Channekt › Privacy
Privacy
How Channekt collects, uses, protects and retains personal data.
Last updated 1 September 2026Who we are
Channekt is a multichannel commerce platform operated by Axicom. Privacy enquiries and requests can be sent to support@channekt.com.
Controller and processor
Channekt has different responsibilities depending on the personal data involved.
Merchant account data. Channekt is the controller for account, contact and subscription information relating to merchant users.
Merchant customer data. The merchant is the controller for personal data received with orders. Channekt acts as processor and handles that data only on the merchant's instructions.
The data processing agreement governs processor obligations under Article 28. It applies from account creation, and a countersigned copy is available on request.
Data we process
About the merchant
- the name and email address of each person given access
- a password stored in a non-readable, hashed form
- sessions, roles and records of key changes
- subscription plan, status and payment-service reference
About the merchant's customers
Only what an order carries and a parcel needs:
- name, email address, telephone number
- billing and delivery address
- the channel's customer identifier
- purchased items and order values
Payment card details. Channel payments are processed by the relevant shop or marketplace, and Channekt subscriptions use hosted payment checkout. Channekt does not store payment card details.
Data location
| Application and database | United Kingdom |
|---|---|
| Database | Private network access only |
| Files and documents | European Union |
| Backups | Provider-managed daily backups with point-in-time recovery |
| Transport | Encrypted in transit with HTTPS |
The application and database are hosted in the United Kingdom. Files and documents are stored in the European Union.
Data is encrypted in transit and at rest. Channel credentials receive additional encryption, with keys managed separately from the application database.
Service providers
| Service category | Purpose |
|---|---|
| Cloud infrastructure | Hosting, database, queues, backups and file storage |
| Security and delivery | DNS, encrypted traffic, edge protection and media delivery |
| Billing | Subscription management and payment processing |
| Optional product assistance | Optional in-product assistance when enabled |
The sub-processors page identifies the current providers, their purpose and processing area. It is the authorised list the data processing agreement refers to, and merchants get at least 30 days' notice before anything is added to it.
Connected shops and marketplaces are merchant-selected destinations rather than Channekt sub-processors. Data is exchanged with them under the merchant's instructions.
Access controls and logging
Access is controlled by role. Protected screens and endpoints enforce the same permission catalogue, so a role without permission to read orders cannot access them through the interface or API.
Access to customer details through the order workflow is recorded with the user, time, source address and affected records. This provides a specific record for access reviews and incident investigations.
Access records use identifiers such as an order ID rather than copied customer details. Search terms are excluded because they may contain personal data.
The record is kept for twelve months and then deleted.
Retention
Service data is retained while the merchant's account is active and for the periods required by the merchant's operational and legal obligations.
After account closure, data is deleted according to the account retention policy, except where applicable law requires specific records to be retained.
Marketplace buyers are on a shorter clock. Where a connected marketplace sets a maximum period for holding a buyer's personal data, that period is applied automatically rather than on request. For Amazon orders the period is thirty days: the buyer's name, email address, telephone number, street address and the marketplace's own customer reference are redacted thirty days after the order is dispatched, and an order that was never dispatched is measured from the date it was placed. The order, its lines, its totals and its destination country are kept as the commercial and tax record. Customers of a merchant's own shop are the merchant's own records and are not on this clock.
Erasure
Erasure requests received from a connected marketplace are recorded before processing. Incomplete requests remain pending and are retried automatically.
Identifying fields are removed while non-personal financial and inventory records are retained where required. Personal details are not copied into operational logs during this process.
Your rights
Under the UK GDPR and GDPR, an individual may request access, correction, erasure, restriction, objection or portability where those rights apply.
If you bought from a merchant that uses Channekt, contact that merchant as the data controller. Channekt processes the request on the merchant's instruction. Requests submitted through supported marketplace privacy tools are handled through the same process.
If you work at a merchant, write to support@channekt.com. You may also complain to a supervisory authority.
Cookies
This website uses Google Analytics to count which pages are read
and where visitors come from, and only if you agree. Until you press
Accept, nothing from Google is loaded and no cookie is set. If you accept, Google sets
the _ga and _ga_* cookies, which last up to two years. Google
Ireland Limited processes this data for us; it is not used for advertising.
Your choice is kept in your browser's local storage, not in a cookie. Change your cookie choice at any time; rejecting removes the Google Analytics cookies from this site.
The application at app.channekt.com uses a secure, HTTP-only session cookie for authentication. It does not use advertising cookies.
Security
- password hashing and compromised-password checks
- organisation isolation at application and database layers
- additional encryption for channel credentials
- key account and operational changes recorded in an audit trail
- a documented process for incident classification, containment, investigation and notification
The security page describes these controls in more detail, including access control, infrastructure, recovery and incident response.
Security reports are welcome at support@channekt.com and acknowledged within one working day.
Changes to this page
Merchants are notified before a material change affecting the processing of personal data takes effect. The date at the top identifies the latest update.