1. Introduction and Scope
Kommerce Hub, Inc. ("Kommerce Hub," "Kommerce Hub," "we," "us," or
"our") provides a business-to-business commerce and operations
platform to wholesale distributors, retailers, and similar
businesses. This Privacy Policy explains what information we
collect, how we use it, who we share it with, and the choices
available to you.
This Policy applies to:
-
The Kommerce Hub website at Kommerce Hub.biz and related pages
we operate.
-
The Kommerce Hub platform and its modules, accessed at
app.ikhub.biz and related applications.
-
All Kommerce Hub mobile applications, including the Kommerce Hub
Delivery Driver App, the fulfillment application, and the B2B
ordering application.
This Policy does not apply to the websites, storefronts, or
services operated by our business customers, or to third-party
products you may connect to the platform. Those parties have their
own privacy policies.
1.1 Our role: controller and processor
Our role depends on whose information is involved:
-
Where we collect information about our own business customers,
prospective customers, partners, and website visitors, we act as
a controller and decide how that information is used.
-
Where our business customers use the platform to run their
operations, we act as a processor on their behalf. The business
customer decides what information is entered and how it is used.
If you are an employee, driver, or customer of one of our
business customers and you have questions about your
information, contact that business first.
1.2 Acceptance
By using our website, the platform, or any Kommerce Hub mobile
application, you acknowledge that you have read this Privacy
Policy. If you do not agree with it, do not use our website,
platform, or applications.
If you are using the Kommerce Hub Delivery Driver App, please read
Section 5 in full before you install or use it. That section
explains that your location is collected while you are on shift,
including when the app is closed, and that your employer can see
it.
2. Summary of What We Do Not Collect or Store
Because we are frequently asked, this section states plainly what
Kommerce Hub does not hold. The rest of this Policy describes what
we do collect.
| We do not store |
What happens instead |
|
Payment card numbers, CVV, magnetic stripe or chip data
|
Card data is captured, tokenized, and processed by our
payment gateway and processor. We receive only a token and
non-sensitive reference information returned by the
processor. Card data does not reach or persist on Kommerce
Hub systems.
|
| Bank account numbers or routing numbers |
ACH and bank connectivity are handled by our payment and
data access partners. We hold only tokens or references
issued by those partners.
|
| Financial institution login credentials |
Where a business connects a bank account, authentication
happens with our data access partner or directly on the
bank's own website. We never receive, display, or store
those credentials.
|
|
Social Security numbers or government identification
numbers of individuals
|
We do not require or collect these to provide the
platform. Where a payment or banking partner must verify
an individual for regulatory reasons, that partner
collects it directly under its own terms.
|
| Consumer credit reports or consumer background data |
We do not obtain or hold these. |
|
Advertising identifiers used for cross-app or cross-site
behavioral advertising
|
We do not operate advertising networks in our applications
and do not build advertising profiles.
|
We do collect and process business information, business contact
information, transaction records, usage data, and, in the Delivery
Driver App only, device location. Some of this is personal
information under applicable law, and this Policy explains how we
handle it.
3.1 Business and account information (KYB)
When a business signs up for the platform, we collect information
needed to establish and verify the business relationship, commonly
called Know Your Business or KYB information. This may include the
legal business name, trade name, business address, business type
and structure, employer identification number, business licenses
and permits, ownership and control information required by our
payment partners, business bank relationship confirmation, and
store or warehouse details.
KYB information is business information, but it can include
information about identifiable individuals such as owners and
officers. Where it does, we treat it as personal information.
3.2 Contact and account credentials
We collect the names, business email addresses, business telephone
numbers, and job roles of the individuals who use the platform on
behalf of a business. We also hold user identifiers and
authentication material such as password hashes and multi-factor
authentication settings. We do not store passwords in readable
form.
3.3 Transaction and operational data
The platform holds the operational records our business customers
create, including product and inventory records, purchase orders,
sales orders, invoices, deliveries, pricing, tax records, and
their own customer and supplier records. This information belongs
to the business customer. We process it on their instructions to
provide the service.
3.4 Payment information
Payment card transactions are processed by our payment gateway and
processor, which capture and tokenize card data directly. We
receive a token and non-sensitive transaction references such as
amount, date, result, and card brand. We use these to display
transaction history, reconcile payments, and support disputes.
ACH transactions are originated through our ACH processing
partner. We do not store bank account or routing numbers.
