Privacy Policy

1. Data We Collect

a) Account & Identity Data

When you register, we collect your full name, business name, email address, hashed password, and your role within your organisation.

b) Business & Operational Data

Data you enter into the platform — including products, inventory, sales transactions, customer records, supplier records, purchase orders, and expense entries — is owned by you and processed on your behalf.

c) Usage & Technical Data

We automatically collect browser type, device information, IP address, approximate location, pages visited, features used, and error/performance diagnostics to operate and improve the Service.

d) Communications Data

If you contact us for support, we retain the contents of that communication to resolve your query.

2. How We Use Your Data

• To provide and operate the Service
• To improve the platform through usage analysis
• To send service communications (updates, security alerts, billing notices)
• To provide support and troubleshoot issues
• To enforce our Terms of Use and prevent fraud or abuse
• To comply with applicable legal obligations

We do not sell your personal or business data to third parties, nor use it for advertising.

3. Data Storage & Security

Your data is stored on secure cloud infrastructure. We apply encryption in transit (HTTPS/TLS), encryption at rest for sensitive fields, access controls limiting staff access, and role-based permissions within your shop.

No system is completely secure. You are responsible for maintaining the confidentiality of your login credentials.

4. Data Sharing & Third Parties

We do not sell, trade, or rent your data. We share limited information only with trusted providers bound by confidentiality obligations, including our cloud hosting provider, transactional email service, and error monitoring tools. We may disclose data when required by law or court order.

5. Data Retention

• Account and business data is retained while your account is active, and for a reasonable period thereafter
• Upon account deletion, you may request full data deletion (subject to legal retention requirements)
• Usage and diagnostic logs are retained for up to 12 months

6. Your Rights

You have the right to access, correct, or delete your personal data; export your business data in CSV format; and withdraw consent where processing is consent-based. Contact us to exercise any of these rights.

7. Cookies

MyShop uses only session cookies (to keep you logged in) and CSRF tokens (to protect your account). We do not use tracking, advertising, or third-party analytics cookies within the authenticated application.

8. Children's Privacy

The Service is intended for individuals aged 18 and over. We do not knowingly collect data from children under 18.

9. Contact Us

For questions or requests about this Privacy Policy or your personal data:

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or in-app notice. Continued use of the Service after changes are posted constitutes acceptance of the updated policy.