Introduction
We, CartJO for e-commerce solutions, CartJO for E-Commerce Technologies, a Jordanian company headquartered in Amman, Jordan ("We," "Us," "Our"), respect the privacy of all our users and are committed to protecting the Personal Data collected through the website www.cartjo.com, the websites of our affiliates, and the associated mobile application.
This Privacy Policy ("Privacy Policy") sets out the basis on which we collect and use your Personal Data, whether collected directly from you or through other sources, in connection with your access to and use of the Platform or any services we provide, including promotional messages and any social media functionalities (collectively, the "Services"). We understand the importance you place on your Personal Data and are committed to protecting and respecting your privacy.
Please read this Privacy Policy carefully to understand our practices regarding your Personal Data. By using the Platform and the Service, you agree to the collection and handling of your Personal Data in accordance with this Privacy Policy. For the purposes of this Privacy Policy, "Personal Data" means and includes the categories of data outlined in Clause 2 of this Privacy Policy.
References to the "User" or "You" (or similar) refer to you as an individual or legal entity, as the context may require.
The Platform may include links to third-party websites, plug-ins, and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements/notices. When you leave our Platform, we encourage you to read the privacy notice of every website you visit.
1. We Do Not Collect Data from Children
This Platform is not intended for any person who has not reached the age of majority as per the relevant applicable regulations. However, we cannot prevent certain users, including children, from fraudulently stating their age to gain access to the Platform. If you are a parent or guardian and believe that we may have collected information about your child, please contact us immediately as set out in Clause 11 of this Privacy Policy.
2. What Personal Data Do We Collect From and/or About You?
We collect your data to continuously provide and improve the Platform and Services. Personal Data refers to any information that can identify you as an individual based on identifiers. Personal Data does not include anonymized data—i.e., data from which individual identifiers have been removed. We collect, use, store, and transfer many types of Personal Data about you, which are categorized as follows:
- Identity Data includes details such as: your first name, middle name, last name, your username or similar identifiers, gender, title, nationality, and date of birth.
- Contact Data includes your address, email address, and telephone number.
- Transaction Data includes information about payments to and from you, including, without limitation, your payment methods, as well as details of the products and services you have purchased from us.
- Technical Data includes your Internet Protocol (IP) address, login data, browser type and version, operating system and mobile application version, time zone setting and location, device type, advertiser IDs (for iOS users), and information about your general internet usage (e.g., through technologies like cookies, pixel-based tracking, web beacons, and other technology used to store or gain access to information on your device or access our website).
- Profile Data includes your username and password, your interests, preferences, feedback, preferred language, and survey responses.
- Purchase Data includes all previous orders and purchases made from the same user account, refund information, fulfillment information, and page view information from service providers that enable commercial differentiation, fulfillment, and other operations on the Platform.
- Usage Data relates to how you interact with our website, products, and services.
- Marketing and Communications Data covers your preferences in receiving marketing materials from us and third parties and your communication preferences.
In addition, we collect, use, and share statistical or demographic information ("Aggregated Data"). Aggregated Data is extracted from your Personal Data but has been modified to remove identifiers and does not directly or indirectly reveal your identity. For example, we may aggregate Personal Data from the browser to determine the percentage of users accessing a specific feature on the website.
3. How Do We Collect Personal Data About You?
We use the following methods to obtain Personal Data about you:
- Directly: We collect your Personal Data directly from you through the Platform when you:
- Register on the Platform and through other shared registrations (e.g., social media logins) to subscribe to our services and post content on the Platform.
- Make payments, request refunds, and select a payment method.
- Participate in competitions, promotions, and subscribe to special schemes.
- Provide opinions, testimonials, or feedback.
- Submit support requests or complaints on the Platform, such as requests for refunds, addressing fraudulent transactions, and making replacements.
- Record communications if you contact us via your phone, email, or otherwise.
- Browse and perform other activities on the Platform.
- Indirectly: We also receive Personal Data about you from your friends/relatives when they make purchases for or on your behalf, and from our vendors/third-party service providers who enable you to seamlessly access our services. Our vendors include:
- Logistics, fulfillment service providers, and/or partners.
- Marketing service providers.
- Your interactions with us on other platforms such as: Facebook, Google, etc.
- Payment service providers.
- If you share any third-party Personal Data (i.e., friends, relatives, or colleagues) with us while using our services, you warrant that you have obtained the consent of the relevant individual to share their Personal Data with us as per this Privacy Policy.
- Automatically: Certain Personal Data about you is collected automatically as you use our services through logs, cookies, and other unique identifiers. Log information represents data about your use of the Services such as: IP address, browser type, referral/exit pages, operating system, timestamps, and related data stored in the logs.
- We also use a limited number of cookies. Cookies are small data files transferred to your computer (or other device) when you use it to access our services. Cookies are used for various purposes, including enabling specific features of our services, remembering your preferences, hardware, browsing actions, and patterns to better understand how you interact with our services, providing you with advertisements within and outside the services, monitoring usage by visitors, and directing internet traffic. To the extent permitted by your preferred web browser, you can instruct your browser by changing its options to stop accepting cookies or to prompt you before accepting any cookies from the services you visit online. We use cookie services to enrich your experience by remembering your online behavior while using the Platform and improving the efficiency of advertisements and services. If you do not agree to our use of cookies, we request that you stop using the Platform immediately.
