Privacy Policy

Last updated: 27 August 2026

This Privacy Policy explains what information E-commerce Timor-Leste (the "Platform") collects, why, and how it is used, so you can make an informed choice about using the Platform.

1. Information we collect

  • Account information: name, email address, phone number, and password (stored encrypted, never in plain text), or your Google account name, email, and profile photo if you sign in with Google.
  • Order and delivery information: delivery address, recipient name and phone number, and — only if you use the "Pin exact location" map feature — the coordinates you drop, to help your courier find you.
  • Payment-related information: the payment method you choose and, for Bank Transfer orders, the receipt image you upload for verification. We do not collect or store bank card numbers, since no card payment method is offered.
  • Usage information stored on your device: your cart contents (so it survives a page reload), wishlist, recently viewed products, language and currency preference, and which notifications you've read — kept in your browser's local storage, not on our servers, until you clear it or it's synced to your account after logging in.
  • Content you provide: product reviews, seller ratings, and any messages you send through support or comment features.

2. How we use this information

We use your information to: create and secure your account; process and deliver orders; verify Bank Transfer payments; show you order status and delivery updates; respond to support requests; and show relevant products, categories, and your order history when you're logged in. We do not sell your personal information to third parties.

3. Who we share it with

  • Sellers, for the specific order you place with them — enough to fulfil and ship it (name, delivery address, phone number, order contents).
  • Couriers, to deliver your order — your delivery address, phone number, and pinned location if provided.
  • Service providers who host infrastructure on our behalf: Cloudinary (stores product images and uploaded payment receipts), and Google (Maps and Places, for the address/location picker at checkout; Firebase, if you sign in with Google). These providers process data only to provide their service to us.
  • We may disclose information if required by law, or to investigate fraud or protect the security of the Platform.

4. Cookies and local storage

We use an essential, httpOnly authentication cookie to keep you signed in — it isn't readable by page scripts and isn't used for advertising. We also use your browser's local storage (not a tracking cookie) to remember your cart, wishlist, language, and similar preferences on your own device. We do not currently use third-party advertising or analytics cookies.

5. Data retention

We keep account and order information for as long as your account is active and as needed to meet legal, accounting, or dispute-resolution obligations (for example, records of a completed sale). You can ask us to delete your account as described below; some order records may be retained where required by law.

6. Your choices

You can review and update your account details from Account Settings at any time. To request a copy of your data or ask us to delete your account, contact us using the details below — we'll respond as required by applicable law.

7. Children

The Platform is not directed at children, and accounts require a minimum age of 18 (or a parent/guardian's consent, per our Terms of Service).

8. Changes to this policy

If we make material changes to this policy, we'll update the "Last updated" date above and, where appropriate, notify you directly.

9. Contact

For any privacy question or request, reach us through our Contact page.