PRIVACY POLICY
1. INTRODUCTION
Winji respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our ecommerce platform service, accessible at https://www.winjicommerce.com/
This Privacy Policy applies to users in the United Kingdom, European Union, United States, Egypt, and Gulf Cooperation Council (GCC) countries.
Please read this Privacy Policy carefully. By using our Service, you agree to the collection and use of your information in accordance with this policy.
2. DATA CONTROLLER INFORMATION
Company Name: Winji
UK Registered Address:
128 City Road, London, United Kingdom, EC1V 2NX
Egypt Branch Address:
Mogawara 1, District 2, Legenda Village, Sheikh Zayed, Commercial Building 3
Email: support@winjicommerce.com
Payment Processor (Merchant of Record)
We use Paddle.com Market Ltd as our Merchant of Record for processing subscription payments.
Paddle Contact Information:
Company: Paddle.com Market Ltd
Address: 128 City Road, London, United Kingdom, EC1V 2NX
Privacy Policy: https://www.paddle.com/legal/privacy
3. INFORMATION WE COLLECT
We collect the following categories of personal information:
3.1 Account Information
Full name
Email address
Password (encrypted)
Business name
Business address
Phone number
3.2 Payment Information
Billing address
Payment method details (processed securely through Stripe and PayPal)
Transaction history
3.3 Store Data
Product information you upload
Customer data you collect through your store
Order history
Inventory data
3.4 Usage Information
IP address
Browser type and version
Operating system
Pages visited
Time and date of visits
Referring website addresses
3.5 Device Information
Device type
Unique device identifiers
Mobile network information
4. HOW WE USE YOUR INFORMATION
We use your personal information for the following purposes:
Purpose Legal Basis
Create and manage your account Contractual necessity
Process payments through Stripe and PayPal Contractual necessity
Provide customer support Legitimate interest
Improve our Service and user experience Legitimate interest
Send service updates and notifications Contractual necessity
Send marketing communications (you may opt out) Consent
Comply with legal obligations Legal obligation
Detect and prevent fraud Legitimate interest
5. HOW WE SHARE YOUR INFORMATION
We do not sell your personal information. We may share your information with the following categories of recipients:
Recipient Category Purpose Location
Paddle.com Market Ltd
Stripe Payment processing Global
PayPal Payment processing Global
Hosting Providers Service delivery and performance UK/EU
Analytics Providers Service improvement Global
Law Enforcement When required by law As applicable
Legal Advisors To protect our legal rights UK/Egypt
5.1 Paddle as Merchant of Record
We use Paddle.com Market Ltd as our Merchant of Record for subscription payments. When you subscribe to our Service:
Paddle processes all subscription payments
Paddle handles tax calculation and remittance (VAT, GST, sales tax)
Paddle manages fraud prevention and compliance
Paddle generates invoices on our behalf
Your payment information is shared with Paddle for these purposes
For more information about how Paddle handles your data, please review Paddle's Privacy Policy: https://www.paddle.com/legal/privacy
6. INTERNATIONAL DATA TRANSFERS
Since we operate in multiple countries, your information may be transferred to and processed in countries outside your country of residence, including:
United Kingdom
Egypt
European Union
United States
GCC countries
6.1 UK and EU Users
When we transfer your personal data outside the UK or EU, we implement appropriate safeguards, including:
Standard Contractual Clauses (SCCs) approved by the European Commission
UK International Data Transfer Agreement (IDTA)
Data Protection Impact Assessments (DPIAs) where required
6.2 Egypt Users
Cross-border data transfers comply with the Egyptian Personal Data Protection Law No. 151 of 2020 (PDPL). We obtain your consent before transferring your data outside Egypt, unless an exception applies.
6.3 GCC Users
Cross-border data transfers comply with applicable local data protection laws, including the UAE PDPL and KSA PDPL.
7. YOUR RIGHTS
Depending on your location, you may have the following rights regarding your personal information:
Right Description
Right to Access Request a copy of the personal data we hold about you
Right to Rectification Request correction of inaccurate or incomplete data
Right to Erasure Request deletion of your personal data ("Right to be Forgotten")
Right to Restriction Request restriction of processing your data
Right to Data Portability Request transfer of your data to another service
Right to Object Object to processing of your data
Right to Withdraw Consent Withdraw consent at any time (where consent is the legal basis)
Right to Lodge a Complaint Lodge a complaint with your local supervisory authority
7.1 How to Exercise Your Rights
To exercise any of these rights, contact us at:
📧 Email: support@winjicommerce.com
📍 Address: 128 City Road, London, United Kingdom, EC1V 2NX
We will respond to your request within 30 days as required by applicable law.