3.5 Bank connectivity data
A business customer may choose to connect its business bank
account so that bank transaction information can be used in
financial reporting within the platform. This connection is
provided through a regulated data access platform.
-
We request transaction data only. Account authentication,
payment initiation, and identity products are not enabled on
this integration.
-
Login credentials are entered with the data access platform or
on the financial institution's own site. They are never
transmitted to or stored by us.
-
We hold only an opaque, revocable access token bound to a single
business customer.
-
This connection is optional and can be disconnected at any time
from within the platform. See Section 8.
3.6 Device, usage, and log information
When you use our website, platform, or applications, we
automatically collect technical information including IP address,
device identifiers, device model and operating system version,
browser type, application version, pages and features accessed,
dates and times of access, referring pages, and error and
diagnostic data. We use this to operate the service, diagnose
problems, protect against fraud and abuse, and improve the
product.
3.7 Location information
Precise device location is collected only by the Kommerce Hub
Delivery Driver App, and only in connection with delivery work.
Our website, the main platform, and our other applications do not
collect precise location.
Section 5 describes location collection in full.
3.8 Cookies and similar technologies
Our website uses cookies for functionality, for analytics that
help us understand how the site is used, and for measuring the
effectiveness of our own marketing. You can control cookies
through your browser settings. Disabling some cookies may affect
how parts of the site work.
Our mobile applications do not use cookies for advertising
purposes and do not include advertising software development kits.
3.9 Communications with us
We keep records of your correspondence with us, including support
tickets, emails, and call notes, so that we can respond to you and
improve our service.
We use the information described above to:
-
Provide, operate, maintain, and improve the platform and
applications.
-
Create and administer accounts, authenticate users, and control
access.
-
Verify businesses and satisfy our own and our partners'
regulatory and anti-fraud obligations.
-
Process orders, payments, deliveries, and related operational
workflows on behalf of business customers.
-
Provide delivery tracking, arrival estimates, and proof of
delivery, as described in Section 5.
-
Provide financial reporting features where a business has
connected a bank account.
- Provide customer support and respond to enquiries.
-
Send service and account communications, such as billing
notices, security notices, and material changes to the service.
You cannot opt out of these while you hold an active account.
-
Send marketing communications about our own products to
businesses and prospective businesses. You can opt out of these
at any time.
-
Detect, investigate, and prevent fraud, abuse, security
incidents, and violations of our terms.
- Comply with law and enforce our agreements.
We do not use your information to serve third-party advertising,
and we do not use it for cross-app or cross-site behavioral
advertising.
5. Delivery Driver Location Tracking
This section applies to the Kommerce Hub Delivery Driver App. If
you are a delivery driver, this section describes what the app
collects about you and who can see it.
5.1 What is collected
The Kommerce Hub Delivery Driver App collects precise device
location from the phone or tablet on which it is installed. This
applies whether the device is provided by the employer or
personally owned.
Location is collected:
- While the app is open and in use;
- While the app is running in the background; and
-
While the app is closed or not in use, where the device
operating system permits background collection.
Location is derived from GPS and, where available, mobile network,
Wi-Fi, and other device signals. We also record the time of each
reading, the accuracy of the reading, and the driver account and
device associated with it.
5.2 Why background collection is necessary
Delivery tracking is the core purpose of the app. A driver's
device is normally locked, in a mount, or being used for another
task while driving. Without background collection, delivery
tracking, stop confirmation, and arrival estimates would be
unreliable or would not work at all.
5.3 When location is collected
Location is collected while a driver is on an active shift or
assigned route in the app. When a driver ends a shift in the app,
location collection for delivery tracking stops.
The app is not designed or used to track drivers outside their
working hours and is only done once the “Start Route”
option is activated.
5.4 What location is used for
-
Showing a business owner or dispatcher where delivery vehicles
are during a route.
-
Confirming arrival at and departure from each delivery stop.
- Providing delivery status and estimated arrival times.
-
Creating a record of stop times and sequence for proof of
delivery and dispute resolution.
- Route planning, route verification, and dispatch.
-
Driver safety, including locating a driver who has not reported
in as expected.
5.5 Who can see a driver's location
Your employer can see your location.
The Kommerce Hub Delivery Driver App is provided to you by the
business that employs or engages you. That business, including its
owners, managers, and dispatchers, can view your current location
while you are on an active shift, your location history for
completed routes, and the times you arrived at and departed from
each stop.
