threats to physical safety, illegal activity, or violations of a contract (like our Terms of Service available at https://mywindo.shop/terms-and-conditions).
• to help us conduct marketing and advertising
• to comply with legal requirements, or to respond to court orders, or other similar government demands
• if we merge with or are acquired by another company
Additionally, almost every merchant using the Windo platform also uses non-Windo services to support their business (for example, apps from our app store, sales channels, payment gateways, or shipping providers).
Windo doesn’t control how these services use your personal information, and you should review any other service you use to make sure it meets your privacy expectations. When you choose to use non-Windo services, we tell you what information we will share with that service at your direction, so you can decide whether you want to use the service.
3. Your rights over your information
We believe that you should be able to access and control your own personal information no matter where you live. You can access and correct a lot of your personal information directly through your Windo Account.
When you use our service, we may ask you to provide information which will be useful for us to identify you. This information includes your email ID, contact information, company or manufacturing address and Business name. If you close your store, you stop paying your subscription fees, or we terminate your account, we retain store information for a pre-decided time-frame before we begin the personal information purge process. We don’t do this immediately in case you reactivate your account, or if there is a legal complaint or audit relating to your business.We may also ask you to provide permissions for us to collect key information that will help us to measure our metrics such as the device being used, the type of mobile internet browser and other identifiers.
We at Windo collect this data to:
• Send you updates about new or updated features
• monitor the usage of our features
• prevent technical issues
• gather data that will help us analyze success metrics of our features
• provide customer support
We will take all the steps necessary to handle the data provided by you securely and to not transfer any of your personal data to another organizations or country.You can erase your personal data by deleting your account from account settings section. For more information about this process, you can reach us on team@windo.live.Please keep in mind that after we anonymize your personal information, we may continue to use non-identifiable information to improve our services. Finally, we do not and will not “sell” your personal information.
4. Your customers’ information
In order to power your business, we collect and use personal information about your customers. In general, we only collect and use this personal information as directed by you. We will never use your customers’ information to independently market or advertise to your customers unless they are also using one of our applications or services directly. We also do not and will not “sell” your customers’ information.
Because you decide how the personal information of your customers will be used, you need to make sure your customers understand how you (and how we on your behalf) collect and process their personal information. You should do this by, at a minimum, posting a privacy policy on your store that describes the information you collect, how you use it, and who you share it with.
To help get you started with this, you can use a privacy policy generator available on internet. Also, if you are collecting any Sensitive personal information from your customers, you should get the affirmative, express consent from your customers to use and process this information.
C. PRIVACY POLICY FOR BUYERS
This is the Privacy Policy for Buyers. Additionally, please also read the General Privacy Policy that applies to everyone whose information we process. Windo provides software used by our merchants to run their businesses. If you have visited or made a purchase from a merchant’s Windo-powered store, we collect and use information about you on behalf of that particular merchant. We only use this information at the direction of our merchants—they ultimately choose how and why to use your information. If you have questions about how a specific merchant or store uses your information, please visit their privacy policy.
However, if you use one of our apps (like Windo) to store your personal information for easy checkout across Windo-powered store, please review our General Privacy Policy.
1. What information we collect about you and why
Please note that Windo will never use your personal information to independently market or advertise to you, unless you are using one of our apps or services directly.
We collect information you provide about yourself like your name, billing address, shipping address, email address, phone number, and payment information. We use it to provide merchants with our services, and enable them to operate their business—e.g., to allow them to complete a transaction, screen orders for fraud and risk, fulfil orders, and contact you with new products or offers.
We also collect information about how you access our websites, your account, and our platform, including information about the device and browser you use, your network connection, your IP address, and details about how you browse through our websites and platform. We collect some of this information by using “cookies” or other similar technologies directly from your device. We use it to provide merchants with our services, and enable them to operate their business (e.g., to provide them with analytics about how many people visit their store, and to help them troubleshoot and improve their store).
2. When and why we share your information with others
We use service providers to help us provide services to our merchants. Outside of these service providers, we will only share your information if we are legally required to do so (for example, if we receive a legally binding court order or subpoena), or where a Windo merchant instructs us to share information on their behalf. If you have questions about how a merchant or store shares your personal information, you should contact the merchant or visit their privacy policy.
3. Your rights over your information
When you visit or make a purchase from a merchant’s Windo-powered store, the merchant you're visiting or buying from legally controls your information. As a result, Windo doesn’t, for example, decide how long your information is retained because that decision is made by the merchant. This means Windo can't help you access, correct, erase, or port your information without being directed to by the merchant. To make a request about your personal information, contact the specific merchant directly. If you make a request to us, we will forward your request to the relevant merchant and help them fulfil your request. If the merchant no longer exists, however, we may be able to assist you directly. We also do not and will not “sell” your customers’ information.
