VENDLOX PRIVACY POLICY

Effective Date: September 17, 2026

Last Updated: September 17, 2026

Welcome to Vendlox.

This Privacy Policy explains how Vendlox (“Vendlox,” “we,” “us,” or “our”) collects, uses, stores, shares, and protects personal information when you use our website, applications, e-commerce platform, online stores, merchant tools, APIs, and related services (collectively, the “Services”).

By using the Services, you acknowledge that you have read and understood this Privacy Policy.

This Privacy Policy applies to information processed by Vendlox in connection with your direct use of Vendlox.

If you purchase a product from or otherwise interact with a store operated by a Vendlox merchant, that merchant may separately determine how your personal information is collected and used. In those circumstances, the merchant's own privacy policy may also apply.

1. Who We Are

Vendlox is an e-commerce technology platform that enables businesses and individuals to create and operate online stores.

Vendlox is currently operated as a startup under the Vendlox name. Our legal entity and organizational details may be updated as the business is formally established.

For privacy-related questions, contact:

Vendlox

Website: https://vendlox.com

Email: support@vendlox.com

Where applicable, Vendlox may designate a specific privacy or data-protection contact for handling privacy requests.

2. Information We Collect

The information we collect depends on how you interact with Vendlox.

We may collect the following categories of information.

2.1 Account Information

When you create or manage a Vendlox account, we may collect:

name;
email address;
phone number where provided;
account credentials and authentication information;
account preferences;
profile information; and
information necessary to verify or secure your account.

We do not need your password for ordinary support requests, and we do not intentionally collect passwords through analytics or marketing systems.

2.2 Business and Store Information

If you create or operate a store, we may collect:

business name;
store name;
store description;
store domain;
business contact details;
products and product information;
inventory information;
prices;
images and other uploaded content;
store settings;
shipping configuration;
payment configuration;
tax configuration;
order information;
customer-management information;
staff and account permissions; and
other information necessary to provide store-management functionality.

2.3 Customer and Order Information

When customers interact with stores powered by Vendlox, the platform may process information associated with orders and customer accounts.

This may include:

customer name;
email address;
telephone number;
shipping address;
billing information;
order details;
products purchased;
transaction information;
delivery information;
customer account information; and
communications submitted to merchants.

The merchant operating the relevant store is generally responsible for determining the purposes for which customer information is collected and used in connection with its own business.

Vendlox processes such information as necessary to provide platform functionality, including storefronts, checkout, order management, customer management, communications, security, and support.

3. Payment Information

Vendlox may integrate with third-party payment providers.

Depending on the payment method and provider used, payment information may be processed directly by the applicable payment provider rather than stored by Vendlox.

Vendlox may receive information such as:

transaction amount;
currency;
transaction ID;
payment status;
payment method;
settlement information;
refund information; and
limited payment-related metadata.

We do not intend to collect or store full payment-card credentials through Google Analytics, marketing systems, or other analytics tools.

Third-party payment providers may process your payment information under their own privacy policies and terms.

4. Technical and Device Information

When you access Vendlox, we may automatically collect certain technical information, including:

IP address;
browser type;
device type;
operating system;
language preferences;
approximate geographic information;
referring URL;
pages or resources requested;
timestamps;
interaction information;
error and diagnostic information; and
security and service logs.

This information helps us operate, secure, troubleshoot, and improve the Services.

5. Cookies and Similar Technologies

Vendlox may use cookies, local storage, pixels, scripts, and similar technologies.

We may use these technologies for:

Essential functionality

To:

maintain sessions;
authenticate users;
protect accounts;
maintain shopping carts;
preserve preferences;
prevent fraud; and
provide core platform functionality.

Analytics

Vendlox uses analytics technologies to understand how visitors use the platform.

We currently use Google Analytics 4 (GA4) on applicable Vendlox marketing pages.

Google Analytics may collect information such as users, session statistics, approximate geographic location, browser/device information, and interaction events. Google Analytics uses identifiers such as the _ga first-party cookie to distinguish users and sessions where applicable.

Vendlox configures analytics events to avoid intentionally sending passwords, authentication tokens, payment credentials, and other sensitive personal information.

Managing cookies

You can control certain cookies through your browser settings and, where applicable, our consent controls.

Where applicable law requires consent for non-essential cookies or analytics technologies, Vendlox will seek consent before enabling those technologies. Google also provides consent mechanisms for Google tags and analytics where consent requirements apply.

