Privacy notice

Who is responsible?

OCS International, the business behind OpenCart Specialist, is responsible for the personal data we process for our own website, enquiries and customer relationships.

info@opencartspecialist.com
+48 510 462 044

This notice covers visitors to opencartspecialist.com, people contacting us or requesting a quote, newsletter subscribers and customers. If a project involves processing your store customers' data on your behalf, we document that processing separately in a data processing agreement where required.

What information do we use?

The information we process depends on what you do on the website and what we agree with you.

Contact, quotes or partnerships

Your name, email address, message and details you choose to provide, such as your company name, phone number, store URL, project requirements, budget, timing and attachments.

Accounts and orders

Your contact and billing details, business details if provided, account information, orders, available downloads, correspondence and order payment status.

Newsletter

Your email address, language, subscription and confirmation dates, confirmation status and the recorded version of your consent.

Website and security

Technical information available during a visit or security check, such as IP address, browser and device details, time, pages visited and session information.

Why do we use it, and on what basis?

• Answering your question or preparing a quote. We use relevant contact and project information to take steps at your request before entering into a contract. For general business correspondence, our legitimate interest is handling that contact properly.
• Fulfilling your order or project. We process information necessary for the contract, for example for delivery, invoicing, account access, support and communication.
• Administration and legal obligations. We must retain certain transaction and invoice information under the applicable accounting and tax laws.
• Sending the newsletter. We rely on your consent. Contacting us or requesting a quote does not itself subscribe you to the newsletter.
• Protecting the website. Our legitimate interest is preventing spam, fraud and misuse and keeping the website available. This includes considering your privacy interests.

Required fields are identified in each form. Without your email address, for example, we cannot reply by email. Without necessary order details, we cannot process an order. Optional project information is not compulsory.

What happens to your enquiry?

Your message is stored in the website system and forwarded to OCS through the configured email service. We use the information to assess your enquiry, stay in touch and prepare a possible project. An attachment to a quote request is stored as an upload and linked to your enquiry.

The forms use Cloudflare Turnstile to check submissions for misuse. Cloudflare may process technical information about your browser, device and connection for this purpose. See Cloudflare's privacy policy.

Newsletter and unsubscribing

After subscribing, you receive an email with a confirmation link. Your subscription is only confirmed when you use that link. The link is valid for two days. We record your consent and confirmation.

You can withdraw your consent at any time. Email info@opencartspecialist.com, or use the unsubscribe option if one is provided in the newsletter. Withdrawal does not affect the lawfulness of earlier processing based on your consent.

Who receives your information?

Information may be processed by parties needed to provide our services: hosting and email providers, technical service providers, our administration and the payment provider. We limit the information to what is needed for their role. Where a supplier processes personal data on our behalf, appropriate data processing arrangements are required.

Payments are handled through Mollie and your chosen payment method. Mollie processes payment and transaction information to handle payments and statutory checks and also has its own responsibilities. See Mollie's privacy statement. Only enter payment card details in the designated payment environment.

Cloudflare and Google may process information outside the European Economic Area. Such transfers require the applicable GDPR safeguards, such as a valid adequacy decision or standard contractual clauses with additional measures where needed. You can ask us which transfers and safeguards apply to your information. We may also disclose information when required by law.

Cookies, analytics and external content

The website uses functional cookies and session information, for example to operate your language preference, currency, cart and account and to secure forms. Blocking these may prevent parts of the website from working properly.

The website loads Google Analytics for visitor statistics. Technical information and information about your website use may therefore be received by Google. See Google's privacy policy. Cookies and similar technologies that require consent need your prior consent; publishing this privacy notice alone does not provide that consent.

You can remove or block stored cookies through your browser. This does not automatically erase information already processed. External content, such as a video or a website we link to, may involve its own data processing. The relevant provider explains that processing separately.

How long do we keep information?

We retain personal data no longer than needed for the purpose for which it was collected. The necessary period depends on the type of information:

• Enquiries, quotes and attachments: for the duration of the contact and assessment of a possible project. If you become a customer, relevant correspondence may become part of the project record. An ongoing dispute or a statutory limitation period may make longer retention necessary.
• Account, order and invoice information: for as long as needed for the customer relationship, delivery, support and applicable statutory accounting and retention obligations.
• Newsletter information: while your subscription is active. After unsubscribing, limited evidence of consent and withdrawal may still be needed to handle requests or complaints and prevent further messages.
• Technical and security information: for as long as needed to operate and secure the website and investigate incidents. Third-party services also have their own applicable retention periods.

Contact us if you want to know the retention period for your specific information or request its erasure. A request may be limited by an applicable legal retention obligation or the need to handle a legal claim.

Your privacy rights

Subject to the applicable legal conditions, you can ask us to:

• provide access to your personal data and explain how it is used;
• correct inaccurate or incomplete information;
• erase information or restrict its use;
• transfer information that qualifies for data portability;
• consider your objection to processing based on a legitimate interest.

You can withdraw consent at any time. You can always object to the use of your information for direct marketing.

Send your request to info@opencartspecialist.com. Explain your request and the email address you used to contact us. Do not immediately send a copy of your identity document. We may ask for additional, appropriate information to verify your identity.

We normally respond within one month. For complex or numerous requests, the GDPR may allow an extension of up to two additional months. If so, we inform you within the first month and explain why.

You may complain to the supervisory authority in the country where you live, work or where the alleged infringement occurred. In the Netherlands, this is the Autoriteit Persoonsgegevens. In Poland, you can contact the Urząd Ochrony Danych Osobowych (UODO).

Security and changes

Our measures include an encrypted HTTPS connection, form protection and access restrictions. No security measure provides an absolute guarantee. If you suspect misuse or a data breach, report it promptly to info@opencartspecialist.com and only include information needed to investigate your report.

For contact and quote requests, we make the substantive decision about a proposal or partnership ourselves. Spam checks may automatically block a submission.

This notice may change when our services or the rules change. The date of the published version appears at the top of the page.