D. Collecting and Using Your Personal Data
Types of Data Collected
Personal Data
While using Our Service, We may ask You to provide Us with certain personally identifiable information that can be used to contact or identify You. Personally identifiable information may include, but is not limited to:
-
Email address
-
Address
-
Usage Data
Usage Data
Usage Data is collected automatically when using the Service.
Usage Data may include information such as Your Device's Internet Protocol address (e.g. IP address), browser type, browser version, the pages of our Service that You visit, the time and date of Your visit, the time spent on those pages, unique device identifiers and other diagnostic data.
When You access the Service by or through a mobile device, We may collect certain information automatically, including, but not limited to, the type of mobile device You use, Your mobile device unique ID, the IP address of Your mobile device, Your mobile operating system, the type of mobile Internet browser You use, unique device identifiers and other diagnostic data.
We may also collect information that Your browser sends whenever You visit our Service or when You access the Service by or through a mobile device.
Tracking Technologies and Cookies
We use Cookies and similar tracking technologies to track the activity on Our Service and store certain information. Tracking technologies used are beacons, tags, and scripts to collect and track information and to improve and analyze Our Service. The technologies We use may include:
-
Cookies or Browser Cookies. A cookie is a small file placed on Your Device. You can instruct Your browser to refuse all Cookies or to indicate when a Cookie is being sent. However, if You do not accept Cookies, You may not be able to use some parts of our Service. Unless you have adjusted Your browser setting so that it will refuse Cookies, our Service may use Cookies.
-
Web Beacons. Certain sections of our Service and our emails may contain small electronic files known as web beacons (also referred to as clear gifs, pixel tags, and single-pixel gifs) that permit the Company, for example, to count users who have visited those pages or opened an email and for other related website statistics (for example, recording the popularity of a certain section and verifying system and server integrity).
Cookies can be "Persistent" or "Session" Cookies. Persistent Cookies remain on Your personal computer or mobile device when You go offline, while Session Cookies are deleted as soon as You close Your web browser. We use both Session and Persistent Cookies for the purposes set out below:
-
Necessary / Essential Cookies
Type: Session Cookies
Administered by: Us
Purpose: These Cookies are essential to provide You with services available through the Website and to enable You to use some of its features. They help to authenticate users and prevent fraudulent use of user accounts. Without these Cookies, the services that You have asked for cannot be provided, and We only use these Cookies to provide You with those services.
-
Cookies Policy / Notice Acceptance Cookies
Type: Persistent Cookies
Administered by: Us
Purpose: These Cookies identify if users have accepted the use of cookies on the Website.
-
Functionality Cookies
Type: Persistent Cookies
Administered by: Us
Purpose: These Cookies allow us to remember choices You make when You use the Website, such as remembering your login details or language preference. The purpose of these Cookies is to provide You with a more personal experience and to avoid You having to re-enter your preferences every time You use the Website.
For more information about the cookies we use and your choices regarding cookies, please visit our Cookies Policy or the Cookies section of our Privacy Policy.
Use of Your Personal Data
The Company may use Personal Data for the following purposes:
-
To provide and maintain our Service, including to monitor the usage of our Service.
-
To manage Your Account: to manage Your registration as a user of the Service. The Personal Data You provide can give You access to different functionalities of the Service that are available to You as a registered user.
-
For the performance of a contract: the development, compliance and undertaking of the purchase contract for the products, items or services You have purchased or of any other contract with Us through the Service.
-
To contact You: To contact You by email, telephone calls, SMS, or other equivalent forms of electronic communication, such as a mobile application's push notifications regarding updates or informative communications related to the functionalities, products or contracted services, including the security updates, when necessary or reasonable for their implementation.
-
To provide You with news, special offers and general information about other goods, services and events which we offer that are similar to those that you have already purchased or enquired about unless You have opted not to receive such information.
-
To manage Your requests: To attend and manage Your requests to Us.
-
For business transfers: We may use Your information to evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of Our assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which Personal Data held by Us about our Service users is among the assets transferred.
-
For other purposes: We may use Your information for other purposes, such as data analysis, identifying usage trends, determining the effectiveness of our promotional campaigns and to evaluate and improve our Service, products, services, marketing and your experience.
We may share Your personal information in the following situations:
-
With Service Providers: We may share Your personal information with Service Providers to monitor and analyze the use of our Service, to contact You.
-
For business transfers: We may share or transfer Your personal information in connection with, or during negotiations of, any merger, sale of Company assets, financing, or acquisition of all or a portion of Our business to another company.
