Privacy Policy

We collect the following types of information:

Account Information

• Name, email address, and password (hashed)
• Role (Shopper or Supplier)
• For Suppliers: business name, registration documents, bank details (via Stripe)

Transaction Data

• Order history, products purchased, and amounts
• Shipping addresses
• Payment method details (stored securely by Stripe — we never store card numbers)

Usage Data

• Pages visited, search queries, product views
• IP address, browser type, device information
• Cookies and similar tracking technologies

• To process orders and facilitate payments
• To verify Supplier identity (KYB) and prevent fraud
• To send order confirmations, shipping updates, and receipts
• To personalise your shopping experience and AI-powered recommendations
• To calculate and distribute BTCY crypto rewards
• To improve our platform, fix bugs, and develop new features
• To comply with legal obligations

We do not sell your personal data. We share information only with:

• Suppliers: Shipping address and order details for fulfilment
• Stripe: Payment processing and Supplier payouts
• Shipping Carriers: Name and address for delivery
• Service Providers: Cloud hosting, email, analytics (bound by data processing agreements)
• Law Enforcement: When required by law or to protect rights and safety

We use cookies and similar technologies to:

• Keep you logged in (authentication tokens)
• Remember your cart and preferences
• Analyse site traffic and usage patterns

You can disable cookies in your browser settings, though some features may not function correctly.

We retain your account data for as long as your account is active. Transaction records are retained for 7 years for legal and tax compliance. You may request deletion of your account at any time; we will delete your data within 30 days, except where retention is required by law.

Depending on your location, you may have the right to:

• Access: Request a copy of your personal data
• Correction: Update inaccurate information
• Deletion: Request deletion of your account and data
• Portability: Receive your data in a machine-readable format
• Opt-out: Unsubscribe from marketing emails at any time

To exercise these rights, email privacy@shoperpal.com.

We implement industry-standard security measures including TLS/HTTPS encryption, hashed passwords (bcrypt), and PCI-DSS compliant payment processing via Stripe. However, no system is completely secure and we cannot guarantee absolute security.

ShoperPal is not directed to children under 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us with their data, please contact us immediately.

We may update this Privacy Policy periodically. We will notify you of significant changes via email or a notice on the Platform. Your continued use of the Platform after changes constitutes acceptance.