Legal

Privacy Policy

1. Introduction

This policy explains how personal data is collected, used, stored, shared and protected when using the Trollyo platform or its services. It applies, depending on context, to merchants and their representatives, employees and account users, to consumers who deal with the stores, and to website visitors.

Trollyo may act as the controller of some of the data it collects directly to provide the service and manage accounts, security, billing and marketing, and may process other data on behalf of the Merchant and on its instructions, in particular its customers' data The data we may collect
It may include
- Account and merchant data
- Account users' data
- Consumer data entered by the Merchant
- Order and shipping data
- Usage, technical and log data
- Analytics and cookie data
- Support and correspondence data
- And any other data necessary for a new service, disclosed where applicable.

Providing the services and managing accounts and stores; operating orders and integrations; technical support; improving and developing the platform; reports and analytics; security and fraud prevention; regulatory compliance; operational notifications; and marketing in accordance with the applicable controls.

Processing is carried out according to its purpose and on an appropriate legal basis, which may include performance of the contract, legal obligation, legitimate interests where the law permits, and consent when required.

Trollyo may process the data of the stores' consumers. The Merchant remains responsible for the processing purposes specific to its store, and for the privacy notices, policies and consents required by law, while Trollyo processes the data necessary to provide the service within the limits of the agreement and the instructions.

The Merchant's data may be shared with hosting, analytics, support, messaging, security, payment and shipping providers and others to the extent necessary.
Trollyo may disclose data to governmental, judicial or regulatory authorities when required or permitted by law.

Trollyo does not settle the Merchant's funds. Payment data may be processed by the payment provider the Merchant chooses, and the processing is subject to the payment provider's terms and privacy policy.

Trollyo currently hosts data within the Kingdom of Saudi Arabia. If operations in the future require transferring personal data outside the Kingdom, this will be done in accordance with the regulatory requirements and the controls relating to the transfer of data outside the Kingdom.

Trollyo retains data for the period necessary for the purposes for which it was collected, or for regulatory or contractual requirements or the protection of rights. Detailed retention schedules are set according to the type of data and service.

Trollyo takes appropriate technical and organizational measures to protect data from loss and from unauthorized access, use, modification and disclosure, in proportion to the nature of the data and the risks. Absolute electronic security cannot be guaranteed.

Trollyo respects the rights established by law, which may include the right to be informed, access, obtaining a copy, correction or updating, destruction or deletion in the cases provided by law, and the rights relating to consent and processing. Rights requests are sent to info@trollyo.com

Trollyo may use artificial intelligence services in the future. When launched, the Terms, the Privacy Policy or the service-specific terms, as the case may be, will set out the data used, the purposes, the service providers and any additional processing. The launch of AI does not grant a general authorization to process data outside the purposes and applicable laws.