Privacy Policy

1. Who we are

The website www.shopopsy.com is operated by ShopOpsy (“ShopOpsy”, “we”, “us”). ShopOpsy is the controller of the personal data described in this policy, which means we decide why and how it is processed.

For any privacy question or request, email hi@shopopsy.com.

2. Personal data we collect

When you visit the website

Our hosting provider, Vercel, automatically processes technical data each time a page is requested: your IP address, browser and device information (user agent), the address of the page you requested and the date and time of the request. This is needed to deliver pages and protect the website from abuse. We don’t use it to identify you or to build a profile of you.

When you contact us

If you use the contact form, we receive the details you enter, such as your name, email address and message. The contact form is hosted by Tally. If you email us directly, we receive your email address, your name if you include it, the content of your email and any attachments.

When you use live chat

Live chat is provided by tawk.to. If you start a chat, we receive the messages you send and any name or email address you enter. tawk.to also processes your IP address and browser and device data to run the chat.

When you fill in a form

Our feedback form and the question and order forms for legal page services are hosted by Tally. We receive the answers you give, which may include your name, email address and store URL.

When you order a legal page service

We receive your name, email address, store name and URL, and the information about your business that we need to draft your documents. This can include how you sell, ship, take payments and handle returns, the apps and tracking tools you use, and the business details you want to appear in your policies. We also receive confirmation of your payment, such as the amount, date and status, from the payment provider. We don’t receive or store your card details.

Please don’t send us sensitive data, such as health information, in messages or forms. We don’t need it to help you.

Do you have to give us your data?

You can browse the website without giving us any personal data. To reply to you or deliver a service, we need your email address and the details the form asks for. Without them we can’t respond or complete your order.

3. How we use your data and why

We use personal data only for the purposes below. Where the EU or UK General Data Protection Regulation (GDPR) applies, each purpose relies on the legal basis shown.

• To run the website and keep it secure. Server logs help us deliver pages, investigate errors and prevent abuse. Legal basis: our legitimate interest in operating a secure, working website (Art. 6(1)(f) GDPR).
• To reply to your messages. We use what you send through the contact form, email, chat or forms to answer you and, for feedback, to improve our products. Legal basis: our legitimate interest in responding to inquiries and improving our products (Art. 6(1)(f) GDPR). If you contact us about a service you want to buy, the legal basis is taking steps at your request before entering into a contract (Art. 6(1)(b) GDPR).
• To deliver a service you ordered. We use your order details to draft and deliver your documents and to answer your questions about them. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
• To handle payments and keep business records. We keep order and invoice records for accounting and tax purposes. Legal basis: performance of a contract (Art. 6(1)(b) GDPR) and compliance with our legal obligations (Art. 6(1)(c) GDPR).
• To load live chat. The tawk.to chat, and the cookies and browser storage it uses, load only when you choose to start a chat. Legal basis: your consent (Art. 6(1)(a) GDPR), which you can withdraw as described in Cookies and similar technologies.
• To protect our rights. Where needed, we use relevant data to establish, exercise or defend legal claims. Legal basis: our legitimate interest in protecting our business (Art. 6(1)(f) GDPR).

We don’t use your data for advertising, and we don’t add you to a mailing list unless you ask to join one.

4. Who we share data with

We don’t sell your personal data. We share it only with the service providers that help us run the website and our business, and only as far as they need it:

• Vercel hosts the website and processes server logs (Vercel privacy notice).
• tawk.to provides live chat, only if you start a chat (tawk.to privacy policy).
• Tally hosts our contact, feedback, question and order forms (Tally privacy policy).
• The payment provider used in the order form processes your payment. You give your payment details directly to that provider, under its own privacy policy.
• Porkbun receives email sent to hi@shopopsy.com and forwards it to the mailbox provider that stores our email (Porkbun privacy policy).
• Video hosts (such as YouTube or Vimeo) stream an embedded video, only if a page offers one and you choose to play it.
• Professional advisors, such as accountants or lawyers, when we need their help. They are bound by confidentiality.
• Public authorities, when the law requires it.

Some of these providers, such as tawk.to and the payment provider, may also use data for their own purposes as independent controllers. Their own privacy policies then apply.

If ShopOpsy is involved in a merger, acquisition or sale of assets, personal data may be transferred as part of that transaction. It will stay protected as described in this policy.

5. International transfers

Some of our providers are based in, or process data in, countries outside the European Economic Area (EEA) and the UK, including the United States. These countries may not offer the same level of data protection as the country you live in.