Location data is also shared with:
-
Service providers who host, process, or support the platform on
our behalf, including cloud hosting, mapping, and notification
providers. They may use the data only to provide services to us.
-
The business's own customers, in limited form. Where the
business enables delivery status or arrival estimates, a
customer may see an approximate vehicle position or estimated
arrival time for their own order.
-
Authorities or other parties, where we are required to do so by
law or legal process, or to protect rights, safety, or property.
We do not sell location data. We do not share it with advertisers,
data brokers, or analytics companies for advertising purposes. We
do not use it to build advertising profiles.
5.6 How long location is kept
Location records are retained as per our retention policy, after
which they are deleted or aggregated so that they no longer
identify an individual driver's movements. Records may be kept
longer where necessary to resolve a delivery dispute, respond to a
legal claim, or comply with a legal obligation.
5.7 Driver choices
You control location permissions through your device settings and
may withdraw permission at any time. You may also uninstall the
app.
Because location is essential to the app's core function, delivery
tracking will not work without it, and your employer may be unable
to assign you routes through the app. Any consequence for your
employment or engagement is a matter between you and your
employer, not Kommerce Hub. If you have concerns about being
tracked, raise them with your employer.
5.8 If you were not told about this
Businesses that use the Delivery Driver App are required by our
terms to notify their drivers in writing before those drivers use
the app. If you are using the app and were not informed that your
location would be collected, contact your employer first. You may
also contact us at
privacy@Kommerce Hub.biz.
We share information in the following circumstances, and not
otherwise:
| Recipient |
What is shared and why |
| Our business customers |
Information created or collected through their use of the
platform, including driver location for their own drivers.
|
| Service providers and subprocessors |
Hosting, storage, monitoring, email delivery, mapping,
notification, and support services. They are contractually
restricted to using the information only to provide
services to us.
|
| Payment and financial partners |
Transaction information necessary to process payments,
originate ACH, prevent fraud, and meet regulatory
obligations.
|
| Applications a business chooses to connect |
Where a business installs or authorizes an integration,
the information that integration requests, with that
business's consent.
|
| Professional advisors |
Legal, accounting, and audit advisors under
confidentiality obligations.
|
| Authorities |
Where required by law, court order, or legal process, or
where necessary to protect rights, property, or safety.
|
| A successor entity |
In connection with a merger, acquisition, financing,
reorganization, or sale of assets. We will require the
recipient to honor this Policy or provide notice of any
change.
|
We do not sell personal information, and we do not share personal
information for cross-context behavioral advertising, as those
terms are defined under applicable United States state privacy
laws.
7. Responsibilities of Business Customers
If you are a business using the platform, you are responsible for
your own compliance obligations toward your employees, drivers,
and customers. By using the platform you represent and warrant
that you will:
-
Publish and follow a privacy policy that accurately describes
your own collection and use of personal information, and make it
available to your users and customers.
-
Obtain any consents required by law before entering personal
information into the platform.
-
Where you provide the Kommerce Hub Delivery Driver App to
drivers: notify every driver in writing, before they use the
app, that the app collects precise location including when the
app is running in the background or closed; that you will be
able to see their location and location history; and for what
purposes you will use it.
-
Obtain and retain a written acknowledgment or consent from each
driver where required by applicable law, and provide it to us on
reasonable request.
-
Notify drivers if you require the app to be installed on a
personal device, and comply with any law governing the tracking
of personal devices or personal vehicles.
-
Use location data only for legitimate business purposes
connected to delivery operations, and not to monitor drivers
outside working hours.
-
Comply with all laws governing employee monitoring, workplace
privacy, electronic tracking, and consent, which vary by state
and jurisdiction.
-
Respond to requests from your own employees and customers about
their information, and direct such requests to us where
appropriate.
Kommerce Hub provides the technology. You are responsible for how
you use it and for your relationship with your drivers, employees,
and customers.
8. Your Choices
8.1 Account information
Users of the platform can review and update their account and
contact information within the application. If you cannot access
or change your information, contact us.
8.2 Marketing communications
You can opt out of marketing communications using the unsubscribe
link in any marketing email, or by contacting
privacy@Kommerce Hub.biz.
Service and account communications will continue while you hold an
active account.
8.3 Location
Delivery drivers can control location permissions through device
settings, and can uninstall the app. See Section 5.7.
