At Shoptsy, we are committed to protecting your personal information in accordance with the General Data Protection Regulation (GDPR). This Privacy Policy outlines how we collect, use, disclose, and safeguard your data when you interact with our website and services.
- 1. Business Information
Company Name: Kapsus Technologies Limited
Registered Address: Block A, 15/F Hillier Commercial Building, 65-67 Bonham Strand East, Sheung Wan, Hong Kong
Operating Region: Europe
- 2. Information We Collect
We collect the following types of personal data in accordance with Article 6 of the GDPR:
2.1 Personal Data (collected with user consent and legal basis)
- Full name
- Email address
- Phone number
- Billing & shipping addresses
2.2 Payment Information (processed via third-party payment providers; not stored by us)
- Credit/debit card details
- Digital wallets (e.g., PayPal, Google Pay, Apple Pay)
2.3 Technical & Device Data (collected via legitimate interest for service improvement)
- IP address
- Browser type & version
- Operating system
- Device type
- Browsing behavior
2.4 Cookies & Tracking Technologies (used with explicit consent via cookie banner)
- Session cookies for authentication
- Performance cookies for analytics
- Marketing cookies for targeted ads
2.5 Location Data (used only when necessary for delivery tracking or personalized services)
We may collect location data for features like delivery tracking and store recommendations.
- 3. Legal Basis for Processing Personal Data (GDPR Compliance)
We process your personal data based on the following legal grounds under Article 6 of the GDPR:
- Consent (Article 6(1)(a)) → When you provide explicit consent (e.g., signing up for newsletters).
- Contractual Necessity (Article 6(1)(b)) → To process orders, payments, and fulfill transactions.
- Legal Obligation (Article 6(1)(c)) → To comply with tax, accounting, and regulatory requirements.
- Legitimate Interests (Article 6(1)(f)) → To improve security, prevent fraud, and enhance user experience.
- 4. How We Use Your Data
We use your personal data for the following purposes:
4.1 Order Processing & Account Management
- Processing payments
- Managing user accounts
- Fulfilling and tracking orders
4.2 Customer Support & Service Communication
- Resolving complaints and inquiries
- Sending transaction confirmations
4.3 Marketing & Advertising (With Consent)
- Sending promotional emails & newsletters
- Offering personalized product recommendations
4.4 Security & Fraud Prevention
- Detecting and preventing unauthorized transactions
- Ensuring website security
4.5 Compliance with Legal & Regulatory Requirements
- Responding to government and law enforcement requests
- 5. How We Share Your Data
We do not sell your data. However, we may share it with:
- Third-Party Service Providers (under Data Processing Agreements - DPAs)
- Payment processors (e.g., Stripe, PayPal)
- Shipping & delivery partners
- Cloud storage providers (AWS, EU-based)
- Legal Authorities (when required by law)
We ensure that all third-party providers comply with GDPR and offer adequate data protection measures.
- 6. International Data Transfers
Since Shoptsy is based in Hong Kong, some data may be transferred outside the EEA. When we transfer data, we ensure:
- EU Standard Contractual Clauses (SCCs) for legal compliance.
- Adequate safeguards to protect personal data as per Article 46 of the GDPR.
- You can request more information on data transfers by contacting support@shoptsy.eu.
- 7. Data Security Measures
We take appropriate security measures to protect personal data, including:
- Encryption for stored and transmitted data
- SSL (Secure Sockets Layer) for secure website connections
- Access controls & 2FA for account security
- Regular security audits to detect vulnerabilities
Despite our best efforts, no online platform is 100% secure, so we encourage users to take precautions.
- 8. Data Retention Policy
We store personal data only as long as necessary, based on the following criteria:
- Active Accounts: Until the user deletes their account
- Inactive Accounts: User accounts will be deleted after 5 years of inactivity, unless retention is required for legal or regulatory compliance. Users will receive a notification before account deletion with the option to reactivate.
- Legal & Tax Compliance: Transaction-related data (e.g., invoices, payment records) will be retained for 10 years to comply with EU tax and financial regulations. Employment, payroll, and contractual data may be retained for up to 7 years as required by employment and commercial laws.
Upon account deletion, we erase all personal data unless required for compliance.
- 9. User Rights (GDPR Compliance)
As an EEA resident, you have the following rights under Chapter 3 of the GDPR:
- Right to Access (Article 15) → Request a copy of your personal data.
- Right to Rectification (Article 16) → Correct inaccurate or incomplete data.
- Right to Erasure (Article 17) → Request deletion of personal data (subject to legal exceptions).
- Right to Restriction (Article 18) → Limit data processing under specific conditions.
- Right to Data Portability (Article 20) → Receive your data in a structured format.
- Right to Object (Article 21) → Object to data processing for marketing or legitimate interests.
How to Exercise Your Rights
To submit a request, email
support@shoptsy.eu with your request details.
If you believe your data rights are violated, you can file a complaint with your local Data Protection Authority (DPA).
- 10. Cookies & Tracking Technologies
We use cookies for essential and marketing purposes. Users must explicitly opt-in before we place non-essential cookies.
You can manage or withdraw cookie consent via:
- The cookie settings on our website
- Your browser settings
- For more details, visit our Cookie Policy
- 11. Children's Privacy
We do not knowingly collect data from individuals under 16 years old in the EEA. If you suspect that we have collected data from a minor, please contact us for removal.
- 12. Policy Updates & Changes
We may update this Privacy Policy whenever necessary due to:
- New legal regulations
- Changes in business operations
- Last Updated: February 4, 2025
- 13. Contact Information
Address: Block A, 15/F Hillier Commercial Building, 65-67 Bonham Strand East, Sheung Wan, Hong Kong
By using Shoptsy's services, you confirm that you have read and understood this Privacy Policy and consent to data processing as described.