1. EEA, United Kingdom and Switzerland
Kaltiq and Businesses must comply with applicable GDPR/UK GDPR/Swiss duties, including roles, lawful bases, transparent notices, minimisation, contracts, security, rights, DPIAs, breach response and transfer safeguards. The interim regional and DPO contact is admin@kaltiq.com; any legally required local representative must be formally appointed and published before production launch. Where the EU Digital Services Act applies, notice-and-action, reasons, appeals and transparency duties apply. Where the EU Platform-to-Business Regulation applies, Kaltiq will provide plain accessible terms, required change notice, ranking/data-access disclosures, reasons for restriction, an internal complaint process and ordinarily 30 days’ termination notice unless a statutory exception applies.
Electronic marketing, calling and device storage must comply with ePrivacy/PECR and national rules. Consent must be specific and provable where required; sender identity and opt-out cannot be hidden.
2. United States
Kaltiq’s platform privacy disclosures and applicable state rights are described in the Business Privacy Notice. Businesses remain responsible for state privacy thresholds, sensitive/biometric information, call-recording consent, consumer protection, sales tax, licences and sector law. Commercial email must satisfy CAN-SPAM, including truthful routing/subjects, advertising identification where required, a valid physical address, functioning opt-out and timely suppression. Calls/texts must meet TCPA/FCC consent and revocation rules. Advertising, endorsements, reviews, pricing and earnings/health claims must be truthful, substantiated and disclose material connections.
3. India
Where applicable and in force, Kaltiq and Businesses must satisfy the Digital Personal Data Protection Act and phased Rules, including notice, lawful processing, security, rights, grievance contacts and child protections. Consumer-facing Business Profiles must comply with the Consumer Protection Act and E-Commerce Rules, including accurate seller/product information, complaint handling, pricing/refunds and prohibitions on unfair trade practices. Payments, telecommunications, tax and regulated-product requirements remain separate.
4. Brazil
The LGPD requires appropriate controller/processor roles, legal bases, transparency, rights, security, transfers and a published contact. Consumer commerce must meet applicable consumer-code duties. Services involving children or adolescents require best-interests protections under Brazil’s child-focused digital framework.
5. Canada
PIPEDA or provincial privacy laws may require accountability, meaningful consent, minimisation, safeguards, access and correction. CASL generally requires consent or a valid statutory basis for commercial electronic messages, sender/contact identification, proof, a working unsubscribe and prompt suppression. The Business remains responsible even when a service provider sends on its behalf.
6. Australia and New Zealand
Applicable privacy principles cover notice, security, access/correction, retention and cross-border disclosure. Commercial electronic messages and telemarketing must meet consent/identification/unsubscribe and register rules. Businesses remain responsible for consumer guarantees, misleading claims, refunds and product safety.
7. Singapore and other APAC/Middle East markets
Singapore’s PDPA requires accountable purposes, notice/consent or another permitted basis, withdrawal, access/correction, protection, retention limits, transfers and a DPO contact; Do Not Call and marketing rules may also apply. Japan, South Korea, Indonesia, Thailand, Malaysia, the Philippines, UAE and other markets may require localisation, representatives, consent, breach reporting, telecom or commerce licences. Features remain disabled until approved.
8. Geographic enforcement
Kaltiq may use account country, IP, device locale, payment/wallet signals and authorised precise location to apply restrictions. VPN/proxy risk may trigger challenge, degradation or blocking. Reviewer overrides are solely for authorised store testing and never bypass law. Businesses may appeal inaccurate country classification.