GDPR Policy

Our Commitment

SwiftyMart is committed to protecting your personal data and respecting your privacy. This GDPR Policy explains how we comply with the European Union General Data Protection Regulation (GDPR) and the rights it gives you over your personal data. It applies to anyone in the European Economic Area (EEA), the United Kingdom, and Switzerland who uses our marketplace.

Data Controller

SwiftyMart, operated by ShopWebCo, Inc., is the data controller responsible for your personal data. If you have any questions about this policy or how we handle your data, contact our data protection team at privacy@swiftymart.com.

What Data We Collect

• Account details such as your name, email address, and password.
• Order and payment information needed to process your purchases.
• Shipping and billing addresses.
• Usage data, including pages viewed and items added to your cart.
• Device and technical data such as IP address and browser type.

Legal Bases for Processing

We process your personal data only when we have a lawful basis to do so, including:

• Contract: to create your account and fulfill your orders.
• Consent: for marketing emails and non-essential cookies, which you can withdraw at any time.
• Legal obligation: to meet tax, accounting, and other legal requirements.
• Legitimate interests: to secure our platform, prevent fraud, and improve our services.

Your Rights Under GDPR

You have the right to:

• Access the personal data we hold about you.
• Rectify data that is inaccurate or incomplete.
• Erase your data ("right to be forgotten") where applicable.
• Restrict or object to certain processing.
• Data portability: receive your data in a portable, machine-readable format.
• Withdraw consent at any time, without affecting prior processing.
• Lodge a complaint with your local supervisory authority.

To exercise any of these rights, email privacy@swiftymart.com. We will respond within one month, as required by the GDPR.

Data Retention

We keep your personal data only for as long as necessary to provide our services and to meet legal, accounting, or reporting obligations. When data is no longer needed, we securely delete or anonymize it.

International Transfers

Where we transfer personal data outside the EEA, we use appropriate safeguards such as Standard Contractual Clauses to ensure your data receives an equivalent level of protection.

Data Security

We use technical and organizational measures, including encryption and access controls, to protect your personal data against unauthorized access, loss, or misuse.

Updates to This Policy

We may update this GDPR Policy from time to time. Any changes will be posted on this page with an updated revision date.

Contact Us

If you have questions about this GDPR Policy or your data-protection rights, contact us at privacy@swiftymart.com.