Skip to main content

GDPR Compliance

This page addresses new data regulations and explains how LitGroup Joint Stock Company (“LitGroup”, “we”, “us”) processes personal data across its brands — including LitCommerce, LitExtension, LitOS and BulkFlow — to better guarantee our customers security and control over their personal information.

What is GDPR?

The General Data Protection Regulation (GDPR) is a regulation in EU law on data protection and privacy for all individuals within the European Union (EU) and the European Economic Area (EEA). It also addresses the export of personal data outside the EU and EEA areas. The GDPR aims primarily to give control to citizens and residents over their personal data and to simplify the regulatory environment for international business by unifying the regulation within the EU.

Because LitCommerce deals with the personal data of EU citizens, the proper treatment of personal data of all clients, regardless of their nationality, is our company’s primary goal. We have taken a set of measures to get compliant with EU data protection requirements and we have also made the treatment of sensitive data even more transparent.

Who is the Data Controller?

LitCommerce is a trading brand of LitGroup Joint Stock Company (“LitGroup”), a company registered in Vietnam. LitGroup is the Data Controller responsible for personal data collected through LitCommerce.

LitGroup also operates other brands, including:

  • LitExtension — data migration services
  • LitOS — front-end / storefront development services
  • BulkFlow — Data import, export & update

These brands are not separate legal entities. They are operated by the same company, LitGroup, and may share internal systems used to support customers and to offer related services (see “Legal basis” and “Your choices”).

International data transfers

LitGroup is based in Vietnam, outside the EU/EEA. Where we process personal data of individuals in the EU/EEA, that data may be transferred to and stored in Vietnam. Vietnam is not covered by an EU adequacy decision, so we put in place appropriate safeguards for such transfers, like Standard Contractual Clauses.

Who we share your data with

To provide the LitCommerce service, we share the data necessary to operate your account with: (i) the marketplaces and sales channels you choose to connect (for example eBay, Etsy, Amazon, Walmart, TikTok Shop), so your listings, orders and inventory can be synced; and (ii) service providers acting as processors on our behalf (such as hosting, payment and analytics providers). We may also share data internally across LitGroup brands as described above.

Quick summary of the updates?

LitCommerce guarantees that every client or website visitor has the right to:

  • Inquire why and at what steps of cooperation the personal data is collected.
  • Agree or disagree on providing personal info during the very first interaction with the website/service.
  • Know what kind of information is collected by LitCommerce and how it will be processed.
  • Request correction, amendment or extraction of their personal data.
  • Ask to specify the ways the data provided is secured by LitCommerce.
  • Opt out, at any time, of receiving information about related services from other LitGroup brands.

Why does LitCommerce collect personal data?

Here is why we collect customers personal information:

  • To operate your LitCommerce account and provide our multichannel selling services, including connecting and syncing your store with the marketplaces and channels you select.
  • To send important information about your account, including service notifications, billing, and support-related communications.
  • With your consent, to inform you about related services offered by other LitGroup brands (such as LitOS storefront/front-end development) that we believe may be relevant to your business. This is optional, separate from your LitCommerce service, and explained under “Legal basis” and “Your choices” below.

Legal basis for this processing

For the purposes above, we rely on the following legal bases under the GDPR:

  • Performance of a contract / your request (Art. 6(1)(b)) — for operating your account and providing the LitCommerce service you signed up for.
  • Consent (Art. 6(1)(a)) — to inform you about related services offered by other LitGroup brands. We ask for your opt-in at the point of data collection (chat, contact form, signup), and you can withdraw your consent at any time without affecting your LitCommerce service.
  • Legitimate interest (Art. 6(1)(f)) — relied on only where permitted as a fallback, and only for outreach directly relevant to the service you use; you may object at any time.

Your choices

You can choose whether to receive information about related services from other LitGroup brands at any time:

  • At the point of first contact or signup (e.g. live chat, contact form, account creation), you will be asked whether you’re open to hearing about related services from LitGroup brands.
  • At any time afterward, you may opt out by replying “No thanks” to any such message, or by contacting us at ([email protected]).
  • Opting out does not affect your LitCommerce service in any way.

Your rights under the GDPR

Subject to applicable law, you have the right to: access your personal data; rectify inaccurate data; erase your data (“right to be forgotten”); restrict or object to processing; data portability; and withdraw consent at any time. You also have the right to lodge a complaint with your local data protection supervisory authority. To exercise any of these rights, contact us at ([email protected]).

How long is the data being saved?

We’ll keep the record of the personal information you have provided for 30 days since the last interaction with us. When the period expires, your personal information gets deleted and the process is irreversible.

How is the data protected?

LitCommerce has had 10 years experience in treating and protecting information. Some of the major LitCommerce security measures include:

  • Server Security: Our servers are hosted in secure, access-controlled data centers and protected by firewalls, encryption in transit (SSL/TLS), and continuous monitoring to prevent unauthorized access and minimize downtime.
  • Data Security: Personal and store data is stored on protected infrastructure and encrypted where appropriate, with regular backups so your information stays safe and recoverable.
  • Data Access Security: Access to customer data is granted on a strict need-to-know basis, controlled by role-based permissions and authentication, so only authorized staff can access the information required to support you.
  • Non-Disclosure Agreement (NDA): All LitCommerce employees and relevant partners are bound by confidentiality and NDA obligations that legally prohibit them from disclosing or misusing your data.
  • Payment Security: Payments are processed through trusted, PCI-DSS compliant third-party payment providers. LitCommerce does not store your full payment card details on its own servers.

In case you need further assistance

LitCommerce Support Team will be happy to provide you with any assistance regarding your personal details or give you comprehensive answers for the way your data are treated by our system.