Cordly Logo
CORDLY
Sell?

Cordly Privacy Policy

Effective Date: January 23, 2025

1. Introduction

Welcome to Cordly! Your privacy is important to us. This Privacy Policy explains how Cordly ("we," "us," or "our") collects, uses, and shares your information when you use our online marketplace platform (the "Platform") to buy and sell firewood. This policy applies to both buyers and sellers who use Cordly.

This Privacy Policy outlines:

  • What information we collect from you.
  • How we use your information.
  • How we share your information.
  • How we protect your information.
  • Your rights and choices regarding your information.

By using Cordly, you consent to the practices described in this Privacy Policy. If you do not agree with this policy, please do not use our Platform.

2. Definitions

  • "Non-Personal Information" (NPI): Information that cannot be used to personally identify you. This may include aggregated and anonymized data, website usage statistics, and technical information like browser type and IP address (in anonymized form).
  • "Personally Identifiable Information" (PII): Information that can be used to identify you as an individual. This includes, but is not limited to, your name, email address, phone number, physical address, location data, payment information, and any information you provide in your user profile or communications on the Platform.
  • "Platform": Refers to the Cordly online marketplace, including our website and mobile applications.
  • "Users": Refers to both buyers and sellers on the Cordly Platform.
  • "Sellers": Users who list and sell firewood on the Cordly Platform.
  • "Buyers": Users who purchase firewood from Sellers on the Cordly Platform.

3. Information We Collect

We collect information in the following ways:

3.1 Information You Provide Directly:

  • Account Registration:
    • For Buyers: Name, email address, phone number, location (address or zip code), and password.
    • For Sellers: Name, business name (if applicable), email address, phone number, business address, tax information (for verification), Stripe account details for payment processing, profile description, photos, and password.
  • Profile Information: Sellers create storefront profiles that may include photos, descriptions of wood types, pricing, delivery areas, service details (stacking), and availability.
  • Order Information: When you place or fulfill an order, we collect details about the transaction, including wood type, quantity, price, delivery/pickup preferences, date and time, delivery address, delivery instructions, and communication related to the order.
  • Payment Information: Buyers provide payment information (e.g., credit card details) directly to Stripe, our secure payment processor. Cordly does not directly store your full credit card information. Sellers connect their Stripe accounts to receive payments.
  • Communications: Information you provide when you communicate with us or other users through the Platform's messaging system or via email or phone for customer support.
  • Reviews and Ratings: Information you provide when leaving reviews and ratings for sellers or as a seller receiving ratings from buyers.
  • Location Information: We collect your location (address or zip code) when you register and when you use the Platform to find sellers or set delivery areas. We may use GPS, IP address, and other location-based technologies to determine your location to facilitate the marketplace functionality.

3.2 Information Collected Automatically:

  • Usage Data: We collect information about how you use the Platform, such as pages you visit, features you use, searches you conduct, and actions you take.
  • Device Information: We automatically collect certain information about your device, including your IP address, browser type, operating system, device identifiers, and mobile network information.
  • Cookies and Similar Technologies: We use cookies, web beacons, and similar tracking technologies to collect information about your browsing activity on our Platform. Please see Section 5 ("Our Use of Cookies and Tracking Technologies") for more details.

4. How We Use Your Information

We use your information for the following purposes:

Providing and Improving the Platform:

  • To operate, maintain, and improve the Cordly Platform and its features.
  • To connect buyers and sellers of firewood.
  • To personalize your experience on the Platform.
  • To process transactions and facilitate payments through Stripe.
  • To provide customer support and respond to your inquiries.
  • To monitor and analyze Platform usage and trends to improve our services.

Communication:

  • To communicate with you about your account, orders, updates, and important notices related to the Platform.
  • To send you marketing and promotional communications (where permitted by law and in accordance with your preferences). You can opt-out of these communications at any time (see Section 8 "Your Rights and Choices").
  • To enable communication between buyers and sellers through the in-app messaging system.

Verification and Security:

  • To verify seller identity and business legitimacy (using tax information and Stripe account verification).
  • To prevent fraud, abuse, and other unauthorized activities.
  • To ensure the security and integrity of the Platform.

Legal Compliance:

  • To comply with applicable laws, regulations, and legal processes.
  • To enforce our Terms of Service and other agreements.

5. Our Use of Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on our Platform, analyze usage, and for advertising purposes.

What are Cookies?

Cookies are small text files that are placed on your device by websites you visit. They are widely used to make websites work, or work more efficiently, as well as to provide information to the owners of the site.

Types of Cookies We Use:

  • Strictly Necessary Cookies: Essential for the operation of the Platform, enabling features like account login and secure transactions.
  • Performance Cookies: Collect information about how you use the Platform, such as which pages you visit and if you experience errors. This helps us improve the performance of our Platform.
  • Functionality Cookies: Allow the Platform to remember your choices (e.g., language preferences) and provide enhanced, personalized features.
  • Analytics Cookies: We use tools like Google Analytics to collect information about Platform usage. This helps us understand user behavior and improve our services. (You can learn more about Google Analytics and opt-out options in their privacy policy).
  • Advertising/Targeting Cookies: We may use these cookies to deliver advertisements that are relevant to you and your interests.

Your Cookie Choices:

Most web browsers automatically accept cookies. You can modify your browser settings to decline cookies or to notify you when a cookie is being placed. However, disabling cookies may limit your ability to use certain features of the Platform.

