JustSell Security & Privacy

Why do we use it & how does it work?

We take your privacy and data security seriously and we do our best to provide an exceptional level of protection for our customers against online fraud and credit card theft. When you place an order with us online using a credit or debit card, your bank or financial institution may request that you enter your security credentials or provide a code via SMS (mobile number on file with your bank) to authorise the transaction. Once credentials have been validated by your bank, your order will be finalised with us.

What if my Credit or Debit card is NOT enrolled?

Most major banking and financial institutions automatically enrol their customers for 3D Secure services. However, if your card is not enrolled, this means that either the bank that issued the card is not yet supporting these services or it means that the card holder has not yet been registered for them. If you are not registered and your financial institution requests verification from you via our online stores, you may not be able to finalise your purchase with us. It is highly recommended, for a smooth, safe & secure shopping experience, that you register for these services if you discover that you are not registered. If you have any issues or problems with using Verified by Visa, MasterCard® SecureCode™ or American Express®, then you should contact your bank or financial institution.

Additional information about Payment Security

For further information about Verified by Visa, MasterCard® SecureCode™ or American Express®, these links will be useful:

• Verified by Visa — https://www.visa.co.uk/products/visa-secure.html
• MasterCard® SecureCode™ — https://mea.mastercard.com/en-region-mea/personal/safety-and-security/securecode.html
• American Express® — https://www.americanexpress.com/en-gb/merchant/payment-security.html

Information related to 3D Secure for the major banks can be searched online or by contacting your bank or card issuing authority.

How we get your information, what we do with it and why we have it

Most of the information we process is provided to us directly by you for one of the following reasons:

• If provided by a contact form on our websites to schedule a demo or have a product trial.
• If you provided your details by responding to Marketing, Promotions and Ads.
• We use your details either to reconnect you or for our newsletters to keep you updated, which you can opt-out of.
• We also receive information from the social media and paid ads platforms. This information was collected for remarketing and to follow up from your previous interests in our products and services.

We use the information that you have given us to:

• Schedule Demos for products and services you have expressed interest in.
• Provide support and services for products you already use.
• Offer products and services.
• Keep you updated of the latest news and marketing via Newsletters.

We use 3rd party marketing tools such as email campaign tools and social media marketing tools to contact and reach out to our prospects.

Under the General Data Protection Regulation (GDPR), the lawful bases we rely on for processing this information are:

You can remove your consent at any time. You can do this by contacting us on the contact details provided.

• We have a contractual obligation.
• We have a legal obligation.
• We have a vital interest.
• We have a legitimate interest to perform tasks and help you benefit from our products and services.

How we store your Information

Your information is securely stored in our ISO 27001 certified data centres or Cloud systems that comply with data safety standards. We do not save any of your data in physical or printed format. The Type of Information we collect, as mentioned above, is kept in our records for 2 years. We will then dispose of your information by removing any digital copies of the Type of Information we collected.

Your data protection rights

Under data protection law, you have rights including:

• Your right of access – You have the right to ask us for copies of your information.
• Your right to rectification – You have the right to ask us to rectify information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
• Your right to erasure – You have the right to ask us to erase your information in certain circumstances.
• Your right to restriction of processing – You have the right to ask us to restrict the processing of your information in certain circumstances.
• Your right to object to processing – You have the right to object to the processing of your information in certain circumstances.
• Your right to data portability – You have the right to ask that we transfer the information you gave us to another organisation, or to you, in certain circumstances.

You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you. Please contact us using our contact details with your information request.

Social Login & Meta User Data Deletion

If you access a JustSell service using Facebook Login or another Meta-connected service, you can request deletion of the personal data associated with that connection.

JustSell supports user data deletion requests in line with Meta platform requirements. Meta allows people to request deletion of app data connected to their Facebook account through their Facebook settings under Settings & Privacy > Settings > Apps and Websites. Meta's documentation also states that developers can provide a data deletion callback and/or a page with instructions for how users can request deletion of their data.

How to request deletion of your Meta-connected data

You can request deletion in either of the following ways:

• Through your Facebook account by going to Settings & Privacy > Settings > Apps and Websites, selecting the relevant JustSell-connected app, and submitting a data deletion request.
• By contacting JustSell directly using the contact details shown on this page and asking for deletion of data linked to your Meta-connected account. Please include enough detail for us to identify your account safely. The current JustSell page already provides the company contact details for privacy-related requests.

What happens after a request

Once we receive and verify a valid request, we will delete or anonymise the relevant Meta-connected personal data from our active systems where required by law and our retention obligations. Where some information must be retained for legal, security, fraud prevention, or contractual reasons, we will limit that data to what is strictly necessary. If needed, JustSell may provide confirmation that the request has been received and processed.

How to complain or to get in touch