8.4 Bank connections
A business customer can disconnect a connected financial
institution at any time from within the platform, without
contacting support. On disconnection or revocation we stop
retrieving further data and delete the associated bank-derived
data, except where continued retention is necessary to deliver a
service the business has requested or to satisfy a legal
obligation.
8.5 Cookies
You can control cookies through your browser settings.
9. Data Retention
We retain information for as long as necessary to provide the
service, maintain business and accounting records, resolve
disputes, enforce our agreements, and meet legal and regulatory
obligations.
-
Account and business records are retained for the life of the
account and for a period afterward consistent with our legal and
tax obligations.
-
Transaction and operational records are retained under the
business customer's instructions and applicable record-keeping
requirements.
-
Driver location records are retained as described in Section
5.6.
-
Bank-derived data is retained only for as long as needed to
produce the reporting the business has requested, and is deleted
on revocation as described in Section 8.4.
-
Security, audit, and system logs are retained for a defined
period consistent with our security program.
On termination, we delete or return business customer data in
accordance with our Terms of Service and Data Processing Addendum.
10. Security
We maintain a documented and operational information security
program. Measures include encryption of data in transit and at
rest, role-based access control, multi-factor authentication on
administrative access, network segmentation, centralized logging
and monitoring, vulnerability scanning, encrypted backups,
peer-reviewed code changes, and controls that keep each business
customer's data separated from every other customer's data.
Card data is handled by payment partners that maintain current PCI
DSS validation. We do not store payment card numbers, bank account
numbers, or routing numbers.
A summary of our security controls is available in our Security
Overview, which we provide to customers and partners on request.
No method of transmission or storage is completely secure. While
we work to protect your information, we cannot guarantee absolute
security. You are responsible for keeping your account credentials
confidential and for promptly notifying us of any suspected
unauthorized use.
11. International Data Transfers
Kommerce Hub is based in the United States and processes
information in the United States. If you access the service from
outside the United States, your information will be transferred to
and processed in the United States.
Where we transfer personal data from the European Economic Area,
the United Kingdom, or Switzerland, we rely on the European
Commission's Standard Contractual Clauses, together with the
United Kingdom International Data Transfer Addendum where
applicable, and we require our subprocessors to provide equivalent
protection.
12. Your Privacy Rights
12.1 United States state privacy rights
Residents of California, Colorado, Connecticut, Delaware, Florida,
Indiana, Iowa, Montana, Oregon, Tennessee, Texas, Utah, Virginia,
and other states with comprehensive privacy laws may have rights
to:
-
Confirm whether we process their personal information and access
it.
- Correct inaccurate personal information.
- Request deletion of personal information.
- Obtain a portable copy of personal information.
-
Opt out of the sale of personal information, of sharing for
targeted or cross-context behavioral advertising, and of certain
profiling. As stated in Section 6, we do not sell or share
personal information for these purposes.
- Not be discriminated against for exercising these rights.
- Appeal a denied request.
12.2 Rights under the GDPR and UK GDPR
If you are in the European Economic Area or the United Kingdom,
you may have rights of access, rectification, erasure,
restriction, objection, portability, and withdrawal of consent,
and the right to lodge a complaint with a supervisory authority.
12.3 If you are an employee, driver, or customer of one of our
business customers
In these cases we act as a processor. Contact the business
directly. If you contact us, we will refer your request to that
business and assist them in responding.
12.4 How to exercise your rights
Submit a request to
privacy@Kommerce Hub.biz, or
write to Kommerce Hub, Inc., Attn: Privacy, 1202 Tech Blvd, Suite
201, Tampa, FL 33619. We may need to verify your identity, or the
authority of an agent acting for you, before we act. We will
respond within the period required by applicable law.
13. Children
Our website, platform, and applications are intended for business
use by adults. They are not directed to children, and we do not
knowingly collect personal information from children. If you
believe a child has provided us with personal information, contact
privacy@Kommerce Hub.biz and
we will delete it as required by law.
14. Do Not Track
Our website does not respond to browser Do Not Track signals,
because no common standard for interpreting them has been adopted.
We do not engage in cross-site behavioral advertising.
15. Changes to This Policy
We may update this Policy. Where changes are material, we will
notify account holders by email to the address on file or by a
notice within the platform, and update the Date of Last Revision
shown at the top of this Policy. Where required by law, we will
obtain consent before applying a material change.
If a change materially expands what the Delivery Driver App
collects, we will present an updated in-app disclosure and request
consent again before the change takes effect.
