Privacy Policy

1. Introduction

VERDALIS LTD ("we", "our", or "us") operates MyShopStats (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

We are committed to protecting your privacy and ensuring the security of your personal data in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Data Controller

3. Information We Collect

3.1 Personal Information

When you register for an account or use our Service, we may collect:

• Email address
• Full name (if provided)
• Payment and billing information (processed securely by Stripe Inc.)
• Company or business name (if provided)
• Account preferences and settings

3.2 Automatically Collected Information

We automatically collect certain technical information when you access our Service:

• IP address and approximate geographic location
• Browser type, version, and language preferences
• Device type and operating system
• Pages visited, features used, and time spent on the Service
• Referring website or source
• Date and time of access

3.3 Analytics Data

When you use our competitor analysis and store research features, we process publicly available information from e-commerce stores, including product listings, pricing data, store metadata, and other publicly accessible information.

4. Purpose of Processing

We process your personal data for the following purposes:

• Service Delivery: To provide, operate, and maintain the MyShopStats platform
• Account Management: To create and manage your user account
• Transaction Processing: To process payments and manage subscriptions
• Communication: To send service-related notifications, updates, and support responses
• Service Improvement: To analyze usage patterns and improve user experience
• Security: To detect, prevent, and address technical issues, fraud, and security threats
• Legal Compliance: To comply with applicable laws, regulations, and legal requests

5. Legal Basis for Processing

Under the UK GDPR, we process your personal data on the following legal grounds:

• Contractual Necessity: Processing necessary for the performance of our contract with you (providing the Service)
• Legitimate Interests: Processing necessary for our legitimate business interests (service improvement, security, fraud prevention)
• Consent: Where you have provided explicit consent for specific processing activities
• Legal Obligation: Processing necessary to comply with our legal obligations

6. Data Sharing and Third Parties

We may share your information with carefully selected third-party service providers who assist us in operating our Service:

• Stripe Inc.: Payment processing and subscription management
• Supabase Inc.: Database hosting and authentication services
• Vercel Inc.: Website hosting and analytics

We may also disclose your information when required by law, court order, or government request, or to protect our rights, property, or safety.

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

7. International Data Transfers

Your information may be transferred to and processed in countries outside the United Kingdom, including the United States (where some of our service providers are located). When we transfer data internationally, we ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses approved by the UK Information Commissioner
• Transfers to countries with adequacy decisions
• Other legally approved transfer mechanisms

8. Data Retention

We retain your personal data for as long as your account remains active or as necessary to provide our Service to you. Upon account deletion or request, we will delete or anonymize your personal data within 30 days, unless retention is required for:

• Compliance with legal obligations
• Resolution of disputes
• Enforcement of our agreements
• Fraud prevention and security purposes

9. Your Data Rights

Under UK GDPR, you have the following rights regarding your personal data:

• Right of Access: Request a copy of the personal data we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data ("right to be forgotten")
• Right to Restriction: Request restriction of processing in certain circumstances
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests or direct marketing
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent

To exercise any of these rights, please contact us at privacy@myshopstats.com

10. Data Security

We implement appropriate technical and organizational security measures to protect your personal data, including:

• Encryption of data in transit using TLS/SSL
• Secure authentication and access controls
• Regular security assessments and monitoring
• Secure data storage with reputable providers

While we strive to protect your data, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

11. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to:

• Essential Cookies: Necessary for the Service to function properly (authentication, security)
• Analytics Cookies: Help us understand how visitors interact with our Service (Vercel Analytics)

You can control cookie preferences through your browser settings. Note that disabling essential cookies may affect Service functionality.

12. Children's Privacy

Our Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately at privacy@myshopstats.com

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.

14. Complaints

If you are not satisfied with how we handle your personal data or believe your data protection rights have been violated, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

15. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us: