In specific circumstances we also rely on the lawful basis of consent (i.e. where you actively agree to a specific use of your personal data). We may also have a legitimate interest in disclosing your data in the context of the merger or acquisition of the company, or to process your data for use in legal proceedings, where such proceedings are ongoing or anticipated.

We collect both personal and anonymous information when you send us information or use one of our Services. Personal information is that which can personally identify you, such as name, email address, and unique device information. Anonymous data is that which cannot identify you and which is typically used in aggregate to better understand our customers

We may combine the information we collect through the Services with information we collect automatically or receive from other sources and use such combined information in accordance with this Policy. Your browsing activity may be tracked across different websites and different devices or apps. To do this our technology partners may disclose data, such as your browsing patterns, geo-location and device identifiers, and will match the information of the browser and devices that appear to be used by the same person.

Your personal information may be copied or transferred by us or our trusted third party service providers outside of the regions it was initially collected. In particular, your personal information may be transferred to other entities within our Group, to the extent such transfer is necessary for us to achieve the purpose for which you have initially provided your personal information to us.

In the event your personal information is subject to international transfers, we take steps to ensure that controls are in place to protect it, in accordance with the highest applicable data protection and privacy standards and legislation. This includes use of the EU/UK Standard Contractual Clauses, where applicable.

To know more about the specific cookies and similar technologies we use on our website, please see our Cookie Policy.

We and our service providers may collect information through the use of “cookies” and similar technologies, such as tracking pixels, to distinguish you from other users of our website, to help us improve your experience of our website and our services, to understand how you navigate through and interact with our services, to learn what content is popular, to enhance the services and provide you with a more relevant and personalised experience, for authentication and advertising purposes, to save your preferences, for fraud detection and security, and to collect certain usage and device information as described above. For detailed information regarding the Cookies we use and the purposes we use them for, please refer to our Cookies Policy. We may also collect this kind of information when you interact with email messages or other communications we send you. Cookies are small text files that web servers place on your device; they are designed to store basic information and to help websites and apps recognise your browser. We may use both session cookies and persistent cookies. A session cookie disappears after you close your browser. A persistent cookie remains after you close your browser and may be accessed every time you use our services. Tracking pixels (sometimes referred to as web beacons or clear GIFs) are tiny electronic tags with a unique identifier embedded in websites, online ads, and/or email; they are designed to collect usage information like ad impressions or clicks and email open rates, measure the popularity of our services and associated advertising, and access cookies. We and our vendors (e.g., Google Analytics) also use these technologies and the information collected by them for data analytics purposes. Please note that if you delete or choose not to accept cookies from us, you may miss out on certain features of our services.

We may allow third-party advertising technologies (e.g., ad networks and ad servers, and others) on our services that use cookies and similar technologies to deliver relevant and targeted advertising to you while you browse the internet. The ads may be based on various factors such as the content of the page you are visiting, information you provide, your searches, demographic data, and other information we collect about you. These ads may be based on your current activity or your activity over time and across other websites and online services and may be tailored to your interests.

We sometimes also associate cookies with de-identified data linked to or derived from data you have submitted to us (e.g., your email address) and disclose such information with to advertising partners and vendors in hashed, non-human-readable form to provide you with more relevant ads when you visit other websites and mobile applications.

The use of cookies or other tracking technologies that may be placed on devices you use to access our website by non-affiliated third parties is governed by the privacy policies of those third parties. If you are interested in more information about tailored browser advertising and how you can generally control cookies from being put on your devices to deliver tailored advertising, Network Advertising Initiative’s Consumer Opt-Out link or the Digital Advertising Alliance’s Consumer Opt-Out link to opt out of receiving tailored advertising from companies that participate in those programs. To opt out of Google Analytics for display advertising or customise Google display network ads, visit the Google Ads Settings page. 

For additional ways to opt out of targeted advertising activities under applicable law, see the “Your Rights and Choices” section below. 

Please note that these opt-outs apply per browser and per device, so you will have to opt out for each device—and each browser on each device—through which you access our Services. In addition, the opt-outs do not apply to advertisements in mobile applications. 

Notice Concerning Do Not Track. Do Not Track (“DNT”) is a privacy preference that is available in certain web browsers. We are committed to providing you with meaningful choices about the information collected on our website for third party purposes, which is why we describe a variety of opt-out mechanisms above. However, we do not currently recognise or respond to browser-initiated DNT signals. Learn more about Do Not Track. Please note that Do Not Track is a different privacy mechanism than the user “preference signal” referenced in the “Your Rights and Choices” section below, which is a browser-based control that indicates whether you would like to opt out of processing of your information for certain purposes, such as the “sale” of your information or the disclosure of your information for targeted advertising purposes, under applicable laws.

