Privacy Policy

1. Who We Are

Vendbear, a trading name of Do Make Limited — a company registered in England & Wales. Registered office address: The Hawk Creative Business Park Hawkhills, Easingwold, York, England, YO61 3FE

Contact email: support@vendbear.com

2. Information We Collect

Depending on how you use Vendbear, we may collect:

• Account and profile data (sellers): email, login credentials, display name, email addresses, and Stripe connection/account identifiers.
• Payment data: payment details are processed by third-party payment processors. We do not store card details.
• Email communications data: account emails, support communications, and related delivery status metadata.
• Waitlist data: name and email submitted through our waitlist form.
• Technical data: basic request and device/network information that is typically generated when using web services (for example logs from our hosting and infrastructure providers).

3. How We Use Information

• Provide, operate, and maintain the Services.
• Authenticate users and secure accounts.
• Create and manage storefronts, products, and account settings.
• Process subscription and account-related payments through Stripe.
• Send transactional emails (account, platform, and service notifications).
• Provide customer and technical support.
• Detect, prevent, and investigate abuse, fraud, and security incidents.
• Comply with legal obligations and enforce our terms.
• Send product communications.

4. Legal Bases (EEA/UK)

Where required, we rely on one or more of the following legal bases:

• Performance of a contract.
• Legitimate interests (for example security and service operation).
• Consent (for example optional waitlist communications).
• Compliance with legal obligations.

5. How We Share Information

We may share personal information with:

• Third-party service providers/processors that help us run Vendbear, such as providers for authentication, database, storage, payment processing, email delivery, and hosting infrastructure.
• Authorities or legal recipients when required by law or to protect rights, safety, and security.
• Business transferees as part of a merger, acquisition, reorganization, or asset sale.

6. Cookies and Similar Technologies

Vendbear uses essential technologies needed to run the Services, including:

• Authentication/session mechanisms from Supabase Auth.
• Security cookies for Stripe Connect OAuth state validation.
• Browser session storage used for temporary in-app state and performance.

7. Data Retention

We retain personal information for as long as necessary to provide the Services, maintain security and legal records, resolve disputes, and enforce agreements. Retention periods vary by data type, including:

• Account and storefront records while an account is active.
• Billing and payment reference records as needed for accounting, fraud prevention, and support.
• Transactional email records and delivery logs needed for reliability and audit.

8. Security

We use technical and organizational safeguards designed to protect personal information, including access controls, row-level database security, and transport encryption. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. International Transfers

We and our service providers may process data in countries other than your own. Where required, we use appropriate safeguards for cross-border transfers.

10. Your Privacy Rights

Depending on your location, you may have rights to access, correct, delete, restrict, object to, or port your personal information, and to withdraw consent where processing is based on consent.

To make a request, contact us at support@vendbear.com. We may need to verify your identity before fulfilling certain requests.

If your request relates to a separate buyer-facing transaction policy, please use the contact details provided in that buyer policy or the relevant seller policy.

11. U.S. State Privacy Disclosures

If you are a resident of certain U.S. states (such as California), you may have additional rights, including the right to know categories of personal information collected, deleted, disclosed, or shared; to request correction or deletion; and to non-discrimination for exercising privacy rights.

We do not sell personal information.

12. Children Privacy

Vendbear is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

13. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will post the updated version on this page and update the Last updated date.

14. Contact Us

If you have questions about this Privacy Policy or our privacy practices, you can contact us at support@vendbear.com