Privacy Policy

1. Information We Collect

• Account information: name, email address, password (hashed), role (brand/retailer).
• Profile details: brand/store information, contact details, location, categories, website, social links, images you upload.
• Usage data: device/browser info, IP address, pages visited, actions (e.g., searches, clicks), approximate location derived from IP.
• Communications: messages sent via our contact forms or connection features, support requests.
• Third‑party data: if you sign in with Google, we receive your name and email from Google.

2. How We Use Information

• Provide, operate, and improve the Platform and core features (discovery, profiles, connections).
• Authenticate users and secure accounts (including fraud and abuse prevention).
• Personalise content and recommendations relevant to your role and interests.
• Communicate service updates, transactional emails (e.g., confirmations, password resets).
• Analyse Platform performance and usage to enhance reliability and user experience.

3. Legal Basis

Where applicable (e.g., POPIA/GDPR), we process data based on:

• Contract: to provide the Platform you sign up for.
• Legitimate interests: to secure and improve our services.
• Consent: for optional features (e.g., marketing communications).
• Legal obligations: to comply with applicable laws.

4. Sharing & Processors

We do not sell personal information. We use reputable processors to run the Platform:

• Supabase (authentication, database, storage).
• Vercel (hosting and deployment).
• Resend (transactional email delivery).
• Google (optional OAuth sign‑in).

Processors only access data as needed to provide their services to us and under data protection terms.

5. Cookies & Tracking

We use essential cookies for authentication and security. We may also use analytics or preference cookies to improve the Platform. You can control cookies in your browser settings; disabling some cookies may affect functionality (e.g., staying signed in).

6. Data Retention

We retain personal information only as long as necessary for the purposes described above, to comply with legal obligations, resolve disputes, and enforce agreements. You may request deletion (see Your Rights).

7. Security

We implement technical and organisational measures appropriate to the risk, including encryption in transit, access controls, and monitoring. No system is 100% secure; please use strong, unique passwords and keep your credentials confidential.

8. International Transfers

Our processors may process data in various jurisdictions. Where required, we rely on appropriate safeguards (e.g., standard contractual clauses) to protect your information.

9. Your Rights

Subject to applicable law, you may have the right to:

• Access the personal information we hold about you.
• Request correction or deletion of your information.
• Object to or restrict certain processing.
• Withdraw consent where processing is based on consent.
• Port your data in a structured, commonly used format.

To exercise rights, contact us at info@stokmark.co.za.

10. Children

The Platform is intended for business use by adults. We do not knowingly collect personal information from children under 16. If you believe a child has provided us information, please contact us to request deletion.

11. Changes to this Policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and update the "Last updated" date above. Material changes may be communicated via the Platform or email.

12. Contact Us

Questions or requests? Email info@stokmark.co.za.