Privacy Policy

VERDLO ("we," "us," "our," or "Company") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and mobile application (the "Service").

Please read this Privacy Policy carefully. If you do not agree with our policies and practices, please do not use our Service. By accessing and using VERDLO, you acknowledge that you have read, understood, and agree to be bound by all the provisions of this Privacy Policy.

We reserve the right to make changes to this Privacy Policy at any time and for any reason. We will alert you about any changes by updating the "Last Updated" date of this Privacy Policy. Any changes or modifications will be effective immediately upon posting to the Service, and you waive the right to receive specific notice of each such change or modification.

We may collect information about you in a variety of ways. The information we may collect on the Site includes:

**Personal Data** Personally identifiable information, such as your name, shipping address, email address, and telephone number, and demographic information, such as your age, gender, hometown, and interests, that you voluntarily give to us when you register with the Site or when you choose to participate in various activities related to the Site.

**Financial and Payment Information** Financial information, such as funds associated with your account, transaction history, and other information you provide to process purchases or payments (handled securely through third-party payment processors).

**Data From Third Parties** We may also receive your information from other sources and combine that information with other information we collect about you. This includes information from: - Social media platforms (when you link accounts) - Third-party analytics providers - Marketing partners - Public databases - Credit bureaus (for seller verification)

**Automatically Collected Information** When you access the Service, your device automatically transmits information such as: - Browser type and version - Operating system - Internet Protocol (IP) address - Pages visited and time spent - Referral source - Device identifiers - Usage patterns and click behavior

Having accurate information about you permits us to provide you with a smooth, efficient, and customized experience. Specifically, we may use information collected about you via the Site to:

- **Create and Manage Your Account**: Register you as a user, process transactions, and send transaction confirmations - **Improve and Optimize Service**: Analyze usage patterns to enhance features, functionality, and user experience - **Personalization**: Tailor content, recommendations, and marketing messages to your interests - **Communication**: Send you marketing and promotional communications, customer service responses, and service updates - **Seller Verification**: Verify seller information, conduct background checks, and ensure marketplace integrity - **Sustainability Verification**: Assess and verify sustainability claims made by sellers - **Fraud Detection**: Monitor and prevent fraudulent activities, abuse, and unauthorized access - **Legal Compliance**: Meet legal and regulatory requirements in jurisdictions where we operate - **Customer Support**: Respond to inquiries, troubleshoot problems, and provide assistance - **Research and Analytics**: Conduct market research, surveys, and data analysis to improve our offerings - **Security**: Protect the security and integrity of our Service and user accounts

We may share your information in the following situations:

**By Law or to Protect Rights** If we believe the release of information is necessary to comply with the law; enforce our Site policies; or protect our or others' rights, property, or safety. This includes exchanging information with other companies and organizations for fraud protection and credit risk reduction.

**Third-Party Service Providers** We may share your information with third parties that perform services on our behalf, including: - Payment processors - Shipping and logistics providers - Cloud storage providers - Email marketing services - Analytics platforms - Customer support software

**Business Transfers** If VERDLO is involved in a merger, acquisition, bankruptcy, dissolution, reorganization, or similar transaction or proceeding, your information may be part of the transferred assets.

**Public Information for Sellers** If you are a seller on our platform, certain information (such as store name, ratings, verified status, and product listings) will be publicly visible to other users for trust and transparency purposes.

**Sustainability Verification Partners** We share relevant seller information with third-party sustainability verification organizations to validate environmental and social claims.

**Marketing Partners** With your consent, we may share your information with marketing partners to provide you with offers and promotions aligned with your interests.

**Aggregate Data** We may share anonymized, aggregated data about marketplace trends, user behavior, and sustainability impact with research institutions and the public.

We use administrative, technical, and physical security measures to protect your personal information. These include:

- **Encryption**: Data transmitted between your device and our servers is encrypted using SSL/TLS protocols - **Access Controls**: Restricted access to personal information limited to employees with a business need - **Secure Servers**: Information stored on secure, password-protected servers with restricted access - **Two-Factor Authentication**: Optional account security through multi-factor authentication - **Regular Audits**: Periodic security assessments and vulnerability testing - **Data Minimization**: We only collect and retain information necessary for specified purposes

However, no method of transmission over the Internet or method of electronic storage is completely secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security. If you have reason to believe that your account with us is no longer secure, please immediately notify us at security@verdlo.com.