Automated Tracking and AI Detection
We use automated technologies, including AI-driven tools, to monitor and detect non-human traffic (such as bots, AI agents, and automated scripts) on our website. This tracking helps ensure security, prevent fraud, and improve website performance. We may collect and analyze data such as IP addresses, device attributes, browsing behavior, and interaction patterns to distinguish between human users and automated agents. In some cases, we use third-party services (e.g., bot detection tools) that may process this information. This data is handled in accordance with our privacy practices and applicable laws.

We have put in place appropriate security measures, including encryption, to reduce the risk of loss, misuse, unauthorised access, disclosure, or modification of your personal information. However, no method of transmission over the internet and no means of electronic or physical storage is absolutely secure.  In addition, we take steps to limit access to your personal information to those employees, agents, contractors and other third parties who have a business need to know. 

We have put in place procedures to deal with any suspected security breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

We and our service providers disclose the information we collect from and about you for the following business and operational purposes. We do not disclose or transfer your information to third parties for purposes other than the ones provided. We do not sell your information to any third parties.

Service Providers. We provide access to or disclose your information to third parties that perform services on our behalf, such as billing, payment processing, advertising, web and other analytics, data storage and processing, customer support, security, fraud prevention, and other services.

Affiliates. We provide access to or disclose your information to our affiliates for the purposes described in this Policy.

For Legal Reasons or the Protection of Us and Others. We will disclose the information we collect about you if required by law or legal process or if we believe in good faith that disclosure is reasonably necessary to: (i) enforce any applicable terms of use, this Policy, or other contracts with you, including investigation of potential violations thereof; (ii) respond to claims that any content violates the rights of third parties; and/or (iii) protect the rights, property or personal safety of Webkart, our customers, and/or others. This includes exchanging information with other companies and organisations for fraud protection, spam/malware prevention, and similar purposes.

Business Transfers. In the event of sale (of some or all of our assets), transfer, merger, reorganisation, dissolution, or similar event involving our business (including in contemplation of such transactions), your information may be among the transferred business assets. If such transfer is subject to any mandatory restrictions under applicable laws, we will comply with those restrictions.

Other Unaffiliated Third Parties. We may also disclose your information to other unaffiliated third parties such as the following:
Third party parties we collaborate with in connection with integration, 
Co-marketing and certain other coordinated efforts.

Your Consent. If you consent to our disclosure of your information, we will disclose your information consistent with your consent. 

Google user data. We limit our use of this data to providing or improving user-facing features. We will not use Google user data for the following reasons:

• Targeted advertising
• Selling to data brokers
• Providing to information resellers
• Determining credit-worthiness
• Lending purposes
• User advertisements
• Personalized advertisements
• Retargeted advertisements
• Interest-based advertisements
• Creating databases
• Training AI models

We will only retain your personal information for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements, and for other necessary purposes, like resolving disputes, enforcing our agreements, and for fraud prevention and related security purposes. We may retain your personal information for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation in respect to our relationship with you.

To determine the appropriate retention period for personal information, we consider the amount, nature and sensitivity of the personal information, the potential risk of harm from unauthorized use or disclosure of your personal information, the purposes for which we process your personal information and whether we can achieve those purposes through other means, and the applicable legal, regulatory, tax, accounting or other requirements. When the retention period expires for a given type of personal information, we will delete or destroy it.

If you opt out of email marketing, we maintain your email on our suppression list to comply with your request. We may delete or de-identify your information sooner if we receive a verifiable deletion request, subject to exemptions under applicable law. We may retain cached or archived copies of your information.

Depending on where you live, you may have the following rights and choices under data protection and privacy laws:

Rights regarding your information. Depending on your jurisdiction, you may have the right to make certain requests regarding your “personal information” or “personal data” (as such terms are defined under applicable law). Specifically, you may have the following rights: 

The right to be informed (right to know)

You have the right to be informed of how Webkart processes your personal data. This includes what categories of personal information we collect about you, the categories of sources of such information, for what purposes we collect it, how we are using and protecting it, and the categories of third parties to whom we disclose such information. Webkart ensures that you are provided with such information through this privacy policy as well as through specific information notices on our website. If you have any additional questions about how Webkart processes your personal information, please contact our DPO (see “Who we are”)

The right of access

This enables you to receive a copy of the personal information we hold about you and to check that we are lawfully processing it.

The right to rectification

This enables you to have any incomplete or inaccurate data we hold about you corrected, though we may need to verify the accuracy of the new data you provide to us.

The right to erasure (right to delete)

This enables you to request that we delete or remove personal information where there is no good reason for us to keep processing it. You also have the right to ask us to delete or remove your personal information where you have successfully exercised your right to object to processing (see below), where we may have processed your information unlawfully or where we are required to erase your personal information to comply with local law. Note, however, that we may not always be able to comply with your request of erasure for specific legal reasons which will be notified to you, if applicable, following the receipt of your request.

