Privacy Policy
Effective Date
This Privacy Policy is effective and last updated as of December 04, 2023. To see the prior version, click here.
This Privacy Policy (“Privacy Policy”) applies to Cart2Cart developed by MagneticOne. Cart2Cart is committed to ensuring that your privacy is protected. We recognize the importance of protecting all the information provided by Cart2Cart users, newsletter subscribers, and all Cart2Cart customers. All our customers and users are encouraged to read this Privacy Policy prior to submitting any personal information or using the Website in any other manner.
This Privacy Policy is an integral part of the Terms of Service of Cart2Cart. The GDPR Compliance and the Security Policy are the integral parts of this Privacy Policy.
By using the Website and/or the Service, you irrevocably agree to this Privacy Policy. If you do not agree to this Privacy Policy, you may not use the Website or the Service.
Our Website is not intended for children and you must be an adult to use the Website.
- Information Collection and Usage
- Information Security
- Information Sharing
- Data Integrity
- Retention of Personal Data
- How to Withdraw Your Consent
- Enforcement
- Communication
- GDPR Compliance
- Notification of Changes
- Servers Location
- Privacy notice for Residents of California, Virginia, Colorado, Connecticut and Utah.
- Sub-processors
- How to Contact Us
1. Information Collection and Usage
1.1. When signing up for the Cart2Cart account (“Account”), you are asked to provide the following information:
- name;
- e-mail address;
- password;
- phone number.
The data collected will be used by the Service to identify the user and guarantee the security of the eCommerce information they transfer while performing either Demo or Full migration.
1.2. When you visit Cart2Cart website (“Website”), our server records the information sent from your browser:
- web request (e.g. date, time, etc.);
- IP address;
- browser type;
- browser language;
- one or more cookies identifying your browser.
Once you visit the Website we send a cookie banner informing you how we use cookies and give you an opportunity either to accept all cookies or read more about cookies. The data we receive at this stage are used to monitor and analyze Website visitor flow in Google Analytics.
1.3. When migrating the shopping cart, you are asked to upload the bridge file to provide Cart2Cart access to your store. You may also be asked to provide your direct database connection to speed up the process. This information is only used to fulfill your specific request unless you give us permission to use it in another manner.
1.4. We may use the information we collect about you (including personal information) for a variety of purposes, including: 1) enable you to access and use our Service; 2) provide, operate, maintain and improve our Service; 3) send transactional messages, including responses to your inquiries and questions; 4) provide customer service and support; 5) send you technical notices, updates, security alerts.
1.5. The information you provide is secured by GDPR and a person visiting a Website, registering an Account or performing Demo/Full migration should give Cart2Cart permission to collect, store and process their personal data. Any time a client can:
- Inquire what type of information MagneticOne collects and how it will use it.
- Request to correct, amend or delete personal information.
- Withdraw the consent for personal data processing.
2. Information Security
2.1. We take appropriate security measures to protect against unauthorized access to or unauthorized alteration, disclosure, or destruction of data. These include internal reviews of our data collection, storage, and processing practices and security measures, as well as physical security measures to guard against unauthorized access to systems where we store personal data. More details regarding security measures can be found in the Cart2Cart Security Policy.
2.2. We restrict access to personal information to Cart2Cart employees, contractors, and agents who need to know that information in order to operate, develop or improve our Services. These individuals are bound by confidentiality obligations and may be subject to disciplinary action, including termination and criminal prosecution, if they fail to meet these obligations.
We use 256-bit TLS encryption and create daily backups.
2.4. Cart2Cart script transfers data from your eCommerce platform directly to another eCommerce platform, chosen by you. You have the right to choose what type of data to migrate from your eCommerce platform to the other eCommerce platform. You may choose to migrate only the product's data without customer's data migration.
2.5. We never disclose any personal data to third parties without your prior written permission, unless otherwise requested by law, or agreed between the parties, or needed for the Services provision.
3. Information Sharing
3.1. We do not share, sell or rent any kind of personal information provided by our users, customers, or Website visitors to third-parties. We ensure the confidentiality of your private data.
3.2. Certain pieces of aggregated, non-personal information, which does not identify your personality, may be shared with third-parties to optimize Cart2Cart Service. This may include the number of users that migrated to a particular shopping cart, the number of clicks on a certain ad, etc.
4. Data Integrity
4.1. Cart2Cart processes personal information for the specific purposes it was collected for and in accordance with this Privacy Policy or any applicable service-specific privacy statement. Data collection, storage, and processing practices are constantly analyzed to ensure proper information adherence.
4.2. All the procedures involving your store information are performed on highly secured servers. Only authorized staff has access to monitoring the migration process.
4.3. We take reasonable steps to ensure that the personal information we process is accurate, complete, and current. We count on our users to update or correct their personal information whenever necessary.
5. Retention of Personal Data
5.1. We retain personal data that you provide us as long as we consider it potentially useful in contacting you about the Service. If you wish to inquire about your personal data that may have been collected by Cart2Cart, contact us by emailing to [email protected] or [email protected].