Kommerce Hub maintains a strict policy of confidence that
concerns your (you, your) personal information (Privacy Policy).
This privacy policy is developed to help you understand the
privacy options when accessing the Kommerce Hub website,
Kommerce Hub mobile app, and Kommerce Hub services.
This Privacy Policy does not apply to the websites or services
that are not under our name or control (services of platforms
owned by Kommerce Hub users). This Privacy Policy applies to the
collection, storage, usage, and disclosure of your personal
information by us for our products or services. This Privacy
Policy is a part of our Terms of Service. If you have any
questions, contact us at info@khub.biz.
Purpose of Privacy Policy
The purpose of this "Privacy Policy" is to inform users about
the Kommerce Hub Website and its data:
- Personal Data we collect.
- How we use the collected data.
- Who has access to the data collected.
- The right of Kommerce Hub users.
- Kommerce Hub Cookie Policy.
Terminologies to Understand
Here are some key terminologies you must know to understand our
Kommerce Hub Privacy Policy:
-
Account Information: Data related to
accessing and using a Kommerce Hub account, including store
details.
-
Browser Information: Data provided by web
browsers, such as IP addresses, visited websites, device
information, and cookies.
-
Contact Information: Basic personal and
business information, like names, email addresses, postal
addresses, phone numbers, and social media accounts.
-
Device Information: Data about your device,
such as the device ID, model, operating system version, and
geographical region.
-
Payment Information: Credit card or other
payment details.
-
Security Information: User ID, password,
password hints, and other security information for
authentication and account access.
-
Store Information: Details about your store,
its products, and its structure.
-
Transaction Information: Data related to
transactions on our platform, including product, order,
shipping, contact, and payment information.
-
Usage Information: Data collected when you
interact with our website, mobile app, or services, including
functionalities accessed, pages visited, and other interaction
data.
Consent
While purchasing the Kommerce Hub products or services via
website (www.Kommerce Hub.biz) or mobile app, you must accept
the terms of the Privacy Policy. In legal terms, providing
consent refers to that you have granted permission to process
your personal data. If you withdraw your consent, it will not
comply to processing that we may have completed before you
withdrew your consent by unlawful means.
Merchant
-
Merchants should help customers understand how their personal
data is collected and processed by Kommerce Hub and relevant
third parties. Merchants must:
-
Publish a privacy policy on their storefront that complies
with all applicable laws and regulations.
-
Process personal data according to applicable laws and obtain
informed consent from customers for the use and access of
their personal data by Kommerce Hub and other third parties.
-
If collecting sensitive personal data from customers, obtain
explicit and informed consent and allow customers to revoke
their consent at any time.
-
When merchants interact with our website or mobile app,
Kommerce Hub may collect and control various types of
information. We use this information to provide services,
confirm identities, offer support, advertise, bill, resolve
issues, and improve and personalize our services.
Partners
Partners When a partner signs up for an account or refers a
merchant to us, Kommerce Hub may collect and control various
types of information. We use this information to provide
services, confirm identities, offer support, advertise, bill,
resolve issues, and improve and personalize our services.
Customers
Customers When customers interact with a merchant's e-commerce
offerings through the Kommerce Hub platform, we may collect and
process browser and transaction information on behalf of the
merchant. We use this information to provide services to
merchants, support and process orders, and manage risk and
fraud. Merchants control this information, and customers with
questions should contact the merchant. We may also use certain
information to improve and personalize our services and manage
risk and fraud.
Who We Share Your Personal Information With
What Personal Information Do We Keep?
The personal information Kommerce Hub holds may include:
- Name, address, and contact details.
- Email address
- Business/company name
- Payment details
- Products or services purchased.
When you visit the website (Kommerce Hub.biz), we record information about your visit for statistical
purposes. The information we collect on a daily basis may
include:
- IP addresses
- Visited websites
- Device information
- Cookies.
- Date and time of your visit.
- The pages you accessed.
Where and How Do We Obtain Your Personal Information?
If it is reasonable and practical to do, we will collect your
personal data directly from you. This data may include contact
details and other relevant information to provide our services
or products. Legal Basis for Processing (EEA Residents) Lawful
Basis. We generally collect Personal Data from you only where we
need the Personal Data to perform a contract with you. The
processing is in our legitimate interests and not overridden by
your rights, or we have your consent to do so. In some cases, we
may also have a legal obligation to collect Personal Data from
you or may otherwise need the Personal Data to protect your
vital interests or those of another person.
