SATHUN Global Privacy Policy

Data Controller: Sunita Shahi, sole trader, trading under the registered business name THAKURI BRAND and operating the SATHUN Global marketplace.

Registered business name: THAKURI BRAND | Business-name registration number: EE 62992 α | SATHUN Global trade mark application: No. 96940.

Address: Agiou Ioanni 4, 2nd Floor, Apartment/Office 103, 3016 Limassol, Cyprus.

For privacy requests, please contact shahisunita264@gmail.com and write “Privacy Request” in the subject line.

This Privacy Policy applies to personal data processed by SATHUN Global in connection with the Platform. It applies to Customers, prospective Customers, Suppliers, Supplier representatives, website visitors and persons who contact us.

SATHUN Global normally acts as the data controller for account administration, operation and security of the Platform, marketplace support, payment coordination, fraud prevention and its own legal obligations.

Each Supplier may act as an independent data controller for Customer personal data received to accept, fulfil, deliver, invoice, support or otherwise administer a Sales Contract. Suppliers must use that data only for lawful purposes connected with the transaction and must comply with applicable data-protection law. A Supplier’s own privacy notice may also apply to its processing.

This Privacy Policy does not govern processing carried out independently by a Supplier, payment-service provider, courier, external website or other third party. Their own privacy notices should be reviewed where applicable.

We process personal data only where a lawful basis under GDPR applies. Depending on the activity, the legal basis may be performance of a contract, compliance with a legal obligation, our legitimate interests or consent.

Some personal data are necessary to create an account, enter into or perform a contract, process a payment, deliver an order, make a Supplier payout or comply with law. Required fields will normally be identified. If required information is not provided, we may be unable to register an account, complete a transaction, provide support or permit continued use of some or all of the Platform.

We may disclose personal data only to the extent reasonably necessary for the purposes described in this Privacy Policy, including to:

Stripe acts under its own legal responsibilities for parts of its payment, identity, fraud-prevention and compliance processing. Stripe may process personal data in countries outside the country of the user. Users should review Stripe’s own privacy notice for details of its processing.

Availability of particular payment or payout methods may depend on the user’s country, Stripe’s services and regulatory requirements.

SATHUN Global operates an international marketplace. Personal data may therefore be accessed, disclosed to or processed by Suppliers and service providers located outside Cyprus and outside the European Economic Area (EEA), including where this is necessary to fulfil an international order.

Where the GDPR requires safeguards for a transfer outside the EEA, we will rely on an applicable lawful transfer mechanism, such as an adequacy decision of the European Commission, the European Commission’s Standard Contractual Clauses (SCCs), or another mechanism permitted by data-protection law. Where appropriate, supplementary technical or organisational safeguards may also be used.

Certain transfers may be necessary to perform a contract requested by the individual, such as supplying delivery details to a non-EEA Supplier for an international order. Users may contact us for further information about the applicable transfer mechanism.

The Platform may use cookies, local storage, software development kits, pixels and similar technologies to operate securely, remember preferences, maintain sessions, understand performance and, where enabled and lawfully permitted, support analytics or marketing.

We may send marketing communications where the recipient has consented or where another lawful basis permits this. Marketing preferences can be changed at any time by using an unsubscribe link, adjusting available account settings or contacting us.

Administrative, security, transactional and service messages are not marketing and may still be sent where necessary.

We retain personal data only for as long as reasonably necessary for the relevant purpose and to satisfy legal, accounting, tax, consumer-protection, payment, fraud-prevention and dispute-resolution requirements.

We use appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. Measures may include access controls, authentication, encryption in transit where appropriate, logging, backups, service-provider controls and procedures for managing incidents.

No internet service or storage system can be guaranteed to be completely secure. Users are responsible for keeping their login credentials confidential and should notify us promptly of suspected unauthorised access.

Subject to the GDPR and any applicable limitations, individuals have the following protected rights:

We may use automated tools to identify potentially fraudulent, unsafe or prohibited activity, prioritise reviews or support payment and account-security decisions. Unless users are specifically informed otherwise, SATHUN Global does not make decisions based solely on automated processing that produce legal or similarly significant effects.

Payment providers may operate their own automated fraud and compliance systems under their respective privacy notices.

The Platform is intended for persons aged 18 years or over and is not directed to children. We do not knowingly permit a child to create a Customer or Supplier account. If we become aware that a child’s personal data have been collected contrary to this section, we will take reasonable steps to delete or otherwise lawfully address the data.

We encourage individuals to contact us first so that we can try to resolve any privacy concern. Individuals also have the right to lodge a complaint with the Office of the Commissioner for Personal Data Protection of Cyprus or, where applicable, another competent supervisory authority in the EEA.

Official Supervisory Authority: Office of the Commissioner for Personal Data Protection of Cyprus (https://www.dataprotection.gov.cy).

The Platform may contain links to Supplier pages, external websites, applications or services that are not controlled by SATHUN Global. We are not responsible for the privacy practices of independent third parties. Users should review the privacy information provided by those third parties before supplying personal data.

We may update this Privacy Policy to reflect changes in the Platform, our processing activities, service providers or applicable law. The revised version will be published on the Platform with an updated “Last updated” date.

Where a change is material, we will provide additional notice where reasonably appropriate or legally required. Where processing depends on consent, a material change will not replace the need to obtain new consent when required.

Questions, complaints and requests concerning this Privacy Policy or personal data may be sent to Sunita Shahi (Sole Trader trading under THAKURI BRAND, Operator of SATHUN Global).