Privacy Policy
Effective Date: 4 August 2025
Business Name: Shopthology
Data Controller: Shopthology Ltd, UK
​
​
1. Introduction
​
Shopthology is committed to protecting your privacy. This policy outlines how we collect, use, store, and disclose your personal data, in compliance with the UK GDPR and the Data Protection Act 2018.
​
2. Information We Collect
​
We may collect the following personal and business data:
-
Contact information (name, email, phone)
-
Business details (company name, website, VAT number)
-
Advertising platform access tokens or login credentials (with your permission)
-
Billing and invoicing details
-
Communication logs and project notes
We also collect technical data from our website including:
-
IP address
-
Browser type and version
-
Pages visited
-
Time spent on our website
​
3. How We Use Your Data
​
We use your data to:
-
Provide marketing services
-
Process payments and invoices
-
Communicate with you about your campaigns
-
Improve our website and services
-
Comply with legal obligations
We will never sell or rent your personal information.
​
4. Legal Basis for Processing
​
We process data on the following legal grounds:
-
Performance of a contract
-
Legitimate interest (e.g., improving services)
-
Legal compliance
-
Consent (for marketing, if applicable)
​
5. Data Sharing
​
We may share your data with:
-
Cloud storage providers (Google Workspace, Notion, Dropbox)
-
Payment processors (e.g., Stripe, GoCardless)
-
Advertising platforms (e.g., Meta, Google, TikTok)
-
Subcontractors or freelancers under strict confidentiality agreements
We ensure all third parties are GDPR-compliant.
​
​
6. Data Retention
​
We retain your data:
-
For the duration of our contract and up to 6 years thereafter (for tax and legal compliance)
-
Until you request deletion, where appropriate under data protection law
​
7. Your Rights
​
Under the UK GDPR, you have rights including:
-
Access – Request copies of your data
-
Rectification – Correct inaccurate data
-
Erasure – Request deletion of your data
-
Restriction – Request us to limit processing
-
Data portability – Transfer your data to another provider
-
Objection – Object to our processing
You can exercise your rights by contacting: privacy@shopthology.co.uk
If you're unsatisfied, you may complain to the Information Commissioner’s Office (ICO): https://ico.org.uk
​
8. Security
​
We implement technical and organisational security measures, including:
-
SSL encryption
-
Secure password policies
-
Role-based access controls
-
Regular data backups
​
9. Cookies
​
Our website uses cookies to enhance user experience and track performance. You can manage cookie preferences through your browser settings.