-
Notice: If we ask you to provide Personal
Data to comply with a legal requirement or to perform a
contract with you, we will make this clear at the relevant
time and advise you whether the provision of your Personal
Data is mandatory or not, as well as of the possible
consequences if you do not provide your Personal Data.
-
Legitimate Interest: If we collect and use
your Personal Data in reliance on our legitimate interests (or
those of any third party), we will make clear to you at the
relevant time what those legitimate interests are. For
instance, we may rely on our legitimate interests when
responding to your queries, improving and personalizing our
platform, undertaking marketing, or for the purposes of
detecting or preventing illegal activities (e.g., checking
your identity, and fraud prevention).
-
Questions: If you have questions about or
need further information concerning the legal basis on which
we collect and use your Personal Data, please contact us using
the contact details provided below.
Cookies
Whenever you visit our site (Kommerce Hub.biz) the server may attach a "cookie" to your device's memory. A
"cookie" helps us to store information about how visitors use
the Kommerce Hub.biz and what
pages may have been of their most interest. This information can
be used to provide users of the computer with suggestions or
information that we think may be of interest.
However, the information related to cookies is not relevant to
your personal information and cannot be used to identify you. If
you prefer to disable this feature, you can access your device's
browser preferences and disable cookies. Here is the type of
cookies we use on our site:
-
Functional cookies: Used to remember the
selections you make on our Site so that your selections are
saved for your next visit
-
Analytical cookies: Allow us to improve the
design and functionality of our Site by collecting data on how
you access our Site, for example, data on the content you
access, how long you stay on our Site
-
Targeting cookies: Collect data on how you
use the Site and your preferences. This allows us to
personalize the information you see on our Site for you
-
Third-Party Cookies: These types of cookies
are created by a website other than ours. We may use
third-party cookies to achieve targeted communications.
- Google Chrome
- Apple Safari
- Mozilla Firefox
- Microsoft Edge
-
Other Resources: To learn more about cookies,
including how to manage and delete them, visit
allaboutcookies.org or aboutcookies.org
-
Reasons for Collection: We collect your
personal information only when:
Required to fulfill a
contract with you, it's in our legitimate interest without
infringing on your rights, or you've given us permission.
Sometimes, we may have a legal obligation to gather personal
information or need it to protect you or someone else.
How do We Use Your Personal Information?
Kommerce Hub uses personal information in accordance with the
USA Privacy Laws. The information that we collect from you will
be utilized for the primary purpose of ensuring the ongoing
provision of products and services. This can be achieved by
facilitating business functions such as providing products and
services, direct marketing, or subscription renewal reminders,
market research, invoicing, and customer service. We may use any
postal address, email address or other personal information you
provide to us at any time for this purpose.
Additionally, any Kommerce Hub correspondence will give you the
opportunity to "opt out" of receiving further marketing or
research correspondence. You agree and acknowledge that even if
you opt out of receiving marketing material, via the Unsubscribe
opt-out option, we will still send you essential information
that we are legally required to send you relating to the
products and services we provide. Once you opt out of receiving
marketing material from us, you agree and acknowledge that this
removal from our distribution lists may take several business
days after the date of your request to be removed.
Who Personal Information is Shared With
The personal information that we have either in hard copy or on
the computer database can only be accessed by employees of
Kommerce Hub or authorized personnel engaged for maintenance, IT
work or other necessary functions. All computers and databases
are equipped with password authorizations, held only by our
staff or designated personnel for the purpose of carrying out
functions as mentioned above. In accordance with this policy, we
may be required to disclose your personal information to:
Our contractors and service providers performing services
including (but not limited to) marketing, market research,
mail-house services and product development services
We take reasonable steps to ensure that these organizations are
bound by privacy obligations in relation to the protection of
your personal information.
In the event of a security incident involving unauthorized
access, use or disclosure of personal information where a third
party with whom we share personal information is involved, we
will seek to work cooperatively with them to protect the
personal information we have shared with them.
We will only collect, store, use or disclose personal
information as set out in this Privacy Policy unless we are
required by law to protect our rights or property (or those of
any third party), or to avoid injury to any person.
Communication
Promotional: We may send promotional
communications to existing and prospective Merchants, Partners,
and visitors, by email, phone, and other channels, such as
LinkedIn. For example, we may notify a Merchant when a
subscription is ending or invite the recipient to participate in
a survey. You can opt-out of receiving promotional
communications from us at any time. For information about
managing email subscriptions and promotional communications,
please go to our email preferences page.