6. How to Withdraw Your Consent
6.1. At any time, you may withdraw consent you have provided to Cart2Cart for processing of your personal data.
6.2. You may withdraw your consent by submitting a request to [email protected] or [email protected], and following the instructions in our communication to you.
6.3. Please note that your withdrawal of consent to process certain personal data about you may limit our ability to deliver Services to you.
7. Enforcement
7.1. Cart2Cart ensures constant compliance with this Privacy Policy. Please address your questions or concerns about this Privacy Policy to [email protected].
7.2. As soon as any written complaint is received, Cart2Cart takes the responsibility to contact the complaining user with the necessary solutions.
7.3. We will cooperate with the appropriate regulatory authorities to resolve any complaints regarding the transfer of personal data that cannot be resolved between Cart2Cart and an individual.
8. Communication
8.1. Through contact forms or similar submissions available on the Website, users can submit any type of information to Cart2Cart. It will never be made public or accessible to third-parties. Requests for Service, support, or additional information may be forwarded as needed to the appropriate departments in the company. These kinds of notifications are retained for internal administrative purposes and are not disclosed to outside sources.
8.2. Data collection forms include a consent confirmation checkbox. With your explicit consent, we may use contact information you provide for the following purposes: 1) send follow-up emails from the Cart2Cart team to see if we can help you further with shopping cart migration; 2) send special offers we think you'll find valuable; 3) contact you regarding functionality changes to our Service; 4) send occasional product updates and promotions; 5) send regular monthly product updates.
8.3. You can choose to “opt out” of these communications anytime. To opt out of any email communications from us, please click the ‘unsubscribe’ link at the foot of the email in question.
8.4. Cart2Cart doesn't sell or rent your personal data to third parties.
9. GDPR Compliance
9.1. Cart2Cart is strongly committed to privacy, security, compliance, and transparency. The set of updates were introduced to the way Cart2Cart collects, stores, and processes personal information due to the General Data Protection Regulation (GDPR), which becomes enforceable on May 25, 2018.
9.2. Cart2Cart users are free to submit personal data requests at [email protected] and to inquire on personal data collected and demand its partial or full extraction from the database
9.3. For more information on rules applied to Cart2Cart company check the dedicated page on GDPR changes.
10. Notification of Changes
10.1. Cart2Cart reserves the right to modify this Privacy Policy at any time and at its own discretion.
10.2. If we change our Privacy Policy, we will post those changes on this page so our users are aware of what information we collect, how we use it, and under which circumstances, if any, we disclose it.
10.3. Users should check this Privacy Policy frequently to keep abreast of any changes.
11. Servers Location
11.1. Depending on the location of the ecommerce platform the migrations can be carried out by Cart2Cart on Hetzner servers located in Germany according to Hetzner Terms and Conditions or on Amazon Web Services (AWS) servers located in the United States of America or in any other country in which AWS maintains facilities according to AWS Customer Agreement.
11.2. Due to para 5.1. of Hetzner Terms and Conditions, Hetzner's data protection policies are in accordance with the GDPR (European Union's General Data Protection Regulation).
11.3. Due to the European Economic Area section of the AWS Privacy Notice, when Amazon Web Services EMEA SARL is the provider of an AWS Offering, Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, L-1855, Luxembourg, is the data controller of personal information collected or processed through the AWS Offering. Amazon Web Services EMEA SARL is also the authorized representative of Amazon Web Services, Inc. in the EEA.
Amazon Web Services, Inc. participates in the EU-US Data Privacy Framework, the UK Extension to the EU-US Data Privacy Framework, and the Swiss-US Data Privacy Framework. Click here to learn more.
12. Privacy notice for Residents of California, Virginia, Colorado, Connecticut and Utah.
12.1. This section provides additional information for residents of California, Virginia, Colorado, Connecticut and Utah and their rights under the California Consumer Privacy Act as amended by the California Privacy Rights Act (effective 01.01.2023), the Virginia Consumer Data Protection Act (effective 01.01.2023), the Colorado Privacy Act (effective 01.07.2023), the Connecticut Personal Data Privacy and Online Monitoring Act (effective 01.07.2023) and the Utah Consumer Privacy Act (effective 31.12.2023) (hereinafter collectively, the “US Privacy Laws”). The terms below apply to the California, Virginia, Colorado, Connecticut and Utah consumers additionally to the rest terms of this Privacy Policy.
The section 1 of this Privacy Policy describes the categories of personal information that Cart2Cart collects, the categories of sources from which the personal information is collected, and the purposes for collecting such personal information.