When personal data is transferred outside the EEA or the UK, we rely on an adequacy decision, such as the EU-US Data Privacy Framework for providers certified under it, or on the Standard Contractual Clauses approved by the European Commission and their UK equivalent, together with additional safeguards where needed. You can ask us for more information about these safeguards.

6. How long we keep data

• Server logs are kept by Vercel, our hosting provider, only for the short period its log retention settings for our plan allow (usually days, not months). After that they are deleted automatically. We do not export or store them ourselves.
• Messages, chats and feedback (email, the contact form, Tally and tawk.to) are kept while we handle your request and for as long as we reasonably need them for follow-up questions. Then we delete them, unless they are part of an order.
• Order details and the documents we prepare for you are kept while we deliver the service and for as long as we reasonably need them to support you afterwards or to handle a claim about the service.
• Invoices and accounting records are kept for the period required by the tax and accounting laws that apply to us.

We may keep data longer if we need it to resolve a dispute or defend a legal claim, and only until the matter is closed. When we no longer need data, we delete it or make it anonymous.

7. Your rights

Depending on where you live, and in particular if the GDPR applies to you, you have the right to:

• Access the personal data we hold about you and get a copy of it.
• Correct data that is inaccurate or incomplete.
• Delete your data when we no longer need it or have no legal basis to keep it.
• Restrict how we use your data, for example while we check a correction.
• Receive your data in a portable format, or ask us to send it to someone else, where we process it based on your consent or a contract.
• Object to processing based on our legitimate interests.
• Withdraw your consent at any time. This doesn’t affect processing that happened before.
• Complain to a data protection supervisory authority, in particular in the country where you live or work or where you believe a problem occurred. In the UK, this is the Information Commissioner’s Office (ICO).

To use any of these rights, email hi@shopopsy.com. It’s free. We’ll reply within one month and let you know if a complex request needs more time. We may ask you to confirm your identity before we act on a request.

8. Cookies and similar technologies

ShopOpsy doesn’t set any cookies on this website, and we don’t use analytics tools, advertising pixels or other trackers. Our fonts are hosted on our own servers, so loading a page doesn’t send requests to font services such as Google Fonts.

Third parties can set cookies or use browser storage only when you use their features:

• Live chat (tawk.to). The chat loads only after you select “Start live chat”. tawk.to may then set cookies and use local storage to keep your chat session working and to recognize you if you come back. To withdraw your consent, end the chat and clear cookies and site data for tawk.to in your browser.
• Forms (Tally). The feedback form is embedded on the feedback page and loads when you open that page. Other forms open on tally.so. Tally may use cookies or similar technologies to run its forms.
• Payments. The payment provider used in an order form may set cookies needed to process payments securely and prevent fraud.
• Embedded videos. Where a page offers an embedded video, it loads only when you press play. The video host (YouTube in privacy-enhanced mode, or Vimeo with Do Not Track) may then set cookies.

If we ever start using cookies that aren’t strictly necessary, we’ll ask for your consent first and update this policy.

9. Automated decision-making

We don’t make decisions about you based solely on automated processing, including profiling, that have legal or similarly significant effects on you.

10. Security

The website is served over HTTPS. We limit access to messages and order information to the people who need it to help you, and we use providers that protect data with appropriate security measures. No method of transmission or storage is completely secure, but if a breach affects your data, we’ll notify you and the authorities where the law requires it.

11. Children

This website and our services are intended for businesses and are not directed at children under 16. We don’t knowingly collect personal data from children. If you believe a child has sent us personal data, contact us and we’ll delete it.

12. Notice for US residents

We don’t sell personal information or share it for cross-context behavioral advertising, as those terms are defined in the California Consumer Privacy Act (CCPA) and similar US state laws, and we haven’t done so in the past 12 months. We don’t use sensitive personal information to infer characteristics about you.

The categories of personal information we collect are described in Personal data we collect: identifiers (such as your name, email address and IP address), commercial information (such as orders), internet activity (server logs) and the content of your messages. Depending on your state, you may have the right to know, access, correct or delete the personal information we hold about you. To make a request, email hi@shopopsy.com. We won’t treat you differently for using these rights.

13. Changes to this policy

We may update this policy when our website, our services or the law change. We’ll post the new version on this page and update the “Last updated” date. If a change materially affects how we use personal data you’ve already given us, we’ll also tell you by email where we can.

14. Contact us

For questions about this policy or your personal data, contact ShopOpsy:

Email

hi@shopopsy.com

Website

www.shopopsy.com