Account: We send certain required
communications, such as account notices or information, to users
of our services. You may not opt out of receiving these
communications if you have an active storefront.
Information Sharing: Our services are possible
because of a variety of third parties and service providers.
Sometimes it is necessary to share Merchant, Partner, or Shopper
Personal Data with them to support our services. We may access,
transfer, disclose, and/or retain that Personal Data with
consent or in the following circumstances.
Compliance: If we have a good faith belief that
doing so is necessary to comply with applicable law or respond
to valid legal process, including from law enforcement or other
government agencies; or protect the rights or property of
Kommerce Hub, including enforcing the terms governing the use of
the services.
Protection: If we have a good faith belief that
doing so is necessary to protect Merchants, Partners, Shoppers,
or visitors; for example, to prevent spam or attempts to defraud
us or users of our services, or in response to threats of safety
of any person; or operate and maintain the security of our
products, including to prevent or stop an attack on our computer
systems or networks.
Affiliates: We share Personal Data among
Kommerce Hub-controlled affiliates and subsidiaries for the
purposes described in this Privacy Policy.
Service Providers: Kommerce Hub may use from
time to time a limited number of third-party service providers,
data processors, contractors, and other businesses to assist us
in providing our services for the purposes described in this
Privacy Policy.
SDKs and APIs: Kommerce Hub may include
third-party libraries such as Software Development Kits (SDKs)
or Application Interfaces (APIs) within our applications
(including the Mobile App) for the purposes described in this
Privacy Policy, including the following:
Functional SDKs: these are software libraries
we use to enhance the end user experience and functionality
within the application, such as graphics and display of images
within the app, and in-app notifications according to
preferences.
Analytics SDKs: these are external third-party
sub processors' libraries we use in collecting device and usage
data for application performance monitoring.
Payment Processing: We share payment data with
banks and other entities that process payment transactions or
provide other financial services, and for fraud prevention and
credit risk reduction.
Apps: Upon receiving a Merchant's consent to
install an application, we will share the Merchant's Contact
Information and other information requested by the app with the
app Partner.
Merger Sale: We may also disclose Personal Data
as part of a corporate transaction such as a merger or sale of
assets.
Automated Decision-Making: Some Personal Data
may be used in Automated Decision Making to help us screen
accounts for risk, fraud, or abuse concerns. You can object to
profiling, including profiling for marketing purposes, or
contest or dispute such decisions by contacting us here. Subject
to applicable law, we can provide you with details underlying
the automated decision-making review and rectification of any
inaccuracies.
Protecting and Keeping Your Information
Safeguarding Information: We use various
security measures, such as access controls, encryption, and
firewalls, to help protect your personal data from unauthorized
access, disclosure, changes, loss, or misuse. We are certified
at the highest level of compliance (PCI DSS Level 1) and undergo
yearly audits by independent third parties against the ISO 27001
security standard. However, no internet usage, data
transmission, or electronic storage method is entirely secure,
so we cannot guarantee the complete safety of personal data.
Your Responsibilities: While we work to protect
our website and services, it's your responsibility to secure
your passwords and account information. We cannot be held
responsible for protecting personal data shared with a
third-party authorized by your account connection.
Retention: We use and keep your personal data
as long as necessary for the purposes it was provided and other
purposes with your consent, such as improving user experience,
troubleshooting, optimization, personalization, and to comply
with legal, contractual, and regulatory obligations.
Ensuring Data Safety during Transfer
Data Transfer: Our services are available
worldwide. This may require transmitting personal data outside
the country, state, or province where it was received, including
to the United States. We strive to maintain appropriate data
protections by relying on legally or contractually adequate
mechanisms and obligating third parties to provide at least the
same level of data protection as required by applicable laws.
Privacy Shield: We adhere to the EU-U.S. and
Swiss-U.S. Privacy Shield Frameworks and comply with their
principles. To learn more about the Privacy Shield program and
our certification, visit the U.S. Department of Commerce site.
Standard Contractual Clauses: For data
transfers outside the EU/EEA, we use the Standard Contractual
Clauses adopted by the EU Commission and modified by the UK
International Data Transfer Addendum for data transfers outside
the UK.
Remedial Measures: If we learn that personal
data is not protected as per our contract or is processed beyond
your consent, we will take reasonable steps to protect your
information and/or stop its illegitimate processing.