- For more information about cookies and how they are used, please read our Cookie Notice.
It is up to you whether to provide specific Personal Data; however, this may affect your ability to benefit from many of our services.
4. For What Purpose Do We Collect Your Personal Data?
We collect and use your Personal Data for the following purposes:
- Providing you with information, products, or services that you request from us or that we feel may interest you, provided you have consented to be contacted for these purposes.
- Providing you with location-based services, such as: advertisements, search results, and other customized content.
- Performing our obligations arising from any contracts entered into between you and another entity using our Platform or between you and us.
- Improving our Services and delivering better and more customized services to you, including contacting you in relation to the Services via different channels (e.g., via phone, messages, email, instant messaging applications).
- Ensuring that content from our Platform is presented in the most effective manner for you and for the device you use to access our Platform.
- Providing you with uninterrupted services and offers on special occasions such as: your birthday and anniversaries.
- Informing you about changes to our Services.
- For any other reason we deem necessary to enhance your Platform experience.
- To manage and organize our incentive programs, fulfill your requests for incentives, and/or allow you to participate in prize draws and notify you if you win.
- To provide functionality, analyze performance, fix errors, and improve the usability and effectiveness of the Services.
- To comply with local regulations (e.g., your nationality and/or identity documents to fulfill your cross-border shipments, vendor information regarding the place of establishment, and bank account information for identity verification and other purposes).
- To avoid, detect, and prevent fraudulent operations and misuse to protect the security of our customers, our security, and the security of others.
5. How Do We Use Your Personal Data?
We will only use your Personal Data in the following circumstances:
- Contract Performance: We need to use your Personal Data to fulfill any contract we have with you or to take initial steps before entering into any contract. This includes accepting the applicable terms and conditions or specific terms related to our services. If you do not provide Personal Data for these purposes, we may not be able to provide our services or enter into any contract with you, which may lead to the cancellation of the service. We will inform you if this happens.
- Legal or Regulatory Obligation: We may collect your Personal Data to comply with any applicable regulations and/or laws.
- Legitimate Interests: We may process your Personal Data based on our legitimate business interests and the interests of our customers when we improve our services, when we detect and prevent fraud and misuse to protect the security of our customers or others, and when we provide you with interest-based advertisements.
- Marketing and Communications Data: We may also use your Personal Data to provide you with information about goods and services that may interest you, and to enhance your Platform experience through service messages, new features, enhancements, special offers, and events that are relevant to you. We may contact you via various channels, including—but not limited to—emails, push notifications, web notifications, posting, phone, in-app messages, WhatsApp messages, and news feed cards. You can opt out of receiving these advertisements by contacting us (details in Clause 11) and/or by clicking the "Unsubscribe" button in your email or in any marketing communications we send you.
6. With Whom Do We Share Your Personal Data?
Your Personal Data is important to us for providing our services, and we are not in the business of sharing your Personal Data with others for unrelated purposes. We only share your information with third parties as described below, and with companies that follow protective practices at least as stringent as those described in this Privacy Policy:
- Other Companies. We may deal with our affiliated companies and/or non-affiliated third-party service providers (such as: logistics companies hired to deliver products, marketing companies, payment processing companies, data analytics, and others), and share your Personal Data with these companies. We may also use other companies in your transactions, which may store your information in a digital wallet to make your use of our services more efficient.
- You understand that these companies need access to the relevant Personal Data to perform their functions. We will ensure that these companies do not use your Personal Data for other purposes. We may also receive Personal Data from these companies (such as updated delivery and address information) to correct our records and deliver your subsequent purchases. These companies will be contractually bound to respect the confidentiality of your Personal Data.
- Third Parties. We may share your Personal Data with any third parties for the purposes set out in Clause 5 above. However, we ensure that all companies follow protective practices at least as stringent as those described in this Privacy Policy. We do not allow our non-affiliated third-party service providers to use your Personal Data for their own purposes and only permit them to process your Personal Data for specified purposes in accordance with our instructions. You can ask us or third parties to stop sending you marketing communications at any time by selecting your marketing preferences on the Platform, by following the unsubscribe links, or by contacting us via legal@cartjo.com at any time.
- Use of Google reCAPTCHA: We use Google reCAPTCHA on our website to protect against spam and abuse and to ensure the security of our services. reCAPTCHA works by collecting hardware and software information, such as device and application data, and sending it to Google for analysis. The use of reCAPTCHA is subject to Google's Privacy Policy and Terms of Service.
- Contests and Promotions. You may be required to provide additional Personal Data to participate in some of our market research activities, including contests and promotions (such as additional Personal Data to determine your eligibility to win a prize). This Personal Data may be collected by us or by our participating sponsors or vendors for the purpose of the promotion.
