Privacy Policy

Effective Date: 9 September 2026
Last Updated: 9 September 2026

Nexmerce respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, store, and protect personal data when you access or use the Nexmerce website, marketplace, applications, services, and related technologies (collectively, the "Platform").

By accessing or using Nexmerce, you acknowledge that you have read and understood this Privacy Policy.

1. About Nexmerce

Nexmerce operates as an active Private Limited Company registered in the United Kingdom.

Company Number: 12231825
Company Status: Active
Company Type: Private Limited Company
Date of Incorporation: 27 September 2019
Registered Office: International House, 10 Beaufort Court, Admirals Way, London, United Kingdom, E14 9XL
Nature of Business (SIC): 82990 – Other business support service activities not elsewhere classified

For the purposes of applicable data protection laws, Nexmerce may act as a data controller where it determines how and why personal information is processed.

2. Scope of This Privacy Policy

This Privacy Policy applies to personal information collected through:

• The Nexmerce website;
• The Nexmerce Marketplace;
• User accounts;
• Supplier and merchant accounts;
• Product Lots and Product Spaces;
• Orders and marketplace transactions;
• Payment-related activities;
• Customer support communications;
• Account verification processes;
• Marketing and promotional communications;
• Platform analytics and security systems; and
• Other Nexmerce services that refer to this Privacy Policy.

3. Information We Collect

The types of information Nexmerce may collect depend on how you interact with the Platform.

3.1 Account Information

When you create or maintain an account, we may collect:

• Full name;
• Email address;
• Mobile or telephone number;
• Username;
• Encrypted or securely processed password information;
• Account role or user type;
• Profile information; and
• Communication preferences.

3.2 Identity and Verification Information

Where identity, supplier, merchant, or business verification is required, we may collect:

• Government-issued identification;
• Business registration information;
• Company documents;
• Registered business address;
• Business contact information;
• Supplier verification documents;
• Know Your Business (KYB) information;
• Know Your Customer (KYC) information where applicable; and
• Other information necessary for fraud prevention or compliance purposes.

3.3 Transaction and Marketplace Information

When you use marketplace services, we may collect information relating to:

• Orders;
• Product purchases;
• Product Lots;
• Product Spaces;
• Product allocations;
• Estimated revenue records;
• Marketplace activity;
• Supplier transactions;
• Payment status;
• Refunds and cancellations;
• Transaction references;
• Account balances or platform ledger records where applicable; and
• Audit history associated with transactions.

3.4 Payment Information

Payments may be processed directly by Nexmerce or through third-party payment providers.

Depending on the payment method, we may collect or receive:

• Payment reference numbers;
• Transaction amounts;
• Payment timestamps;
• Payment method information;
• Proof of payment;
• Payment confirmation status;
• Refund information; and
• Information provided by payment processors relating to a transaction.

Where payments are processed by an independent payment provider, Nexmerce may not directly receive or store complete card numbers, banking credentials, or other sensitive payment authentication data.

3.5 Supplier Information

If you register or participate as a supplier, we may collect:

• Business name;
• Business registration details;
• Business address;
• Supplier contact person;
• Email address and telephone number;
• Product information;
• Inventory information;
• Fulfillment information;
• Verification documents;
• Settlement information; and
• Supplier transaction history.

3.6 Communications

When you contact Nexmerce, we may collect information contained in your communications, including:

• Customer support inquiries;
• Email messages;
• Feedback;
• Complaints;
• Transaction disputes;
• Support tickets; and
• Other correspondence with Nexmerce.

3.7 Technical and Device Information

When you access the Platform, certain technical information may be collected automatically, including:

• Internet Protocol (IP) address;
• Browser type and version;
• Device type;
• Operating system;
• Device identifiers;
• Login timestamps;
• Session information;
• Pages or features accessed;
• Referring pages;
• Error logs;
• Security events; and
• Approximate location derived from IP address where applicable.

3.8 Cookies and Similar Technologies

Nexmerce may use cookies and similar technologies to:

• Keep users signed in;
• Maintain secure sessions;
• Remember user preferences;
• Measure Platform usage;
• Improve Platform performance;
• Detect fraud or suspicious activity; and
• Understand how users interact with Nexmerce.

You may be able to manage cookies through your browser settings. Disabling certain cookies may affect Platform functionality.