Privacy Shield and US Data Privacy Framework
We comply with Privacy Shield Frameworks and their principles,
and we are committed to reviewing, verifying, and remedying any
issues concerning our compliance with these principles. For more
information on how to contact us or initiate a Privacy Shield
complaint for third-party dispute resolution, please refer to
previous section.
Your Rights
-
a) You may have certain rights over your personal data
according to applicable law. We strive to provide reasonable
steps for you to access, correct, erase, transfer, and
restrict or object to the use of your personal data.
-
b) Merchants, Partners, and Visitors can
update and control their personal data collected by us
directly within their accounts. If you're a Visitor or unable
to access or change your personal data, please contact
us.
-
c) Shoppers: We serve as a processor for
merchants, who act as controllers of your personal data.
Please contact merchants directly regarding your personal
data.
Exercising Your Rights
To exercise your rights or submit a request to delete your
personal data, please contact us at https://Kommerce Hub.biz/.
We may need to verify your identity to protect your personal
data.
Contact Information and Recourse: If you have inquiries or
complaints about our Privacy Policy or practices, please contact
us at info@khub.biz or
Please note that different locations may have specific privacy
laws to safeguard the rights of their residents. Our commitment
to data protection and transparency aligns with these laws,
which include:
- The General Data Protection Regulation EU (GDPR)
-
Brazil's Lei Geral de Proteção de Dados (LGPD)
- The California Consumer Privacy Act (CCPA)
- The Virginia Consumer Data Protection Act
- The Colorado Privacy Act
- The Connecticut Data Protection Act
- The Utah Consumer Privacy Act
- The Nevada Privacy Law
These laws grant individuals certain rights, such as:
- Access to their information
- Correction of inaccurate information
- Deletion of their information
-
Opting out of data selling or sharing for advertising purposes
- Control over the use of sensitive information
- Notification about data practices
- Restriction or objection to specific processing types
- Non-discrimination for exercising privacy rights
- Contacting our privacy team or external DPO
- Filing an appeal or complaint if requests are denied
To exercise your rights or request deletion of your personal
data, contact us at https://www.Kommerce Hub.biz/. We may need
to verify your identity or your authorized agent's identity to
protect your personal data. If you have any inquiries or
complaints about our privacy policy or practices, please contact
us at
info@khub.biz or: Kommerce Hub, Inc. 1202 Tech Blvd, Suite
201, Tampa, FL 33619
We will respond promptly and in accordance with applicable law.
You may also have the right to complain to supervisory or
regulatory authorities in certain jurisdictions. California
residents have specific rights under the CCPA. For more
information and to exercise your rights, refer to Section 15 and
use the form provided or contact us at info@khub.biz.
We do not knowingly collect personal data from children in a
manner not permitted by law. If you believe we have collected
your child's information inappropriately, please submit a data
subject request under or contact us at info@khub.biz.
We may update our Privacy Policy from time to time. We will
inform you of significant changes and obtain your consent when
required by applicable data protection laws. Check the "Date of
Last Revision" at the top of the Privacy Policy for the latest
update.
Identity Verification
We might need to confirm who you are when you make a request
involving your personal information. If someone is acting on
your behalf, we may ask for written permission from you and
verify their identity too. We can refuse requests as allowed by
law.
Addressing Complaints
If Kommerce Hub doesn't adequately address your concern, you can
file a complaint with relevant authorities like the UK
Information Commissioner's Office or the Irish Data Protection
Commissioner (or your local authority) in the EEA.
Third-Party Conflict Resolution
Kommerce Hub is registered with the Association of National
Advertisers (ANA) for independent dispute resolution at no cost
to you. For more information or to file a complaint, visit
https://thedma.org/resources/c... If unresolved, you can seek
binding arbitration through the Privacy Shield Panel.
Do Not Track Signals
Our website doesn't respond to "Do Not Track" signals, as
there's no universal understanding of their meaning.
Children's Privacy
Our services and website aren't designed for children or those
under the legal age. We don't knowingly collect children's
personal information in violation of the U.S. Children's Privacy
Protection Act (COPPA). If you think we have, contact us at
info@khub.biz, and we'll remove it as required by law.
Policy Updates
We may change our Privacy Policy as needed due to legal,
technical, or business developments. We'll notify you of
significant changes and get your consent for major updates if
required by data protection laws. Check the "Date of Last
Revision" at the top of the Privacy Policy to see when it was
last updated.