- If you choose not to provide certain Personal Data, you may not be able to benefit from the contests and promotions. If you decide to participate, you should review the privacy policies of the third parties to understand how they use any Personal Data collected.
- Business Transfers. As our business evolves, we may engage in the purchase or sale of other businesses or services. In such transactions, customer Personal Data is typically included among the transferred assets but will remain protected under any existing privacy policy (unless the customer explicitly agrees otherwise). If we or a substantial part of our assets are acquired, customer Personal Data will be included as part of the transferred assets.
- Protection of the Platform and Others. We release user Personal Data when we believe that this release is appropriate to comply with the law, law enforcement investigations, and to protect our rights, the rights of our users, others, or their property or safety. This includes exchanging Personal Data with other companies and organizations for various reasons, such as: fraud protection and credit risk reduction.
7. How Do We Store Your Personal Data and For How Long?
The Personal Data we collect from you may be transferred to, stored, and processed by employees working for us or for one of our service providers. These employees may be engaged in, among other things, the fulfillment of your order, the processing of your payment details, and the provision of support services. We will store your information for as long as necessary to fulfill the purposes specified in this Privacy Policy or as permitted or required by law. To determine the appropriate retention period, we consider the amount, nature, and sensitivity of the Personal Data, the potential risk of harm from unauthorized use or disclosure, the purposes for which we process it and whether we can achieve those purposes through other means, and the applicable legal, regulatory, tax, accounting, or other requirements. In some circumstances, we may anonymize your Personal Data (so that it can no longer be associated with you) for research or statistical purposes, in which case we may use this information indefinitely without further notice to you.
8. What Security Measures Do We Implement?
We have designed our systems with your security and privacy in mind. We maintain commercially reasonable technical, administrative, and physical safeguards to ensure your Personal Data is treated securely and in accordance with this Privacy Policy and applicable laws, preventing unauthorized access, alteration, disclosure, or destruction. For example, we may use encryption technology to secure your Personal Data during transmission, in addition to external firewall and host firewall technology to prevent any network-level attacks. Access to this Personal Data is only permitted to authorized employees, contractors, and agents who need to know your Personal Data in connection with the performance of their services. We also follow the Payment Card Industry Data Security Standard when handling credit card data.
It is important for you to protect yourself against unauthorized access to your password and to the devices used to access our services. You are also responsible for maintaining the confidentiality of your password. (For example: make sure you log out when you finish using a shared device). Although we will do our best to protect your Personal Data, unfortunately, the transmission of information via the internet is not completely secure.
9. What Are Your Data Rights?
In certain circumstances, you have the following data rights:
- Right to Information about the Personal Data Collected from You: If you have any inquiries about how your Personal Data is collected and used, please contact us via: legal@cartjo.com. Many of our services also include settings that provide you with options about how your Personal Data is used.
- Right to Access Your Personal Data: You can access a wide range of information about your account and your interactions with the Platform for the purpose of viewing and updating your Personal Data in most cases. Examples of Personal Data you can easily access on the Platform include:
- Updated information regarding recent orders;
- Personally Identifiable Information (including name, email, password, date of birth, communications, and personalized advertising preferences);
- Payment settings (including credit card information);
- Email notification settings.
- For more information, please contact us via: legal@cartjo.com.
- Right to Request Access to Your Personal Data: In certain cases, you have the right to request access to your Personal Data that we hold in a clear and readable format if technically feasible. To make such a request, please contact us via: legal@cartjo.com.
- Right to Request the Destruction of Your Personal Data: You have the right to request the destruction and erasure of your Personal Data to the extent permitted by applicable law. To make such a request, please contact Customer Service. However, please be aware that we may not always be able to comply with your request for erasure for specific legal reasons, which we will notify you of.
- Withdrawal of Consent / Right to Object: You can withdraw consent for the marketing data you confirm at any time. You can unsubscribe from receiving future marketing communications from us at any time by adjusting your customer communications preferences, through the unsubscribe link in the emails. You may also disable cookies by changing the settings on your browser. If you disable cookies, it will affect our Platform, and you may not be able to access certain areas or all functions on the Platform.
- Right to Request Correction of Personal Data: You can request the modification and correction of your Personal Data at any time by contacting us via: legal@cartjo.com.
You will not be required to pay any fee to exercise your rights, unless otherwise stipulated by law. If you submit a request to exercise your rights, you will receive a response within the time limits stipulated in the applicable law.
10. How Do We Change Our Privacy Policy?
Since our business is constantly changing, our Privacy Policy may also need to change. However, we will notify you of any such changes by posting the updated version of the Privacy Policy on the Platform, and every change will become effective upon its posting or on the date we designate as the "Effective Date." We may send you periodic email reminders about our notices and terms, but you should check our Platform regularly for the latest changes. It is your obligation to review the Privacy Policy regularly. Your continued use of the Platform after any such change constitutes your agreement to this Privacy Policy as amended.
11. Contact Us
If you have any concerns or inquiries regarding your Personal Data on the Platform, please contact us by sending a detailed email to legal@cartjo.com or call us on CartJO's customer service number.