4. How We Use Personal Information

Nexmerce may use personal information for the following purposes:

• Creating and managing user accounts;
• Providing access to Nexmerce services;
• Processing marketplace transactions;
• Managing Product Lots and Product Spaces;
• Managing orders and allocations;
• Processing and verifying payments;
• Managing supplier relationships;
• Providing customer support;
• Communicating account and transaction updates;
• Maintaining financial and operational records;
• Maintaining audit trails;
• Preventing fraud and unauthorized access;
• Protecting Platform security;
• Verifying identity or business information;
• Improving Platform performance;
• Developing new products and services;
• Conducting internal reporting and analytics;
• Complying with legal obligations;
• Resolving disputes;
• Enforcing our Terms of Service; and
• Protecting the rights and interests of Nexmerce, users, suppliers, and third parties.

5. Legal Bases for Processing

Where UK data protection law applies, Nexmerce may process personal data on one or more of the following legal bases:

• Contract: where processing is necessary to provide services requested by you or perform our agreement with you;
• Legal Obligation: where we must process information to comply with applicable law;
• Legitimate Interests: where processing is reasonably necessary for business operations, security, fraud prevention, service improvement, or protection of our rights, provided those interests are not overridden by your rights;
• Consent: where we rely on your permission for a specific processing activity; and
• Other Lawful Bases: where permitted or required under applicable data protection legislation.

6. How We Share Information

Nexmerce does not sell personal information as a routine business practice.

We may share information where reasonably necessary with:

• Payment processors;
• Banks and financial service providers;
• Suppliers and fulfillment partners;
• Hosting and cloud infrastructure providers;
• Security and fraud-prevention providers;
• Email and communications providers;
• Professional advisers;
• Auditors;
• Accountants;
• Legal advisers;
• Regulators or competent authorities;
• Law enforcement where legally required; and
• Other service providers necessary to operate the Platform.

We seek to limit information shared with third parties to what is reasonably necessary for the relevant purpose.

7. Suppliers and Marketplace Participants

Certain information may need to be shared between marketplace participants in order to complete transactions.

For example, suppliers may receive information necessary to process or fulfill an order.

Users and suppliers must only use personal information received through Nexmerce for legitimate marketplace purposes and in accordance with applicable laws.

8. International Data Transfers

Nexmerce may use service providers or infrastructure located outside the United Kingdom.

Where personal data is transferred internationally, Nexmerce will seek to use appropriate safeguards as required under applicable data protection law.

These safeguards may include adequacy regulations, contractual safeguards, or other legally recognized transfer mechanisms.

9. Data Security

Nexmerce uses reasonable technical and organizational measures designed to protect personal information from unauthorized access, alteration, disclosure, destruction, or misuse.

Security measures may include:

• Role-based access controls;
• Password protection;
• Secure session controls;
• Encryption where appropriate;
• Audit logging;
• Restricted administrative access;
• Database and server security;
• Monitoring of suspicious activities;
• Secure storage of verification documents;
• Backup procedures; and
• Security updates and system maintenance.

However, no internet-based platform or storage system can guarantee absolute security.

Users are responsible for maintaining the confidentiality and security of their own login credentials.

10. Verification Documents

Supplier, merchant, identity, and business verification documents may contain sensitive personal or commercial information.

Nexmerce seeks to restrict access to such documents to authorized personnel and systems where reasonably necessary for verification, compliance, fraud prevention, or legal purposes.

Verification documents should not be publicly accessible through the Platform.

11. Data Retention

Nexmerce retains personal information only for as long as reasonably necessary for the purposes for which it was collected or where retention is required for legal, accounting, security, fraud-prevention, dispute-resolution, or regulatory purposes.

Retention periods may vary depending on the type of information.

For example, transaction and accounting records may need to be retained longer than ordinary customer support communications.

When information is no longer required, Nexmerce may securely delete, anonymize, or otherwise dispose of it in accordance with applicable requirements.

12. Your Data Protection Rights

Depending on your location and applicable law, you may have rights relating to your personal information.

Under UK data protection law, these rights may include:

• The right to be informed about how your information is used;
• The right to request access to your personal data;
• The right to request correction of inaccurate or incomplete data;
• The right to request deletion of personal data in certain circumstances;
• The right to request restriction of processing;
• The right to object to certain processing;
• The right to data portability where applicable;
• The right to withdraw consent where processing is based on consent; and
• Rights relating to certain automated decision-making activities where applicable.

These rights are subject to legal limitations and exceptions.

13. How to Exercise Your Rights

You may contact Nexmerce to request access, correction, deletion, restriction, or other applicable data protection rights.

To protect user information, we may need to verify your identity before completing certain requests.

Please contact:

Email: hello@nexmerce.space

We will seek to respond within the period required by applicable law.

14. Account Deletion

Users may request closure or deletion of their Nexmerce account.

Account deletion does not necessarily require Nexmerce to immediately delete all information associated with the account.

