Orderisle - Multi-Store WooCommerce Order Management Platform

1. Introduction

Orderisle ("we," "us," or "our") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you use our multi-store WooCommerce order management platform.

This policy complies with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

2. Data Controller Information

Data Controller: Orderisle

Email: hello@orderisle.com

Website: https://orderisle.com

Contact for Privacy Matters: hello@orderisle.com

3. Types of Personal Data We Collect

3.1 Account Information

Name and email address
Password (encrypted)
Company name and address
Phone number
Billing information

3.2 Store Data

WooCommerce store URLs and API keys
Order information and customer data
Product information and inventory data
Shipping and billing addresses
Transaction history

3.3 Usage Data

Login history and session data
Feature usage statistics
Page views and navigation patterns
Device and browser information
IP address and location data

3.4 Communications Data

Support tickets and correspondence
Marketing preferences
Newsletter subscriptions
Feedback and survey responses

4. Legal Basis for Processing

We process your personal data based on the following legal grounds:

Contractual Necessity: To provide our services and fulfill our contractual obligations
Legitimate Interest: To improve our services, prevent fraud, and ensure security
Legal Obligation: To comply with applicable laws and regulations
Consent: For marketing communications and non-essential cookies

5. How We Use Your Data

We use your personal data for the following purposes:

Provide and maintain our order management service
Process payments and manage subscriptions
Communicate with you about your account and service updates
Provide customer support and respond to inquiries
Analyze usage patterns to improve our services
Ensure security and prevent fraudulent activities
Send marketing communications (with consent)
Comply with legal obligations

6. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience. Please refer to our Cookie Policy for detailed information about:

Types of cookies we use
Purposes of cookie usage
Your cookie preferences and choices
How to manage cookies

7. Data Sharing and Third Parties

We may share your data with the following categories of third parties:

Payment Processors: To process subscription payments (Stripe, PayPal)
Hosting Providers: To store and serve our application
Analytics Services: To analyze service usage (Google Analytics)
Email Services: To send communications (SendGrid, Mailchimp)
Support Tools: To provide customer support

We ensure all third parties provide adequate data protection guarantees and process data only on our instructions.

8. International Data Transfers

Your data may be transferred to and processed in countries outside the European Economic Area (EEA). We ensure adequate protection through:

Standard Contractual Clauses (SCCs)
Adequacy decisions where applicable
Appropriate technical and organizational measures

9. Data Retention

We retain your personal data only as long as necessary for the purposes outlined in this policy:

Account Data: Retained while your account is active
Store Data: Retained as long as you use our service
Transaction Data: Retained for 7 years for legal compliance
Marketing Data: Retained until you withdraw consent
Support Tickets: Retained for 3 years

10. Your GDPR Rights

Under GDPR, you have the following rights:

10.1 Right to Access

You can request a copy of your personal data that we hold.

10.2 Right to Rectification

You can request correction of inaccurate or incomplete data.

10.3 Right to Erasure

You can request deletion of your personal data in certain circumstances.

10.4 Right to Restrict Processing

You can request limitation of how we process your data.

10.5 Right to Data Portability

You can request transfer of your data to another service provider.

10.6 Right to Object

You can object to processing based on legitimate interests.

10.7 Rights Related to Automated Decision Making

You have rights regarding automated profiling and decision making.

11. How to Exercise Your Rights

To exercise your GDPR rights, please contact us at:

Email: hello@orderisle.com

We will respond to your request within 30 days of receipt.

12. Data Security

We implement appropriate technical and organizational measures to protect your data:

256-bit SSL encryption for data transmission
Encrypted data storage
Regular security audits and penetration testing
Access controls and authentication systems
Employee training on data protection
Incident response procedures

13. Data Breach Notification

In the event of a personal data breach, we will notify affected individuals and relevant authorities within 72 hours of becoming aware of the breach, unless the breach is unlikely to result in a risk to your rights and freedoms.

14. Children's Privacy

Our service is not intended for children under 18 years of age. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child, we will take steps to delete it immediately.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via:

Email notification to registered users
Service notifications
Website announcements

16. Complaints and Regulatory Supervision

If you have concerns about how we process your personal data, please contact us first at hello@orderisle.com.

If you remain unsatisfied, you have the right to lodge a complaint with a supervisory authority in your country of residence.

17. Contact Information

If you have any questions about this Privacy Policy or our data practices, please contact us:

Email: hello@orderisle.com

Website: https://orderisle.com