Privacy Policy

Who is responsible for your information?

NoonMart24 is the customer-facing store operating this website. The registered legal entity and its business address have not been configured in the project, so the owner must add and verify those details before treating this notice as a complete legal privacy notice. For now, you can send privacy questions using the WhatsApp contact link below.

This notice was last reviewed on 27 October 2026. A proposed effective date must be approved by the business owner before publication.

Information we collect and where it comes from

Information comes from you when you browse, create an account, add items to a cart or wishlist, contact support, submit a checkout or send a bank-transfer receipt. The application stores customer names, email addresses, password hashes, delivery addresses, cart and wishlist selections, order items and totals, chosen shipping method, payment reference, payer name and receipt object key. It does not request or store payment-card numbers or card security codes.

When the storefront attempts to identify a UK or US market, it makes a country lookup request to ipwho.is. That service will receive the network information normally included in the request, including your public IP address. You can change the selected market with the site control. The site also receives ordinary server and hosting request data.

Why we use information

Depending on the purpose and applicable law, processing may be necessary to take steps requested by you or perform a purchase contract, meet a legal obligation, pursue legitimate interests in operating and securing the store, or rely on consent where consent is required. The business owner must confirm the final lawful-basis assessment and retention schedule.

• To create and manage customer accounts and authenticate sign-ins.
• To keep cart, wishlist and market preferences available in your browser.
• To calculate product availability and obtain a CJdropshipping freight quote for the products, selected variants, quantity and delivery address you submit.
• To create and support an order, show its status, verify a bank transfer manually and respond to customer questions.
• To protect the service, investigate suspected misuse and meet applicable record-keeping or legal obligations.

Who receives information?

For CJ freight quotes, the backend sends CJ the destination country and postcode, product variant IDs and quantities. The storefront does not automatically submit customer orders to CJ. To fulfil an order manually, store staff may need to share the recipient name, delivery address, telephone number, product/variant and quantity with CJdropshipping or a carrier. CJ is a third-party supplier/fulfilment provider; its supplier dispute rules do not replace your rights against NoonMart24.

The backend uses MongoDB for customer and order records, AWS S3 presigned uploads for payment receipt files and Fly.io for backend hosting. Their exact account, region, retention settings and applicable transfer safeguards must be confirmed by the owner. Product imagery may load from CJ-hosted or configured image-storage domains. The market lookup uses ipwho.is. If you contact us through WhatsApp, Meta/WhatsApp processes the message and associated service data under its own terms. Bank transfer instructions are supplied by the store; the actual banks involved receive information you provide directly when you make a transfer.

The project does not show an integrated card processor, advertising pixel or analytics tag. We will update this notice before adding one.

International transfers

The store serves the UK and US and uses third-party systems that may process information in other countries, including supplier and hosting locations. The precise locations and transfer safeguards have not been verified in this project. The owner must document the relevant processor terms and any transfer mechanism required by the laws that apply before relying on this notice.

Cookies and browser storage

The site uses a first-party market preference cookie and browser storage for necessary store functions. Local storage is used for guest cart and wishlist data and the customer session token; IndexedDB holds compact product-list responses for up to 15 minutes. These features support market selection, account continuity and shopping. The code audit did not find analytics or advertising scripts, so this build does not offer an opt-in cookie banner for non-essential tracking. See the Cookie Policy for details.

How long information is kept

The application does not define an automatic retention or deletion schedule for accounts, addresses, orders, payment references or uploaded receipt objects. Records may need to be retained for customer service, accounting, fraud prevention and legal claims, but the exact periods must be set by the business owner under applicable law. Guest browser data remains until cleared or replaced; product-list cache entries expire after 15 minutes.

Your privacy rights

Depending on where you live and the laws that apply, you may be able to request access to, correction of, deletion of or a copy of personal information; object to or restrict certain processing; withdraw consent where processing relies on consent; and complain to a privacy regulator. UK residents may raise a concern with the Information Commissioner’s Office. California residents may have additional rights under the CCPA/CPRA if the business is covered by those laws, including rights to know, access, delete or correct certain information and to opt out of sale or sharing where applicable. The project does not indicate that the store sells personal information or uses it for cross-context behavioural advertising.

• Send a privacy request through the WhatsApp support link below and identify the account/order concerned.
• We may ask for information reasonably needed to verify identity and protect the account; do not send passwords or full payment credentials.
• The store has not configured a dedicated privacy email, web request form or postal address. The owner must add appropriate request methods if required by applicable law.
• If you are in the UK and remain concerned, you can contact the ICO at ico.org.uk. California residents may find information about the CPPA at cppa.ca.gov.

Children, external links and changes

The customer account and purchase flow is intended for adults. A parent or guardian should make purchases for a child. If you believe a child has provided personal information, contact support so the owner can review the request.

The site may link to third-party services. Their own privacy practices apply when you use them. We may revise this notice when the service or law changes; the reviewed date above will be updated when the owner has reviewed the new version.