Privacy notice

How the TTPOST E-Mall handles personal information, and how that maps to the Data Protection Act 2011 (Chap. 22:04).

What this sandbox collects

Account details	Email address, display name, and role. Passwords are stored only as a bcrypt hash and are never recoverable.
Store details	Store name, location, and verification status for vendor accounts.
Catalogue and orders	Products you create, cart contents, and orders you place.
Session cookie	One cookie holding a session identifier. It is HttpOnly, SameSite=Lax, and marked Secure over HTTPS. No analytics, advertising, or third-party cookies are set.
Security log	Sign-in attempts, sign-outs, permission denials, and vendor status changes, with the account identifier, route, and IP address.

Payment and identity data

The sandbox never collects card numbers or identity documents. Payment is simulated, and identity verification is represented by screens only. In the delivered platform, cardholder data is entered on the payment provider’s own hosted page and never traverses or is stored on E-Mall infrastructure; identity documents are transmitted to NPICTT eKYC and only the verification reference and outcome are retained.

The twelve privacy principles

The Data Protection Act 2011 is only partially proclaimed — Part I and sections 7–18, 22, 23, 25(1), 26 and 28 came into force in January 2012, and section 42(a)–(b) in August 2021 — but the General Privacy Principles are among the provisions in force. The platform is built to them regardless of which enforcement sections are proclaimed.

1. Accountability. A named data controller at TTPOST is responsible for personal information under the platform’s control.
2. Purpose identification. Each field collected serves a stated purpose: fulfilling orders, verifying vendors, or securing accounts.
3. Consent. Account creation is the point of collection and consent; the platform collects nothing about a person who has not registered.
4. Limited collection. Only what a marketplace transaction requires. No date of birth, no demographic profiling, no tracking across other sites.
5. Retention limits. Order records are retained for the statutory accounting period; session and security logs are retained for a defined operational window and then deleted.
6. Accuracy. Account holders may correct their own details; vendors control their store and catalogue records.
7. Safeguards. Hashed passwords, CSRF protection on every state-changing request, server-enforced authorisation, a strict Content-Security-Policy, and TLS in transit. See the security page.
8. Sensitive information. Identity documents are handled by NPICTT eKYC rather than stored here. No sensitive category data is processed by the platform.
9. Openness. This notice, and the security page, state what is collected and how it is protected.
10. Individual access. A signed-in account holder can download everything the platform holds about them from their account page.
11. Challenging compliance. Complaints route to the TTPOST data controller, with a defined response time.
12. Cross-border transfer. Hosting jurisdiction is a contractual matter with NPICTT. Two remote origins remain in this sandbox — product photographs and map tiles — and requesting them discloses a visitor’s IP address to those providers. Both are named on the security page.

Your data

Signed-in account holders can export or delete their data from the account page. Export returns every record the platform holds for that account as JSON; deletion removes the account and its personal data.