The right to opt out of “sales” and “sharing/use of your information for targeted advertising” (Please see below for a description of this right.) 

The right to restrict processing

This enables you to ask us to suspend the processing of your personal data in the following scenarios:

If you want us to establish the data’s accuracy,

Where our use of the data is unlawful but you do not want us to erase it,

Where you need us to hold the data even if we no longer require it as you need it to establish, exercise or defend legal claims,

You have objected to our use of your data but we need to verify whether we have overriding legitimate grounds to use it.

The right to data portability

We will provide to you, or a third party you have chosen, your personal information in a structured, commonly used, machine-readable format. Note that this right only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you.

The right to withdraw your consent at any time

Where we are relying on consent to process your personal information, you may withdraw your consent at any time and we will stop processing your personal information. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent. If you withdraw your consent, we may not be able to provide certain products or services to you. We will advise you if this is the case at the time you withdraw your consent.

Rights in relation to automated decision-making and profiling

You have the right not to be a subject of a decision based on automated processing.

Rights to non-discrimination

We are committed to ensuring that you will not be denied services, charged a different price, or provided a different level or quality of services just because you exercised your rights under applicable law. Please note, however, that we may need some personal information in order to provide you our services, which means that we may not be able to provide some of our services if you refuse to provide your personal information. 

We also need to take reasonable steps to verify your identity before responding to a request, which may include, at a minimum, depending on the sensitivity of the information you are requesting and the type of request you are making, verifying your name and email address.

Depending on your jurisdiction, you may be permitted to designate an authorised agent to submit certain requests on your behalf. In order for an authorised agent to be verified, you must provide the authorised agent with signed, written permission to make such requests or a power of attorney. We may also follow up with you to verify your identity before processing the authorised agent’s request. If you would like further information regarding your legal rights or would like to exercise any of them, please use this form for residents of the UK or EU GDPR, or use this form for residents of the US. Depending on applicable law, you may have the right to appeal our decision to deny your request, if applicable. If we deny your request, we will provide you with information on how to appeal the decision, if applicable, in our communications with you. 

Marketing Communications. You can unsubscribe from our marketing emails via the unsubscribe link provided in the emails or by emailing us at business@webkartmedia.com. Please note that it may take us some time, consistent with our legal obligations, to process your request. Even if you opt out from receiving marketing messages from us, you will continue to receive administrative messages from us, such as order confirmations, updates to our policies and practices, or other communications regarding our relationship or transactions with you.

Notice of Right to Opt Out of Sales of Personal Information and Processing/Sharing of Personal Information for Targeted Advertising Purposes. Depending on your jurisdiction, you may also have the right to opt out of “sales” of your personal information and “sharing/use of your personal information for targeted advertising.”

As discussed above, we provide personal information to third-party advertising providers for targeted advertising purposes, so that we can provide you with more relevant and tailored ads regarding our services, or use related advertising analytics partners to understand the effectiveness of our online ads. The disclosure of your personal information to these third parties to assist us in providing these services may be considered a “sale” of personal information or the processing/sharing of personal information for targeted advertising purposes under applicable law.

If you would like to opt out of our online disclosure such as through cookie and pixel technology of your personal information for purposes that could be considered “sales” for those third parties’ own commercial purposes, or “sharing” for purposes of targeted advertising, please use the “Do Not Sell or Share My Personal Information” link in our website footer, and follow the directions provided therein. You can also submit a request to opt out of our offline disclosures of information that are subject to applicable opt out rights by emailing us at business@webkartmedia.com. Depending on your jurisdiction, you may be permitted to designate an authorised agent to submit such requests on your behalf. Please note that we do not knowingly sell the personal information of minors under 16 years of age without legally-required affirmative authorisation.

Please note that if you have a legally-recognised browser-based opt out preference signal turned on via your device browser, we recognise such preference in accordance with applicable law. 

Our privacy policy does not apply if you follow a link from our site to another third-party website. We are not responsible for the handling of your personal information on any third-party websites, which will have their own privacy policies.

This section supplements our Policy with additional information for California residents about our information collection and use practices as required by the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (“CCPA”). In this section, the terms “personal information” and “sensitive personal information” have the meaning set forth in the CCPA.  

If you are a California resident and would like to request the exercise of your rights under the CCPA, use this form or email us at business@webkartmedia.com.

The following chart provides information about our practices in the 12 months leading up to the effective date of this Policy in relation to the categories of personal information that we collected from California residents generally– including the categories of sensitive personal information (precise location information and health information) – the purposes for which we use the information, and the categories of third parties to whom we disclose the information for business purposes.