We retain your personal information for as long as necessary to provide our services and fulfill the purposes outlined in this Privacy Policy. Retention periods vary depending on the type of information and its purpose:

- **Account Information**: Retained during your membership and for a reasonable period thereafter for record-keeping, dispute resolution, and legal compliance - **Transaction Records**: Maintained for a minimum of 7 years for tax and legal compliance purposes - **Communications**: Email and support communications retained for 2 years for customer service purposes - **Marketing Preferences**: Maintained until you request deletion - **Cookies and Tracking Data**: Generally retained for 12-24 months

You may request deletion of your personal information at any time, subject to legal and contractual obligations. We will honor deletion requests within 30 days, except where retention is required by law or necessary to fulfill service obligations.

Depending on your location, you may have the following rights regarding your personal information:

**GDPR Rights (EU/EEA Residents)** - Right to access your personal data - Right to correct inaccurate information - Right to erasure ("right to be forgotten") - Right to restrict processing - Right to data portability - Right to object to processing - Right to withdraw consent

**CCPA Rights (California Residents)** - Right to know what personal information is collected - Right to know whether personal information is sold or disclosed - Right to opt-out of the sale of personal information - Right to delete personal information - Right to non-discrimination for exercising CCPA rights

**Other Rights** - Right to lodge a complaint with a supervisory authority (for EU residents) - Right to request information about our data practices

To exercise any of these rights, please contact us at privacy@verdlo.com with the subject line "Privacy Request" and specify which right you wish to exercise. We will respond within 30 days or as otherwise required by applicable law.

We use cookies, web beacons, pixels, and similar tracking technologies to enhance your experience on our Service. These technologies help us:

- Remember your preferences and login information - Understand how you use our Service - Deliver personalized content and advertisements - Prevent fraud and enhance security - Analyze traffic and optimize performance

For detailed information about the cookies we use, please refer to our Cookie Policy. You can control cookie preferences through your browser settings, though some features may not function properly if cookies are disabled.

We do not respond to browser Do-Not-Track signals at this time, as the tracking industry has not developed uniform standards. However, you may disable cookies or opt-out of certain tracking through your device settings or third-party opt-out mechanisms.

The Service may contain links to third-party websites and applications that are not operated by VERDLO. This Privacy Policy applies only to information we collect through our Service and does not apply to third-party websites or applications.

We are not responsible for the privacy practices of third-party websites. We encourage you to review the privacy policies of any third-party websites before providing your information or engaging with their services. Your use of third-party websites is governed by their own terms and policies.

VERDLO is not intended for children under the age of 13 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal information, we will take steps to delete such information and terminate the child's account.

For users between 13 and 18 (or your local age of majority), we provide additional protections and restrict certain data uses. If you are a parent or guardian and believe your child has provided information to VERDLO, please contact us immediately at privacy@verdlo.com.

Your information may be transferred to, stored in, and processed in countries other than your country of residence. These countries may have data protection laws that differ from your home country.

When we transfer information internationally, we implement appropriate safeguards, including: - Standard contractual clauses approved by relevant authorities - Your explicit consent to the transfer - Adequacy decisions recognizing equivalent data protection - Binding corporate rules for international transfers

By using VERDLO, you consent to the transfer of your information to countries outside your country of residence, which may have different data protection rules.

If you have questions or concerns about this Privacy Policy or our privacy practices, please contact us:

**VERDLO, Inc.** Data Protection Officer: dpo@verdlo.com Privacy Team: privacy@verdlo.com Mailing Address: 123 Sustainable Street, San Francisco, CA 94105, USA Phone: +1 (415) 555-VERDLO

**For GDPR Requests (EU):** privacy-eu@verdlo.com

**For CCPA Requests (California):** privacy-ca@verdlo.com

We will respond to your inquiry within 30 days or as required by applicable law.