Legal

Privacy Policy

Last updated: 17 June 2026

1. What We Collect

When you create an account, place an order, or submit a quote request, we collect:

◆Name, email address, and phone number
◆Shipping and billing address
◆Order history and procurement enquiry details
◆Account login credentials (passwords are stored as one-way hashes — we cannot see your password)

We never store card numbers or full payment credentials. All card payments are handled directly by Stripe and PayPal, who are PCI-DSS compliant. We only receive confirmation of payment status, not raw card data.

2. How We Use Your Information

◆To process and fulfil your orders
◆To send order confirmation and shipping update emails
◆To respond to procurement quote requests and negotiate sourcing agreements
◆To send WhatsApp order notifications if you chose WhatsApp as your payment/contact method
◆To maintain your account and order history
◆To comply with legal and tax obligations

3. Third Parties We Work With

◆Stripe — processes card payments securely. Their privacy policy governs the data they collect.
◆PayPal — processes PayPal payments. Their privacy policy governs the data they collect.
◆Cloudinary — hosts product images uploaded by our team. No customer personal data is sent to Cloudinary.
◆Supabase — our database provider. Your order data and account information is stored on Supabase-hosted infrastructure.
◆Vercel — our hosting provider. Serves the website and processes web requests. Server logs may contain IP addresses and request metadata.

We do not sell your data to any third party. We do not use your data for advertising.

4. Order Tracking and Privacy

Our order tracking system is designed with privacy in mind:

◆Anyone who knows your order number can see basic shipment status only (e.g. “Shipped”, “Delivered”).
◆To access full order details (items, address, amounts) via the tracking page without an account, you must verify your identity with a one-time code sent to the email or phone on the order.
◆Logged-in customers automatically see their own full order history without additional verification.

5. Cookies

We use session cookies for authentication only. These cookies keep you logged in between page loads and expire when your session ends or you log out. We do not use any third-party advertising cookies, tracking pixels, or analytics cookies.

6. Data Retention

We retain order records for accounting and legal compliance purposes for as long as required by applicable law (typically 7 years). You may request deletion of your account and personal profile data at any time; however, completed order records may be retained for legal compliance even after account deletion.

7. Your Rights

You have the right to:

◆Request a copy of the personal data we hold about you
◆Request correction of inaccurate data
◆Request deletion of your account and personal data
◆Object to or restrict how we process your data

To exercise any of these rights, email us at hello@jenggashopping.com. We will respond within 30 days.

8. Children's Privacy

This website is not directed at children under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has submitted personal data to us, please contact us so we can delete it.

9. Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted on this page with a revised “Last updated” date.

10. Contact

Privacy questions or data requests: hello@jenggashopping.com