Last updated: June 24, 2022.
This page addresses new data regulations that go into effect on May 25th 2018 and explains how API2Cart processes sensitive data to guarantee its customers greater security, transparency, and control over the personal data. Our company strives to provide API2Cart clients with a seamless experience and data security.
Glossary of technical terms here.
What is GDPR?
Quick Summary of the Updates
What Kind of Personal Data does API2Cart Collect with Your Consent?
How Long the Data is Being Saved
What are Cookies and What Data is Collected
Why does API2Cart Collect Personal Data?
Key Aspects on Personal Data Deletion
Submit a Request on Personal Data Collected any Time
1. What is GDPR?
1.1. The General Data Protection Regulation (GDPR) is a regulation within EU law that determines data protection and privacy protection of European Union citizens. GDPR directs the export of personal data outside the European Union as well. According to its terms, a person has to give freely given, specific, informed, and unambiguous consent for the information to be used by the company, otherwise using the personal data of a particular individual is considered illegal.
1.2. Because API2Cart deals with the personal data of EU citizens and since the proper treatment of personal data of all clients, regardless of their nationality, is the company’s primary goal, we have taken a set of measures to get compliant with EU data protection requirements and have made the treatment of personal data even more transparent.
2. Quick Summary of the Updates
2.1. API2Cart guarantees that every client or Site visitor has the right to:
Know what kind of information is collected by API2Cart and how it will be processed;
Inquire why and at what steps of cooperation the personal data is collected;
Agree or disagree on providing personal data during the very first interaction with the Site/Service;
Request correction, amendment or extraction of their personal data;
Ask to specify the ways the data provided is secured by API2Cart;
Withdraw the consent for personal data processing.
2.2. Thus, every client has the following rights due to GDPR: to be informed, to request access to, correct (rectify), amend, delete (erase), port to another service provider (if technically feasible), restrict data processing, or object to certain uses of their personal data.
2.3. API2Cart does not use your personal data for automated decision-making.
2.4. You may send a request relating to your personal data at email: email@example.com and the Data Protection Officer will process your request and send you the report on the actions undertaken.
2.5. Please note that if you send us a request relating to your personal data, we have to make sure that it is you before we can respond. In order to do so, we may ask to see documentation verifying your identity.
3. What Kind of Personal Data does API2Cart Collect with Your Consent?
When you visit API2Cart Site, our server records the information being sent from your browser:
Web request (e.g. date, time, etc.);
One or more cookies identifying the browser.
Once a person visits API2Cart official Site we send a notification informing what data is being collected and give an opportunity either to agree or disagree with data processing.
The data we receive at this stage are used to monitor and analyze Site visitor flow in Google Analytics.
3.2. For a person registering an account
When creating API2Cart account, you are asked to provide the following information:
Password for the API2Cart Account;
The data collected will be used by the Service to identify the user and guarantee the security.
3.3. For a person performing shopping cart integration
Depending on the type of cart, API2Cart might request the following information:
Stores’ API credentials;
Type of Shopping Platform;
FTP access (used only to set up Bridge).
At every step API2Cart guarantees data protection against unauthorized access to or unauthorized alteration, disclosure or destruction of personal data.
4. How Long the Data is Being Saved
4.1. We retain personal data that you provide us as long as we consider it potentially useful in contacting you about the Service.
4.2. If your Account is not active for a period of 90 days (no API calls, webhooks and log ins are made), we send you an email notification with information about the deletion and instructions on how to keep the Account active if desired.
5. Servers Location
6.1. A computer “cookie” (HTTP cookie, a web cookie, browser cookie or Internet cookie) is a packet of data that a computer receives and sends back without changing. Once you visit any website, it sends cookies to your computer and the data gets saved in a file located inside the web browser. Cookies include information that help any website keep track of the visits and users activities.
6.2. If you visit API2Cart official Site via our Service we collect the following data:
User agent (your browser) information;
Email and Account information;
All forms submitted on our Site.
6.3. How to control cookies?
If you would like to disable “third party” cookies you can turn them off by going to the third party’s website and getting them to generate a one time “no thanks” cookie that will stop any further cookies being written to your machine. We have no control over “third party” cookies. We suggest that you check the privacy policies (if any) of such third party websites for more information about their use of your information and/or how to opt out or delete such information.
6.4. We use the following types of cookies:
- Strictly necessary cookies.
These are cookies that are required for the operation of our Site to enable you to move around our Site and use its features. They include, for example, cookies that enable you to log into secure areas of our Site. Without these cookies our Site does not work properly.
- Analytical/performance cookies.
These cookies allow us to recognize and count the number of visitors and to see how visitors move around our Site when they are using it. This helps us to improve the way our Site works, for example, by ensuring that users are finding what they are looking for easily. We only use these cookies to improve how our Site works.
- Functionality cookies.
These are used to recognize you when you return to our Site and enable us to remember the choices you make when using our Site. This enables us to personalize our content for you, greet you by name and remember your preferences (for example, your choice of language or region).
7. Why does API2Cart Collect Personal Data?
7.1. GDPR introduces relevant terms to provide online users with greater security, transparency, and control of their personal data — a principle we couldn't agree more with. Therefore, API2Cart is GDPR-friendly company and has implemented all the necessary changes to the ways customers’ information is collected.
7.2. Here is why we collect customers personal data described in the previous section:
To track the Site traffic and analyze the customers flow to provide the most relevant materials for Site audience;
To perform accurate integration process;
To improve customer journey and usability of API2Cart Site.
8. Key Aspects on Personal Data Deletion
8.1. API2Cart customers can submit a request on personal data deletion any time and being on any step of the integration process (either after registering an Account, performing integration). At your consent, the personal data can be completely or partially deleted from the company’s database. Send an email to firstname.lastname@example.org and the Data Protection Officer will process your request and send you the report on the actions undertaken.
8.2. Note, that the process of data extraction is irreversible. Thus, after the request has been fulfilled we won’t be able to restore your Account.
9. Submit a Request on Personal Data Collected any Time
9.1. API2Cart customers have the right to submit any request on the personal data they submitted while interacting with the online shopping cart integration Service. Drop us a line and we’ll send you the report on your personal data that you’ve provided. Contact the Data Protection Officer at email@example.com and get all the necessary information.
10.1. We reserve the right to modify this GDPR Compliance at any time and at our own discretion.
10.2. If we decide to change our GDPR Compliance, we will post those changes on this page.
10.3. By using our Site and Services, you acknowledge and agree that it is your responsibility to review this GDPR Compliance periodically and become aware of the possible modifications.
11. More Questions?
11.1. API2Cart Support Managers will be happy to provide you with any assistance regarding your personal details or give you comprehensive answers on the way your data are treated by our system.