OrbitMarket

Last updated 9 July 2026

Privacy Policy

This page is maintained by OrbitMarket to answer common privacy and security questions about how personal data is handled on our global marketplace. It is written in plain language and reflects controls that are actually enabled in the product today. It is not an independent certification.

Data is encrypted

All traffic is served over HTTPS. Data at rest is encrypted by our infrastructure provider.

Access is scoped

Row-level security means each account can only read and write its own profile, addresses and orders.

You are in control

Export or erase your data anytime from your account.

Global by design

Rights are honored worldwide, including GDPR (EU/UK), India DPDP, CCPA/CPRA (California), LGPD (Brazil), PIPEDA (Canada) and POPIA (South Africa).

1. Who we are

OrbitMarket is a demonstration global marketplace operated by the app owner. If you have questions about your data, contact privacy@orbitmarket.example.

2. What we collect

  • Account data: email, full name, avatar (if you sign in with Google), phone, language and currency preferences.
  • Delivery data: shipping addresses you save and the country you deliver to.
  • Order data: cart contents, order codes, totals, and delivery status.
  • Consent records: which cookie categories you accepted, timestamp, and user agent, kept as a compliance audit trail.
  • Technical data: IP-derived approximate location and device information used only to run and secure the service.

3. Why we use it (legal bases)

  • To perform the contract when you place, deliver or track an order.
  • With your consent, for optional analytics and marketing communications.
  • For our legitimate interest in preventing fraud and keeping the service secure.
  • To comply with legal obligations (tax records, lawful requests).

4. Who processes it on our behalf

  • Lovable Cloud — authentication, database and file storage (EU/US regions available).
  • Google — optional sign-in with Google. Google shares only the fields you consent to (email, name, avatar).
  • Delivery partners — city-specific couriers receive only the address and phone needed to complete your order.
These processors are contractually bound to handle your data only for the purpose we specify.

5. International transfers

Data may be transferred between the regions we operate in. Where required, we rely on the European Commission's Standard Contractual Clauses, the UK IDTA, or equivalent instruments in India and other jurisdictions. Rural or low-bandwidth users are served from the nearest edge region we support.

6. Retention

  • Profile, addresses: kept while your account is active. Erased within 30 days of an account deletion request.
  • Order history: kept for up to 7 years where legally required for tax and consumer-protection records.
  • Consent logs: kept for at least 24 months as evidence of your choice.

7. Your rights

You may:
  • Access and download all data we hold about you.
  • Correct or update your profile at any time.
  • Erase your data, subject to legal retention obligations above.
  • Withdraw consent for optional cookies or marketing.
  • Object to processing or request restriction.
  • Lodge a complaint with your local data protection authority.
Most of these can be exercised directly from your account page.

8. Payments & consumer protection

Payments in this build are simulated for demonstration purposes. When live payments are enabled, card details are collected and processed exclusively by a PCI-DSS certified payment provider — OrbitMarket never sees or stores raw card numbers. Buyer protection covers refunds for undelivered or damaged orders in every country we ship to. Refund requests should be raised from the order screen within 14 days of delivery.

9. Cookies

We use strictly necessary cookies to keep you signed in and remember your language, currency and location. Optional analytics and marketing cookies are only set after you accept them in the consent banner. You can change your choice anytime by clearing the site data or re-visiting this page.

10. Children

OrbitMarket is not directed to children under 16. Where local law sets a higher age of consent (for example 18 in some Indian states), that higher age applies.

11. Contact & complaints

Data protection contact: privacy@orbitmarket.example

If we cannot resolve your concern, you may contact your local supervisory authority (for example the ICO in the UK, your EU Member State DPA, the Data Protection Board of India, or the California Privacy Protection Agency).