6. How We Use Information

Vendlox may use information to:

create and manage accounts;
provide and operate the Services;
create and host online stores;
process and manage orders;
facilitate payment integrations;
provide customer support;
send transactional communications;
provide account and security notifications;
administer subscriptions;
process payments and billing;
prevent fraud and abuse;
protect platform security;
monitor and troubleshoot the Services;
understand platform usage;
analyze performance;
improve existing products and services;
develop new features;
administer domains and integrations;
communicate service updates;
comply with applicable legal obligations; and
enforce our Terms of Service and other policies.

We aim to collect and use information only for purposes that are relevant to the Services and consistent with applicable law.

These principles are consistent with modern data-protection requirements around purpose limitation, data minimization, transparency, accuracy, security, and accountability.

7. Legal Bases for Processing

Depending on the person, jurisdiction, and circumstances, Vendlox may rely on one or more lawful grounds for processing personal information.

These may include:

Contract

Processing necessary to provide the Services you request or to perform our agreement with you.

Legal obligations

Processing necessary to comply with applicable laws, regulations, legal proceedings, or lawful requests.

Legitimate interests

Processing necessary for purposes such as:

security;
fraud prevention;
service improvement;
platform administration;
business operations; and
protecting users and Vendlox.

Where we rely on legitimate interests, we consider the impact on individuals and applicable legal requirements.

Consent

Where consent is required, we may ask for your consent before processing information for that purpose.

You may withdraw consent where applicable. Withdrawal does not affect processing that occurred before withdrawal.

For users within the scope of laws such as the GDPR, privacy information should include the applicable legal basis and other processing information.

8. Merchant Data and Customer Data

Vendlox serves two different relationships:

Vendlox users

If you create a Vendlox account, Vendlox may determine the purposes and means of processing information necessary to provide your account and the Services, subject to applicable law.

Merchant customers

If you purchase from or interact with a merchant's Vendlox-powered store, the merchant may determine the purposes for which your information is collected and used.

For example, a merchant may use customer information to:

fulfill orders;
deliver products;
provide customer support;
process refunds;
send order communications; and
manage its customer relationship.

Vendlox may process that information on the merchant's behalf to provide the platform.

Merchants are responsible for providing their own privacy notices and meeting obligations that apply to their processing activities.

For business customers that require it, Vendlox may provide additional contractual data-processing terms.

9. Information We Share

We may share information with service providers and other parties when reasonably necessary to provide and protect the Services.

These may include categories such as:

Infrastructure and hosting providers

Used to host and operate the Vendlox platform, databases, applications, storage, and supporting infrastructure.

Payment providers

Used to process transactions, billing, subscriptions, refunds, and payment-related activities.

Email and communications providers

Used to send account, transactional, security, and other authorized communications.

SMS and messaging providers

Used where messaging services are enabled or requested.

Analytics providers

Used to understand platform usage and improve the Services.

Domain and infrastructure providers

Used for domain registration, DNS, CDN, networking, and related services.

Security and fraud-prevention providers

Used to protect Vendlox and its users from abuse, fraud, malicious activity, and security threats.

Professional advisers

We may share information with lawyers, accountants, auditors, insurers, and other professional advisers where reasonably necessary.

Government and legal authorities

We may disclose information where required by applicable law, court order, lawful request, or where reasonably necessary to protect rights, safety, security, or property.

10. Business Transfers

If Vendlox is involved in a merger, acquisition, financing, restructuring, sale of assets, bankruptcy, or similar transaction, information associated with the Services may be transferred as part of that transaction.

Where required, we will provide appropriate notice and protections.

11. International Data Processing

Vendlox and its service providers may process information in countries other than the country where you live.

Where information is transferred internationally, we seek to use appropriate safeguards required by applicable law.

Different service providers may operate infrastructure in different countries, so the actual location of processing may vary depending on the Service used.

For individuals within jurisdictions requiring specific international-transfer safeguards, such as the European Economic Area, applicable transfer mechanisms will be used where required.

12. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, unless a longer period is required or permitted by law.

Retention periods may depend on:

the nature of the information;
why we collected it;
whether your account remains active;
legal and regulatory requirements;
financial/accounting obligations;
security and fraud-prevention requirements;
dispute resolution; and
legitimate business needs.

When information is no longer required, we may delete, anonymize, or securely dispose of it.

Modern data-protection frameworks generally require personal information not to be retained longer than necessary for its stated purposes.

13. Data Security

Vendlox takes reasonable technical and organizational measures designed to protect information against:

unauthorized access;
unauthorized disclosure;
alteration;
loss;
misuse;
destruction; and
other inappropriate processing.

