Data processing and retention

This page is a short summary for store owners. It sits alongside our Terms of Service and Privacy Policy. You (the store owner) decide why shoppers' data is collected. EasyStore processes it for you, only to run your store.

This is a general summary, not legal advice. [Lawyer to review and, if needed, turn this into a formal data processing agreement.]

• Shopper details: name, phone, delivery address, city, email if given;
• Orders: items, amounts, delivery charge, discount used, payment method and status, order notes, order history;
• Customer list built from your orders;
• Your store content and settings.

• Store it safely and show it to you in your dashboard;
• Show your store and take orders from shoppers;
• Send order notifications you have switched on;
• Pass details to Safepay for online payments;
• Export it for you on request (the dashboard offers CSV export for products and orders);
• We do not use your shoppers' data to advertise to them and we do not sell it.

• Safepay: payment processing for online card and wallet payments;
• Hosting and infrastructure providers: [Hosting provider(s) and country];
• Messaging and email providers: [Providers, once chosen];
• Couriers: chosen and instructed by you; they receive delivery details from you.

• Active store: for as long as your account is open;
• After you close your account: store and order data deleted or anonymised within [Retention period, e.g. 90 days];
• Records we must keep by law (accounting, tax): for the legally required period, [Period, e.g. 6 years];
• Backups: removed on their normal cycle, up to [Backup retention, e.g. 35 days] after deletion;
• Security logs (login attempts, IP addresses): [Log retention, e.g. 12 months].

If a shopper asks you to see, correct or delete their data, you can use your dashboard or write to us at [Support email] and we will help you handle it. If a shopper writes to us directly, we will pass the request to you or answer it as appropriate.

• Collect only what you need to fulfil orders;
• Publish a privacy policy and data policy on your store (templates are in your dashboard under Pages, to review and edit yourself);
• Tell shoppers if you turn on tracking IDs such as Meta Pixel, TikTok Pixel or Google Analytics;
• Keep your login private and tell us quickly about any suspected breach.

Each store's data is kept separate from other stores. Connections use HTTPS and passwords are stored in scrambled form. See the Privacy Policy for more.

[Company legal name], [Registered address]. Email: [Support email].