Privacy policy

Last updated: 2026-09-14

Operator notice: a complete public business address has not been supplied. See the business details page for the information currently available.

This policy covers Ambur Marketplace at ambur.shop and its seller subdomains. See business and contact details for the operator and how to contact us about personal data.

Data we use and why

Browsing: you can browse products and seller contact details without an account. Optional analytics is off unless you accept it. We do not create advertising profiles or collect precise location.
Accounts: email and authentication credentials let you sign in and recover access. A display name is optional for email registration. If you choose Google sign-in, Google supplies your account identifier, email, name, and profile image. Supabase handles authentication. Do not share your password or verification code with support or sellers.
Saved items: when you save a product or follow a store, we link that choice to your account so you can find it again. You can remove saved items and follows.
Seller accounts: we use account contacts, store name, business address, WhatsApp number, optional social links and logo, product content, and subscription status to operate storefronts. Storefront contact details and uploaded product images are public. Submit business contact details that you are authorized to publish.
Support: the contact form asks for a name, reply email, subject, and message to address your request. It records the version of the consent notice and the time submitted. It does not ask for your phone number. Do not include payment card numbers, identity documents, health information, or passwords.
Service security: hosting and authentication services may process IP addresses, request information, and security logs to deliver and protect the service. Our contact rate limiter temporarily uses an IP address to limit spam. These service records are separate from optional analytics.

Optional analytics

If you accept optional analytics, we record broad page categories (such as search or product page) and the product and seller references for WhatsApp clicks, with the event time. We do not include account IDs, session IDs, search terms, full URLs, or free-form event data. These counts help us understand usage and let sellers see opted-in interest. Requests still pass through hosting and security services, which may process IP addresses. Use Cookie settings in the footer or on the cookie policy page to reject analytics at any time. Rejection stops future collection; it does not erase records already stored.

Your choices and consent

The contact form requests permission to use the submitted details to handle your enquiry. Account notices explain processing needed to provide an account. Neither action signs you up for marketing. You can decline by browsing without an account or not submitting the form. To withdraw consent or request account closure, email admin@ambur.shop or choose Privacy Request on the contact form. Withdrawal does not undo lawful processing already completed; it may prevent us from continuing the requested service.

Service providers and external links

We use Supabase for accounts and database storage, Microsoft Azure for application hosting, and Cloudflare R2 for public product and store images. These providers process information needed to deliver their services; their infrastructure and support may operate outside your country. Google handles sign-in only when you choose it. We do not sell personal data or use advertising trackers in this application.

WhatsApp and social buttons are links, not embedded widgets. Following a link takes you to another provider. Sending a WhatsApp message shares your WhatsApp details and message with the seller and WhatsApp/Meta under their own practices. Ambur does not receive the contents of those conversations through this website. Share delivery or payment information only when necessary and after checking the seller.

Uploaded store and product images are public resources and can be copied or cached by others. Removing a listing does not automatically remove copies outside our control. See the cookie policy for browser storage.

Retention and deletion

Account, saved-item, seller, support, and analytics records are stored to provide the requested service and handle related issues. There is currently no automatic expiry for these database records. Contact us to request access, correction, or deletion. We assess what can be deleted and explain any records that must remain for legal obligations or an unresolved dispute. Backup and provider log retention can differ from the live database. We do not promise immediate removal from every backup.

Earlier versions recorded session-linked page views and WhatsApp click counts without this opt-in control. The current version removes the old browser session identifier and requires consent for new analytics. Earlier database records are not automatically deleted by this update. Contact us about that earlier processing.

Requests and complaints

You can ask about your data, request a copy, correction or deletion, withdraw consent, or raise a complaint using the contacts above. We may ask for proportionate verification, such as confirmation from your account email. Please do not send identity documents unless we explain why they are necessary. Applicable legal rights and response periods depend on your circumstances and local law; nothing here restricts those rights.

Children

Accounts and seller services are intended for people aged 18 or older. We do not ask for a date of birth or identity document during registration. If you believe a child has supplied personal data, contact us so we can investigate and address it.

Security and policy changes