1. Scope and roles
This policy applies to email sent by admorris GmbH about HYPRCART and to email that a Customer sends or causes to be sent through HYPRCART. It forms part of the Terms when a Customer uses email functions.
For HYPRCART's own sales, subscription and business communications, admorris GmbH is the controller. For a Customer's recipient lists, campaigns and transaction messages, the Customer is normally the controller and admorris GmbH acts as processor under the DPA. The Customer remains the sender responsible for its campaign and recipients.
2. Sales and product communications
If you make a sales enquiry, we may reply, ask qualification questions, arrange a demonstration and send closely related HYPRCART information. An enquiry is not consent to unrelated third-party advertising. You can ask us to stop non-essential updates at any time by replying or emailing hello@hyprcart.com.
We may still send messages necessary to handle an active enquiry, perform a subscription, protect security, comply with law or administer a customer account.
3. Requirements for Customer email
Before sending through HYPRCART, a Customer must:
- have and document a valid legal basis and any consent required for each recipient and message type;
- comply with the GDPR, Austrian TKG 2021 and the electronic-marketing law applicable to each recipient;
- use the existing-customer exception only where every statutory condition is met;
- accurately identify the sender and not use deceptive headers, domains, subjects or content;
- include a working, clear and free unsubscribe method in marketing messages;
- honour opt-outs promptly and maintain suppression records;
- keep recipient data accurate, minimise collection and provide the required privacy information; and
- configure authentication and sender domains as instructed, including SPF, DKIM and DMARC where supported.
The Customer must be able to provide reasonable evidence of source, notice, consent and permission on request.
4. Prohibited practices
Customers must not use HYPRCART to:
- send unsolicited bulk email, purchased, scraped, harvested or randomly generated lists;
- send to role accounts or distribution lists without a documented, relevant relationship;
- hide the sender, impersonate another person, phish, distribute malware or facilitate fraud;
- send unlawful, infringing, discriminatory, threatening or materially deceptive content;
- circumvent suppression lists, unsubscribe controls, sending limits or provider policies;
- use address validation or tracking in a manner that violates law or the recipient's choices; or
- generate complaint, bounce or abuse levels that threaten shared infrastructure or other users.
5. Transactional and marketing messages
Transactional email must be limited to information objectively necessary for a requested transaction, account, security event or service. Adding promotional content may turn it into direct marketing and trigger consent and unsubscribe requirements.
Marketing consent must be freely given, specific, informed and unambiguous where the GDPR consent standard applies. A Customer must not make unrelated marketing consent a condition of buying a product. Withdrawal must be as easy as giving consent.
6. Delivery controls and enforcement
To protect recipients and deliverability, we and our delivery providers may process delivery, bounce, complaint, open/click where lawfully enabled, unsubscribe and abuse signals. We may throttle, quarantine or stop messages; require list re-confirmation; suspend a sender or domain; and preserve evidence when we reasonably suspect abuse, illegality or risk to shared infrastructure.
We will take scope and urgency into account and, where practical, allow correction. Serious spam, phishing, malware, evasion or repeated breach may result in immediate suspension or termination. The Customer remains liable for charges and third-party claims caused by its unlawful sending.
7. Reporting unwanted email
Report suspected abuse to legal@hyprcart.com with the full message headers, sending domain, date/time and a description. Do not forward sensitive message content unless needed for investigation. We may share a report with the relevant Customer or delivery provider while protecting the reporter where reasonably possible.