Web Beacons:

We may also use web beacons (also known as pixel tags or clear GIFs) in our emails and on our Platform to collect information about email open rates and user browsing behavior.

6. Sharing Your Information

We may share your information in the following circumstances:

  • With Sellers (for Buyers): When you place an order, we share your order details, delivery address, contact information, and any relevant delivery instructions with the seller fulfilling your order to facilitate the transaction and delivery.
  • With Buyers (for Sellers): When you accept an order, we share your seller profile and contact information with the buyer to facilitate communication and order fulfillment.
  • With Service Providers: We share information with third-party service providers who perform services on our behalf, such as:
    • Stripe: For payment processing.
    • Hosting Providers (Railway, Google Cloud Storage): For hosting our Platform and storing data.
    • Authentication Providers (Google/Facebook, NextAuth.js): For user authentication.
    • Email Marketing and Communication Services.
    • Analytics Providers (e.g., Google Analytics).
    • Customer Support Services.

    These service providers are contractually obligated to protect your information and use it only for the purposes for which we disclose it to them.

  • For Legal Reasons: We may disclose your information if required to do so by law, legal process, or government request, or when we believe in good faith that disclosure is necessary to:
    • Protect our rights, property, or safety, or the rights, property, or safety of others.
    • Investigate or prevent fraud or illegal activities.
    • Enforce our Terms of Service or this Privacy Policy.
    • Respond to claims or legal process.
  • Business Transfers: In the event of a merger, acquisition, sale of assets, or bankruptcy, your information may be transferred to a successor organization. We will notify you in advance of such a transfer and provide you with choices regarding your information.
  • Aggregated and Anonymized Data: We may share aggregated and anonymized information that does not personally identify you with third parties for various purposes, including analytics, research, and marketing.

7. Data Security

We take reasonable measures to protect your information from unauthorized access, use, or disclosure. These measures include:

  • Secure Platform: Using a secure technology stack (Next.js, MongoDB, etc.) and reputable hosting providers (Railway, Google Cloud Storage).
  • Encryption: Employing industry-standard encryption technologies (like SSL/TLS) to protect sensitive information transmitted online, particularly payment information processed by Stripe.
  • Stripe Security: Relying on Stripe's secure payment processing infrastructure and tokenization to handle payment information. Cordly minimizes direct handling and storage of sensitive payment details.
  • Access Controls: Limiting access to your PII to authorized personnel who need it to perform their jobs.
  • Regular Security Assessments: Implementing ongoing security assessments and updates to our systems and practices.

While we strive to protect your information, no method of transmission over the internet or method of electronic storage is completely secure. Therefore, we cannot guarantee absolute security. It is also important for you to protect your account credentials and password and to log out of your account when you are finished using the Platform, especially on shared devices.

8. Your Rights and Choices

You have certain rights and choices regarding your personal information:

  • Access and Correction: You have the right to access and review the PII we hold about you and to request corrections of any inaccuracies. You can update much of your account information directly through your account settings. For other requests, please contact us (see Section 12 "Contact Us").
  • Deletion (Right to be Forgotten): You have the right to request the deletion of your PII, subject to certain exceptions (e.g., legal obligations, fraud prevention).
  • Objection to Processing: You may have the right to object to certain types of processing of your PII, such as direct marketing.
  • Restriction of Processing: You may have the right to restrict the processing of your PII in certain circumstances.
  • Data Portability: You may have the right to receive your PII in a structured, commonly used, and machine-readable format and to transmit it to another controller.
  • Opt-Out of Marketing Communications: You can opt-out of receiving marketing emails from us by using the unsubscribe link in those emails or by contacting us directly.
  • Cookie Preferences: You can manage your cookie preferences through your browser settings (see Section 5 "Our Use of Cookies and Tracking Technologies").
  • Withdraw Consent: If we rely on your consent to process your PII, you have the right to withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of processing based on consent before its withdrawal.

To exercise any of these rights, please contact us using the information in Section 12 "Contact Us." We may require you to verify your identity before we can respond to your request.

9. Data Retention

We will retain your PII for as long as necessary to fulfill the purposes outlined in this Privacy Policy, including to provide you with the Platform services, comply with legal obligations, resolve disputes, and enforce our agreements. When we no longer need your PII, we will securely delete or anonymize it.

10. Children's Privacy

Cordly is not intended for use by children under the age of 16. We do not knowingly collect PII from children under 16. If you are a parent or guardian and believe that your child has provided us with PII, please contact us, and we will take steps to delete their information.

11. International Data Transfers

Your information may be transferred to and processed in countries outside of your country of residence, which may have different data protection laws than your country. We will take appropriate safeguards to protect your PII in accordance with this Privacy Policy and applicable laws when transferring data internationally. This may include using Standard Contractual Clauses approved by the European Commission or other legally recognized transfer mechanisms.

12. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will post any changes on this page and update the "Effective Date" at the top of the policy. If we make significant changes, we will provide you with more prominent notice, such as by email or through a notification on the Platform. We encourage you to review this Privacy Policy periodically for any updates. Your continued use of the Platform after the posting of changes constitutes your acceptance of such changes.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us at:

[email protected]

Or by mail at:

Cordly US
19075 Shoshone Rd, Bend Oregon 97702

We are committed to addressing your concerns and resolving any privacy issues promptly.