Privacy Policy

ShopSphere ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you visit our website or make a purchase. Please read this policy carefully.

• Personal information you provide when creating an account (name, email, phone number, billing and shipping address).
• Payment information processed securely by our PCI-compliant payment partners. We never store full card numbers.
• Order history, browsing behaviour, wishlist items, and product reviews you submit.
• Device information, IP address, browser type, and usage data collected automatically via cookies and analytics tools.
• Communications you send us via email, chat, or our contact forms.

• Process and fulfil orders, including sending shipping and delivery notifications.
• Manage your account and provide customer support.
• Send transactional emails (order confirmations, receipts, return updates).
• Send promotional communications — only with your consent, which you can withdraw at any time.
• Improve our website, personalise your experience, and conduct internal analytics.
• Prevent fraud, enforce our terms, and comply with legal obligations.

• We do not sell, rent, or trade your personal data to third parties.
• We share data with trusted service providers (payment processors, shipping carriers, analytics platforms) under strict data processing agreements.
• We may disclose information when required by law, court order, or to protect the rights and safety of ShopSphere and its users.
• In the event of a merger or acquisition, your data may be transferred as part of business assets with prior notice.

• We use 256-bit SSL/TLS encryption for all data transmitted between your browser and our servers.
• Payment data is processed by Stripe and never touches our servers in unencrypted form.
• Access to personal data is restricted to authorised personnel on a need-to-know basis.
• We conduct regular security audits and penetration testing.
• In the event of a data breach, we will notify affected users within 72 hours as required by applicable law.

• We retain account data for as long as your account is active or as needed to provide services.
• Order records are retained for 7 years for legal and tax compliance purposes.
• You may request deletion of your account and personal data at any time via our Contact page.
• Some data may be retained in anonymised or aggregated form for analytics after deletion.

• Access: You may request a copy of the personal data we hold about you.
• Rectification: You may correct inaccurate or incomplete data via your account settings.
• Erasure: You may request deletion of your personal data ("right to be forgotten").
• Portability: You may request your data in a structured, machine-readable format.
• Objection: You may object to processing of your data for marketing purposes at any time.
• To exercise any of these rights, contact privacy@shopsphere.com.