Security measures may include access controls, authentication, encryption where appropriate, monitoring, logging, infrastructure security, backups, and incident-response procedures.

However, no internet service or storage system can guarantee absolute security.

You are also responsible for maintaining the security of your account credentials, devices, domains, API keys, and connected services.

14. Data Breaches and Security Incidents

If Vendlox becomes aware of a security incident involving personal information, we may investigate, contain, remediate, and take other appropriate measures.

Where legally required, we will notify affected individuals, customers, regulators, or other relevant parties within the required timeframe.

15. Your Privacy Rights

Depending on your location and applicable law, you may have rights concerning your personal information.

These may include:

the right to know whether we process your information;
the right to access your information;
the right to correct inaccurate information;
the right to request deletion;
the right to object to certain processing;
the right to request restriction of processing;
the right to data portability;
the right to withdraw consent where processing is based on consent; and
rights concerning certain automated decisions or profiling where applicable.

The exact rights available to you depend on the law that applies to your situation.

For example, Ghana's Data Protection Commission describes rights including access and objection under the Data Protection Act 2012 (Act 843), while the GDPR provides a broader set of rights for individuals within its scope.

16. How to Make a Privacy Request

To submit a privacy request, contact:

support@vendlox.com

Please explain:

the nature of your request;
the account or service concerned; and
enough information for us to reasonably verify your identity.

We may request additional information where necessary to prevent unauthorized disclosure of personal information.

We will respond within the timeframe required by applicable law.

17. Marketing Communications

Vendlox may send communications necessary to operate the Services, including:

account notifications;
security notices;
payment notices;
service announcements;
transactional messages;
support communications; and
important legal notices.

Where we send optional marketing communications, you may unsubscribe using the available unsubscribe mechanism.

Unsubscribing from marketing communications will not necessarily stop essential service or security messages.

18. Children's Privacy

Vendlox is designed primarily for businesses, merchants, and individuals who are legally capable of entering into agreements.

We do not knowingly seek to collect personal information from children in circumstances where doing so is prohibited by applicable law.

If you believe that a child has provided personal information to Vendlox improperly, contact us so we can investigate and take appropriate action.

19. Third-Party Websites and Services

Vendlox may contain links or integrations to third-party websites and services.

Examples include payment providers, social platforms, analytics services, domain providers, and other integrations.

Third-party services operate under their own privacy policies.

Vendlox is not responsible for the privacy practices of independent third parties.

20. Merchant Responsibilities

Merchants using Vendlox are responsible for complying with privacy and data-protection obligations applicable to their own businesses.

Merchants may need to:

provide their own privacy notice;
obtain appropriate consent where required;
establish a lawful basis for processing customer information;
honor customer privacy requests;
protect customer information;
configure their store responsibly; and
comply with applicable laws and regulations.

Vendlox may provide technical tools, but using those tools does not by itself make a merchant compliant with privacy laws.

21. Analytics and Product Improvement

Vendlox may analyze aggregated or de-identified information about how users interact with the Services to:

identify technical problems;
understand feature usage;
measure performance;
improve user experience;
develop new features; and
improve platform reliability.

Where possible, analytics and product-improvement activities use information in a manner designed to reduce unnecessary identification of individuals.

22. Automated Decision-Making

Vendlox does not intend to make decisions producing legal or similarly significant effects about users solely through automated processing unless disclosed otherwise.

Certain automated systems may nevertheless be used for purposes such as:

fraud detection;
security;
abuse prevention;
spam prevention;
technical monitoring; and
service personalization.

Where applicable law provides rights concerning automated decision-making, those rights will apply.

23. Data Deletion

You may request deletion of personal information associated with your account where applicable.

Deletion may be subject to exceptions, including information that must be retained for:

legal compliance;
financial records;
fraud prevention;
security;
dispute resolution;
enforcement of agreements;
backup systems; or
other legitimate purposes permitted by law.

Deleting an account may also affect your store and access to Services.

24. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

When we make material changes, we may provide notice through the Services, by email, or through another reasonable method.

The Last Updated date at the beginning of this Privacy Policy indicates when the policy was most recently revised.

25. Contact Us

For privacy questions, concerns, or requests, contact:

Vendlox

Website:

https://vendlox.com

Privacy / Data Requests:

support@vendlox.com

We will make reasonable efforts to respond to privacy requests in accordance with applicable law.

Last Updated

September 17, 2026