Privacy Policy

1. Introduction

OrderForm.us ("OrderForm", "we", "us", or "our") is a service provider that enables merchants to create and manage online order forms for their customers. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.

Important: OrderForm is a service provider and platform operator. We are not the merchant or seller of the products or services you order through our platform. The actual transaction is between you and the merchant who uses our service. We facilitate the ordering process but are not a party to your purchase agreement.

2. Information We Collect

We collect information that you provide directly to us, including:

• Account information (name, email address, password)
• Order information (products ordered, quantities, delivery details)
• Payment information (processed through third-party payment processors)
• Communication preferences and customer service interactions

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Process and facilitate orders placed through our platform
• Communicate with you about orders and platform-related matters
• Detect, prevent, and address fraud or illegal activities
• Comply with legal obligations and lawful requests

4. Customer Access to Transaction Data

You have the right to access your transaction confirmation data. This includes order details, order numbers, and confirmation emails sent to you.

You may access this information through your account dashboard or by contacting the merchant directly. If you require assistance accessing your transaction data, you may contact OrderForm for support.

5. Data Retention and Account Deletion

When you request account deletion, we will remove your personal account information and your ability to access the platform. However, please note the following:

• Historical Transaction Records:
  OrderForm retains anonymized transaction records after account deletion. These records have all personally identifiable information removed or anonymized. Transaction details such as order amounts, dates, and line items may be preserved in anonymized form for legal, accounting, and fraud prevention purposes.

• Deletion Removes Access, Not Historical Evidence:
  Account deletion removes your access to the platform and personal account data but does not delete historical transaction evidence. This retention is necessary to maintain business records, comply with legal obligations, prevent fraud, and support dispute resolution.

• Merchant Records:
  Merchants using OrderForm maintain their own transaction records. Your relationship with the merchant and their data retention practices are governed by the merchant’s privacy policy, not this one.

6. Fraud Prevention and Legal Disclosure

We may retain, use, and disclose information (including after account deletion) when necessary for:

• Fraud Prevention:
  Retaining and analyzing transaction data to detect, prevent, and investigate fraudulent activity. This may include sharing information with payment processors, financial institutions, or law enforcement where fraud is suspected.

• Legal Compliance:
  Disclosure when required by law, regulation, court order, subpoena, or other legal process.

• Legal Claims:
  Retention and disclosure necessary to establish, exercise, or defend legal claims, including disputes, investigations, or litigation.

These uses are consistent with applicable data protection laws, including GDPR Article 6 (lawful basis for processing) and Article 17 (exceptions to the right to erasure).

7. GDPR Compliance

If you are located in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR), including:

• Right to Access: Request access to your personal data
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure: Request deletion of your data, subject to lawful exemptions
• Right to Restrict Processing: Request limitation of data processing
• Right to Data Portability: Request a portable copy of your data
• Right to Object: Object to certain processing activities

Our lawful bases for processing include:

• Contract Performance (Article 6(1)(b)) – Providing platform services
• Legal Obligation (Article 6(1)(c)) – Compliance with laws and regulations
• Legitimate Interests (Article 6(1)(f)) – Fraud prevention, security, and operations

Retention of anonymized transaction data after account deletion is justified under GDPR Article 17(3), including compliance with legal obligations and the establishment, exercise, or defense of legal claims.

8. Data Sharing

We may share information with:

• Merchants: Order information is shared with the merchant fulfilling your order
• Payment Processors: Payment information is processed by third-party processors in accordance with their privacy policies
• Service Providers: Hosting, analytics, and customer support providers
• Legal Authorities: When required to comply with law or protect rights and safety

9. Security

We implement appropriate technical and organizational measures to protect your information. However, no method of transmission or electronic storage is completely secure. While we strive to protect your data, we cannot guarantee absolute security.

10. Changes to This Policy

We may update this Privacy Policy periodically. Any material changes will be posted on this page and reflected by an updated “Last Updated” date. Continued use of the platform after changes constitutes acceptance of the revised policy.

11. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data protection rights, please contact us using the contact information provided on our website.