12.2. Consumer rights. Due to the US Privacy Laws consumers are provided with the following rights: 1) to know what their personal information is being collected by Cart2Cart; 2) to access their personal information collected by Cart2Cart; 3) to request correction of their inaccurate personal information collected by Cart2Cart; 4) to request the deletion of their personal information collected by Cart2Cart; 5) to know whether personal information about the consumer is sold or shared to third parties by Cart2Cart (if yes - what information and to whom); 6) consumers’ right of no retaliation following opt out or exercise of other rights; 7) to obtain a copy of the consumer's personal information that the consumer previously provided to Cart2Cart in a portable and, to the extent technically feasible, readily usable format that allows the consumer to transmit the data to another controller without hindrance, where the processing is carried out by automated means; 8) to opt out of the processing of the personal information for purposes of (i) targeted advertising, (ii) the sale of personal data, or (iii) profiling in furtherance of decisions that produce legal or similarly significant effects concerning the consumer; 9) other rights prescribed by the US Privacy Laws.
12.3. Consumer requests. US consumers may apply to Cart2Cart with the following verifiable consumer requests: 1) to know and access what consumer’s personal information is being collected by Cart2Cart; 2) to correct inaccurate consumer’s personal information collected by Cart2Cart; 3) to delete a consumer’s personal information collected by Cart2Cart; 4) to receive a copy of consumer’s personal information, etc. as detailed below by contacting Cart2Cart via the following designated methods for submitting requests:
(1) by submitting contact us form or (2) by emailing to [email protected].
12.3.2. We are required by the US Privacy Laws to verify requests from consumers. We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you.
12.3.3. General rules regarding verification of the consumer request are as follows:
- Whenever feasible, Cart2Cart will match the identifying information provided by the consumer to the personal information of the consumer already maintained by Cart2Cart.
- Cart2Cart shall avoid collecting the sensitive personal information, unless necessary for the purpose of verifying the consumer.
- Cart2Cart shall consider the following factors: (a) the type, sensitivity, and value of the personal information collected and maintained about the consumer; (b) the risk of harm to the consumer posed by any unauthorized access, correction, or deletion; (c) likelihood that fraudulent or malicious actors would seek the personal information.
- Cart2Cart shall generally avoid requesting additional information from the consumer for purposes of verification. If, however, Cart2Cart cannot verify the identity of the consumer from the information already maintained by Cart2Cart, then Cart2Cart may request additional information from the consumer, which shall only be used for the purposes of verifying the identity of the consumer seeking to exercise their rights under the US Privacy Laws, security, or fraud-prevention. Cart2Cart shall delete any new personal information collected for the purposes of verification as soon as practical after processing the consumer's request, except as required to comply with US Privacy Laws.
12.4. If you have made a consumer request to Cart2Cart relating your personal information and believe your request was denied by Cart2Cart, you can exercise your right to appeal the results of your request by contacting Cart2Cart: (1) by submitting contact us form or (2) by emailing to [email protected]. If your appeal is unsuccessful and depending upon the state where you live, you may have the right to contact your state Attorney General.
12.5. NO DISCRIMINATION.
We will not discriminate against any consumer for exercising their rights under the US Privacy Laws.
12.6. WE DO NOT SELL YOUR PERSONAL INFORMATION.
We do not sell personal information collected about consumers to third parties. We do not share consumer’s personal information with outside third parties without the consumer's consent, unless instructed by the consumer for the purpose of providing the consumer the Services.
12.7. WE DO NOT COLLECT YOUR SENSITIVE PERSONAL INFORMATION.
We do not collect consumer’s sensitive personal information.
We do not process the consumer’s personal information for the purpose of automated profiling in furtherance of solely automated decisions that produce legal or similarly significant effects concerning the consumer.
Sub-processors
13.1. Authorization for sub-processing. Cart2Cart uses sub-processors to support providing an effective automated shopping cart migration data transfer Service. The Cart2Cart users of the Service acknowledge and agree to Cart2Cart engaging sub-processors to process customers' personal data. The processing of personal data by these sub-processors is conducted in accordance with the specified purposes and duration outlined in the Cart2Cart services agreement or (and) Cart2Cart Terms of Service or (and) Cart2Cart Privacy Policy.
13.2. List of sub-processors. The current Cart2Cart’s List of sub-processors engaged in processing of personal data for the performance of the Service (including, Name of Sub Processor, Purpose of Processing, Location of Sub-Processor) can be found on the following webpage: Cart2Cart Sub-Processors
13.3. Sub-processors addition. Cart2Cart may add or replace any sub-processor in the current Cart2Cart’s List of sub-processors on the following webpage: Cart2Cart Sub-Processors. The Cart2Cart user shall periodically check the Cart2Cart’s List of sub-processors for updates. If the Cart2Cart user continues to use the Service after changes into the Cart2Cart’s List of sub-processors, it means that such User agrees with the changes to the Cart2Cart’s List of sub-processors. If the Cart2Cart user object to addition or replacement of any sub-processor in the Cart2Cart’s List of sub-processors, then such user shall write regarding its objection concerns to Cart2Cart at the following email: [email protected] or [email protected]
How to Contact Us
14.1. Please address your questions or concerns about this Privacy Policy to [email protected].
