This document describes how COLMINK works in relation to your data and your use of the service.
These terms are part of the agreement between you and COLMINK, and they record your instructions for the customer data we handle on your behalf. Accepting them is a contractual step, not you consenting to anything about your own personal data — your own data is covered by the Privacy Policy, and your customers' consent, where it is needed, is a matter between you and them.
For your merchant account — your email, your store, your plan, your invoices — COLMINK decides how that data is handled and is the controller. For the data your own customers give you when they start an order, you decide why it is collected and COLMINK handles it on your behalf, as a processor. This page describes the second role.
The contents of orders started on your store: what was chosen, the note your customer wrote, the fulfilment they picked, the address when delivery was chosen, and their WhatsApp number when they provided it. Nothing else about your customers is collected by the platform.
Only to provide the service: to build the order message, to show you the order in your dashboard, to let you complete or cancel it, and to send the review invitation you choose to send. We do not sell it, do not use it for advertising, and do not use it to train models.
We act on your instructions as expressed through the platform's own features. If we are ever required by law to do something else, we will tell you unless the law prohibits it.
You, the administrators and operators you invite, and COLMINK staff strictly where support, security or legal duty requires it. Access by our staff is limited by role and recorded.
The service runs on infrastructure and tools provided by other companies: hosting, database, file storage, email delivery, error monitoring and payment providers. They act on our instructions, are bound to protect the data, and are used only for the purposes above. WhatsApp is not one of them: your order message opens in WhatsApp on the customer's own device, under their agreement with that service.
Passwords are stored hashed and never in readable form. Access is authenticated per request and checked against the store the request belongs to. Payment card details are never collected or stored by COLMINK. We keep audit records of administrative actions.
Order data stays while your store exists. You can export your data at any time, and deleting your account erases it, except records we are legally required to keep for accounting purposes, which are retained separately, reduced to the minimum, and destroyed when that period ends.
If we become aware of a breach affecting the data we handle for you, we will inform you without undue delay and with the information you need to meet your own obligations.
COLMINK is a product of OneSevenOh Innovations, operated by Panóplia Positiva Unipessoal, Lda.