-
With Affiliates: We may share Your information with Our affiliates, in which case we will require those affiliates to honor this Privacy Policy. Affiliates include Our parent company and any other subsidiaries, joint venture partners or other companies that We control or that are under common control with Us.
-
With business partners: We may share Your information with Our business partners to offer You certain products, services or promotions.
-
With other users: when You share personal information or otherwise interact in the public areas with other users, such information may be viewed by all users and may be publicly distributed outside.
-
With Your consent: We may disclose Your personal information for any other purpose with Your consent.
-
All consents taken are retained for 45 days.
Retention of Your Personal Data
The Company will retain Your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use Your Personal Data to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies.
The Company will also retain Usage Data for internal analysis purposes. Usage Data is generally retained for a shorter period of time, except when this data is used to strengthen the security or to improve the functionality of Our Service, or We are legally obligated to retain this data for longer time periods. All consents taken in this respect are retained for 45 days.
Transfer of Your Personal Data
Your information, including Personal Data, is processed at the Company's operating offices and in any other places where the parties involved in the processing are located. It means that this information may be transferred to — and maintained on — computers located outside of Your state, province, country or other governmental jurisdiction where the data protection laws may differ than those from Your jurisdiction.
Your consent to this Privacy Policy followed by Your submission of such information represents Your agreement to that transfer. All consents taken are retained for 45 days.
The Company will take all steps reasonably necessary to ensure that Your data is treated securely and in accordance with this Privacy Policy and no transfer of Your Personal Data will take place to an organization or a country unless there are adequate controls in place including the security of Your data and other personal information.
Delete Your Personal Data
You have the right to delete or request that We assist in deleting the Personal Data that We have collected about You.
Our Service may give You the ability to delete certain information about You from within the Service.
You may update, amend, or delete Your information at any time by signing in to Your Account, if you have one, and visiting the account settings section that allows you to manage Your personal information. You may also contact Us to request access to, correct, or delete any personal information that You have provided to Us.
Please note, however, that We may need to retain certain information when we have a legal obligation or lawful basis to do so. All consents taken in this respect are retained for 45 days.
Disclosure of Your Personal Data
Business Transactions
If the Company is involved in a merger, acquisition or asset sale, Your Personal Data may be transferred. We will provide notice before Your Personal Data is transferred and becomes subject to a different Privacy Policy.
Law enforcement
Under certain circumstances, the Company may be required to disclose Your Personal Data if required to do so by law or in response to valid requests by public authorities (e.g. a court or a government agency).
Other legal requirements
The Company may disclose Your Personal Data in the good faith belief that such action is necessary to:
-
Comply with a legal obligation
-
Protect and defend the rights or property of the Company
-
Prevent or investigate possible wrongdoing in connection with the Service
-
Protect the personal safety of Users of the Service or the public
-
Protect against legal liability
Security of Your Personal Data
The security of Your Personal Data is important to Us, but remember that no method of transmission over the Internet, or method of electronic storage is 100% secure. While We strive to use commercially acceptable means to protect Your Personal Data, We cannot guarantee its absolute security.
Data Subject Rights:
As a user of WINDO, you are entitled to certain rights regarding your personal data:
-
Right to Access: You can request access to your personal data that we hold.
-
Right to Rectification: If your personal data is inaccurate or incomplete, you have the right to have it corrected.
-
Right to Erasure: Also known as the 'right to be forgotten', you may request the deletion of your personal data.
-
Right to Restrict Processing: You have the right to request a restriction on how we process your personal data.
-
Right to Data Portability: You can request a copy of your personal data in a structured, commonly used format.
-
Right to Object to Automated Decision-Making: You have the right to object to decisions based solely on automated processing.
Exercising Your Rights:
To exercise any of these rights, please contact us. Specify your request and provide any necessary identification. We will respond to your request within 30 days.
Children's Privacy
Our Service does not address anyone under the age of 13. We do not knowingly collect personally identifiable information from anyone under the age of 13. If You are a parent or guardian and You are aware that Your child has provided Us with Personal Data, please contact Us. If We become aware that We have collected Personal Data from anyone under the age of 13 without verification of parental consent, We take steps to remove that information from Our servers.
If We need to rely on consent as a legal basis for processing Your information and Your country requires consent from a parent, We may require Your parent's consent before We collect and use that information. All consents taken are retained for 45 days
Links to Other Websites
Our Service may contain links to other websites that are not operated by Us. If You click on a third party link, You will be directed to that third party's site. We strongly advise You to review the Privacy Policy of every site You visit.
We have no control over and assume no responsibility for the content, privacy policies or practices of any third party sites or services.