Certain information may need to be retained where necessary for:

• Accounting records;
• Transaction history;
• Fraud prevention;
• Dispute resolution;
• Legal obligations;
• Security investigations; or
• Compliance requirements.

15. Marketing Communications

Nexmerce may send information about services, Platform updates, product announcements, offers, or other communications where permitted by law.

Where consent is required for electronic marketing, Nexmerce will seek the appropriate consent.

You may unsubscribe from marketing communications using the available unsubscribe option or by contacting Nexmerce.

You may still receive necessary transactional, security, account, or service-related messages even if you opt out of marketing communications.

16. Automated Analytics and Recommendations

Nexmerce may use Platform activity and marketplace information to generate:

• Product recommendations;
• Suggested profitable products;
• Marketplace insights;
• Estimated revenue information;
• Product performance indicators;
• Fraud or risk indicators; and
• Other automated analytics.

Such outputs may be generated using automated systems, algorithms, or predefined analytical criteria.

Where applicable law provides rights relating to significant automated decision-making, Nexmerce will seek to comply with those requirements.

17. Children's Privacy

Nexmerce is designed primarily for individuals who have the legal capacity to enter into marketplace and commercial transactions.

We do not knowingly seek to collect personal information from children who are not legally permitted to use the relevant services.

If we become aware that personal information has been collected from an ineligible child without an appropriate lawful basis, we may take reasonable steps to delete or restrict that information.

18. Third-Party Websites and Services

The Nexmerce Platform may contain links to or integrations with third-party websites, payment services, suppliers, logistics providers, or other external services.

This Privacy Policy does not govern the privacy practices of independent third parties.

We encourage users to review the privacy policies of third-party services before providing personal information to them.

19. Payment Providers

Third-party payment providers may independently collect and process personal and payment information in accordance with their own privacy policies and legal obligations.

Nexmerce is not responsible for the independent privacy practices of external payment providers.

20. Security Monitoring and Fraud Prevention

Nexmerce may monitor activity on the Platform to help identify:

• Unauthorized account access;
• Suspicious transactions;
• Fraud attempts;
• System abuse;
• Security incidents;
• Technical attacks; and
• Violations of our Terms of Service.

Information generated during security monitoring may be retained where reasonably necessary for investigation, prevention, audit, or legal purposes.

21. Audit Logs

Certain Platform activities may be recorded in audit logs.

Audit information may include:

• User actions;
• Administrative actions;
• Login records;
• Transaction changes;
• Inventory changes;
• Payment verification activity;
• Account status changes; and
• Security events.

Audit logs help Nexmerce maintain security, accountability, operational integrity, and transaction records.

22. Data Breach Management

If Nexmerce becomes aware of a personal data breach, we will assess the incident and take reasonable steps to contain, investigate, and remediate it.

Where required by applicable law, Nexmerce may notify affected individuals and/or the appropriate supervisory authority.

23. Business Transfers

If Nexmerce is involved in a merger, acquisition, restructuring, financing, sale of assets, or transfer of all or part of its business, personal information may be disclosed or transferred as part of that transaction where legally permitted.

Any successor organization receiving personal information will be expected to handle that information in accordance with applicable data protection requirements.

24. Legal and Regulatory Disclosure

Nexmerce may disclose personal information where reasonably necessary to:

• Comply with applicable laws;
• Respond to valid court orders or legal processes;
• Respond to regulators or competent authorities;
• Investigate suspected fraud or criminal activity;
• Protect Nexmerce's legal rights;
• Protect users or third parties; or
• Enforce our agreements and policies.

25. Changes to This Privacy Policy

Nexmerce may update this Privacy Policy from time to time to reflect changes in:

• Our Platform;
• Business operations;
• Technology;
• Data processing practices;
• Legal requirements; or
• Security practices.

The latest version will be published on the Nexmerce Platform and will display an updated revision date.

Where required by law, we may provide additional notice of material changes.

26. Complaints

If you have concerns regarding how Nexmerce processes your personal information, please contact us first so that we can review your concern.

Where applicable, you may also have the right to lodge a complaint with the relevant data protection supervisory authority.

For individuals in the United Kingdom, the relevant supervisory authority is the Information Commissioner's Office (ICO).

27. Contact Nexmerce

For privacy questions, requests, or concerns, please contact:

Nexmerce
Company Number: 12231825
International House
10 Beaufort Court, Admirals Way
London, United Kingdom
E14 9XL

Email: hello@nexmerce.space

This Privacy Policy provides a general privacy framework for the Nexmerce Platform and should be reviewed by qualified UK data protection counsel before final production use, particularly where identity verification, payment processing, cross-border data transfers, profiling, financial records, or regulated activities are involved.