This Privacy Policy explains how ZAHA Global GmbH (“we”, “us”, “MyShopie”) processes personal data when you visit www.myshopie.com, contact us, request a demo, subscribe to our newsletter, or create a MyShopie account. We process personal data in accordance with the EU General Data Protection Regulation (GDPR / DSGVO) and the German Federal Data Protection Act (BDSG).

1. Controller

The controller responsible for data processing on this website is:

Company: ZAHA Global GmbH
Managing Director: Saira Tayyab
Address: Adolfstraße 32, 52134 Herzogenrath, Germany
Email: hello@myshopie.com

For any question about this policy or to exercise your rights, contact us at hello@myshopie.com.

2. Scope: website vs. platform

This policy covers personal data we process as controller in connection with our marketing website and pre-sale relationship with you. When a merchant uses the MyShopie platform to run their own store, that merchant is the controller for their customers’ data and MyShopie acts as a processor on their behalf under a separate Data Processing Agreement (DPA) pursuant to Art. 28 GDPR. That processing is governed by the merchant’s own privacy notice.

3. Data we process when you visit the site

When you access our website, your browser automatically transmits technical data that our hosting infrastructure records in server log files:

anonymised / truncated IP address
date and time of the request
the page or file requested and the amount of data transferred
referring URL, browser type and version, and operating system

This data is necessary to deliver the website securely and reliably, to prevent abuse, and to guarantee stability. Legal basis: Art. 6 (1) (f) GDPR (our legitimate interest in a secure, functioning website). Log data is stored only as long as needed for these purposes and is then deleted or anonymised.

4. Fonts and assets

We self-host our web fonts and static assets. We do not load fonts, scripts, or stylesheets from third-party content-delivery networks such as Google Fonts, so no personal data is transmitted to those providers when you view our pages.

5. Cookies and consent

We aim to keep our website cookie-light. Strictly necessary cookies and equivalent local storage (for example, remembering your chosen currency) are used to provide functionality you have requested; these do not require consent (§ 25 (2) TDDG). Any cookies or similar technologies that are not strictly necessary — for example optional analytics — are set only after you give consent via our cookie banner (§ 25 (1) TDDG, Art. 6 (1) (a) GDPR). You can withdraw your consent at any time with effect for the future.

6. Contact and demo requests

If you contact us or submit a demo request, we process the data you provide (such as your name, shop name, number of locations, region, email address, and your message) to respond to your enquiry and, where relevant, to take steps at your request prior to entering into a contract. Legal basis: Art. 6 (1) (b) GDPR (pre-contractual measures) and Art. 6 (1) (f) GDPR (our legitimate interest in handling enquiries). We keep this data for as long as needed to process your request and in line with statutory retention periods.

7. “Email me this breakdown” (pricing calculator)

If you ask us to email you a cost breakdown from our pricing calculator, we use the email address you provide to send that breakdown. Legal basis: Art. 6 (1) (a) GDPR (consent). You can object to further contact at any time.

If you subscribe to our newsletter, we use your email address to send you product news and retail-commerce content. We use a double opt-in procedure: after signing up, you receive a confirmation email and are only added once you confirm. Legal basis: Art. 6 (1) (a) GDPR (consent). Every newsletter contains an unsubscribe link; withdrawing consent does not affect the lawfulness of processing before withdrawal.

9. Trial and account data

When you start a free trial or create a MyShopie account, we process your registration and account data (such as name, email, shop details, and billing information) to provide the service and manage the contractual relationship. Legal basis: Art. 6 (1) (b) GDPR (performance of a contract) and, for statutory bookkeeping, Art. 6 (1) (c) GDPR.

10. Payment processing (Stripe)

Subscription billing and, in the product, merchant card processing are handled through Stripe. Merchants connect their own Stripe account, and card payments are made directly to the merchant — MyShopie does not receive or store full card numbers. Where we bill you for a MyShopie subscription, Stripe processes the payment data required to complete the transaction as an independent controller / our processor under its own terms. Legal basis: Art. 6 (1) (b) GDPR. See Stripe’s privacy policy at stripe.com/privacy.

11. Hosting

Our website and application are hosted on cloud infrastructure located within the European Union. Our hosting providers process data strictly on our behalf as processors under Art. 28 GDPR. Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in reliable, secure hosting).

12. Recipients and processors

We only share personal data where necessary and lawful — for example with IT, hosting, email, and payment service providers that act as processors on our behalf, or where we are legally required to do so. Each processor is bound by a data processing agreement under Art. 28 GDPR. We do not sell your personal data.

13. International data transfers

We prefer providers that process data within the EU/EEA. Where a transfer to a third country is unavoidable, we ensure an adequate level of protection through an EU adequacy decision or appropriate safeguards such as the EU Standard Contractual Clauses (Art. 46 GDPR).

14. Retention

We store personal data only for as long as necessary for the purposes described above or as required by statutory retention obligations (for example commercial and tax law, typically 6 to 10 years for accounting records). Once the purpose no longer applies and no retention obligation remains, the data is deleted.

15. Your rights

Subject to the conditions of the GDPR, you have the right to:

access your personal data (Art. 15)
rectification of inaccurate data (Art. 16)
erasure (Art. 17)
restriction of processing (Art. 18)
data portability (Art. 20)
object to processing based on legitimate interests (Art. 21)
withdraw consent at any time with effect for the future (Art. 7 (3))

To exercise any of these rights, contact us at hello@myshopie.com.

16. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority, in particular in the Member State of your residence, place of work, or the place of the alleged infringement. The authority responsible for us is the North Rhine-Westphalia State Commissioner for Data Protection and Freedom of Information (Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen).

17. Changes to this policy

We may update this Privacy Policy to reflect changes to our services or legal requirements. The current version published on this page applies. Please review it periodically.

Privacy Policy