8. COUNTRY-SPECIFIC PROVISIONS
8.1 United Kingdom
If you are located in the United Kingdom:
We process your data in compliance with the UK GDPR and Data Protection Act 2018
Our UK Data Protection Officer can be contacted at support@winjicommerce.com
You have the right to lodge a complaint with the Information Commissioner's Office (ICO) at www.ico.org.uk
We have documented our lawful bases for processing as listed in Section 4
8.2 European Union (Italy)
If you are located in the European Union:
We process your data in compliance with the EU GDPR (Regulation EU 2016/679)
You have the right to lodge a complaint with your local Data Protection Authority
In Italy, you may contact the Garante per la Protezione dei Dati Personali
We have appointed a Data Protection Officer (DPO) who can be contacted at support@winjicommerce.com
8.3 United States
If you are located in the United States:
We comply with applicable state privacy laws, including:
California Consumer Privacy Act (CCPA/CPRA) – California residents have the right to know what personal information is collected, used, shared, or sold; the right to delete; and the right to opt out of sale or sharing (we do not sell your data)
Colorado Privacy Act (CPA)
Virginia Consumer Data Protection Act (VCDPA)
Connecticut Data Privacy Act (CTDPA)
We do not sell your personal information
We do not discriminate against you for exercising your privacy rights
California residents: we will not share your data for cross-context behavioral advertising without consent
For more information, contact us at support@winjicommerce.com
8.4 Egypt
If you are located in Egypt:
We comply with the Egyptian Personal Data Protection Law No. 151 of 2020 (PDPL)
Cross-border data transfers require your explicit consent or legal safeguards
You have the right to access, correct, and request deletion of your personal data
You may contact the Egyptian Data Protection Center at dataprotectioncenter.com
Sensitive data processing requires your explicit consent
8.5 Gulf Cooperation Council (GCC) Countries
If you are located in a GCC country:
We comply with applicable local data protection laws, including:
UAE Federal Decree-Law No. 45 of 2021 (UAE PDPL)
Kingdom of Saudi Arabia Personal Data Protection Law (KSA PDPL)
We obtain your consent before processing your personal data
Cross-border transfers of your data comply with local transfer regulations
You have the right to access, correct, and delete your personal data
You delete your account at any time by:
Accessing your account.
Navigating to Settings.
Selecting Delete Account and confirming your decision.
For sensitive data, we obtain explicit consent
Where required by law, we will notify the relevant authority of any data breaches
9. DATA RETENTION
We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law.
Data Type Retention Period
Account information Active account + 12 months after termination
Payment information 7 years (for tax and legal compliance)
Store data Active account + 30 days after termination
Usage data 12 months
Marketing data Until you opt out or unsubscribe
After the retention period, your data will be securely deleted or anonymized.
10. DATA SECURITY
We implement reasonable technical and organizational measures to protect your personal information from unauthorized access, loss, misuse, or disclosure, including:
Encryption: SSL/TLS encryption for all data in transit
Access Control: Strict access controls and authentication measures
Firewalls: Network firewalls to prevent unauthorized access
Data Anonymization: Where possible, we anonymize data for analysis
Secure Storage: Encrypted storage for sensitive data
Regular Audits: Periodic security assessments and vulnerability testing
Incident Response: A data breach response plan in place
However, please note that no security system is 100% secure. You are responsible for maintaining the confidentiality of your account credentials.
11. COOKIES AND TRACKING TECHNOLOGIES
We use cookies and similar tracking technologies to improve your experience on our Service.
11.1 Types of Cookies We Use
Cookie Type Purpose
Essential Cookies Required for basic functionality (login, cart)
Performance Cookies Track usage to improve our Service
Preference Cookies Remember your preferences and settings
Third-Party Cookies Used by Stripe, PayPal, and analytics providers
11.2 Managing Cookies
You can manage cookie preferences through your browser settings. However, disabling essential cookies may affect the functionality of our Service.
12. THIRD-PARTY LINKS
Our Service may contain links to third-party websites or services (including Stripe, PayPal, and social media platforms). We are not responsible for the privacy practices, content, or security of these third-party websites. We encourage you to review their privacy policies before providing any personal information.
13. CHILDREN'S PRIVACY
Our Service is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete that information promptly.
14. CHANGES TO THIS POLICY
We may update this Privacy Policy from time to time. We will notify you of any changes by:
Updating the "Last Updated" date at the top of this policy
Sending an email notification (for significant changes)
Posting a notice on our Service
We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.
15. COMPLAINTS
If you have concerns about our handling of your personal information, please contact us first:
📧 Email: support@winjicommerce.com
You also have the right to lodge a complaint with your local supervisory authority:
Country Supervisory Authority Website
UK Information Commissioner's Office (ICO) www.ico.org.uk
Europe (EU) European Data Protection Board (EDPB) www.edpb.europa.eu
Egypt Egyptian Data Protection Center dataprotectioncenter.com
UAE UAE Data Office uaedataoffice.gov.ae
16. CONTACT US
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
Winji
UK Address:
128 City Road, London, United Kingdom, EC1V 2NX
Egypt Address:
Mogawara 1, District 2, Legenda Village, Sheikh Zayed, Commercial Building 3
📧 Email: support@winjicommerce.com