Privacy Policy
This Privacy Policy is issued by Hyper Effekt sp. z o.o., a company registered in Poland under KRS number 0001118008, REGON 529220060, NIP 7831908473, with its registered office at ul. 27 Grudnia 5/5A, 61-737 Poznań, Poland — the operator of Shoptest, a Shopify storefront monitoring and testing application ("Shoptest", "we", "us", "the Company"). Privacy contact: legal@shoptest.ai
1. Scope of This Policy
This Policy explains how we handle personal data in two distinct roles:
• As a Controller — for data about people who visit our website, sign up for a Shoptest account, or contact us.
• As a Processor — for Merchant and End Customer data we access through the Shopify App on a Merchant's instructions. That processing is governed by our Data Access & Processing Disclosure and Data Processing Agreement, not by this Policy. If you are a shopper at a store that uses Shoptest, please contact that store directly regarding your data.
2. Personal Data We Collect (as Controller)
• Account & contact data (name, work email, phone, company name, job title) — provided directly at signup or by your staff.
• Billing data (billing name/address, payment metadata, not full card numbers) — provided directly and by our payment processor, Stripe.
• Website usage data (pages visited, referrer, device/browser type, approximate location via IP) — collected automatically via cookies/analytics.
• Support communications (content of emails, chat, or support tickets) — provided directly.
• Marketing contact data (email address, engagement with newsletters/webinars) — provided directly or via opt-in forms.
3. Purposes and Legal Basis
• Creating and administering a Shoptest account — performance of a contract (Art. 6(1)(b)).
• Billing and payment processing — performance of a contract; legal obligation (Art. 6(1)(b)/(c)).
• Responding to support requests — performance of a contract; legitimate interest (Art. 6(1)(b)/(f)).
• Sending product updates to existing customers — legitimate interest (Art. 6(1)(f)).
• Marketing emails to prospects — consent, where required (Art. 6(1)(a)).
• Website analytics — consent for non-essential cookies, or legitimate interest.
• Security, fraud prevention, and legal compliance — legitimate interest; legal obligation (Art. 6(1)(f)/(c)).
4. How We Share Personal Data
We share personal data described above with:
• Service providers who support our operations (hosting, email delivery, payment processing, customer support tooling, analytics), acting as our processors — see our current sub-processor list.
• Professional advisors (legal, accounting) where necessary.
• Authorities, where required by law or to protect our rights.
• A successor entity in the event of a merger, acquisition, or change of the Company operating Shoptest.
We do not sell personal data described in this Policy, and we do not share it with third parties for their own independent marketing purposes.
5. Cookies and Similar Technologies
Our website uses cookies and similar technologies for core site functionality, analytics, and, where applicable, marketing. Where required by law, we ask for consent before setting non-essential cookies.
6. International Data Transfers
Our infrastructure is hosted primarily in the United States (Render, Google Cloud Platform), with some processing infrastructure in the UK (Google Cloud Platform, London). Where personal data described in this Policy is transferred outside the country where it was collected — including from the EEA to the United States — we rely on Standard Contractual Clauses or another mechanism recognized under applicable law where available.
Google Cloud's Cloud Data Processing Addendum incorporates the EU Standard Contractual Clauses automatically for us as a customer. Render, our other hosting provider, does not currently offer Standard Contractual Clauses; we disclose this directly rather than asserting a mechanism that isn't in place, and we monitor this periodically. Our payment processor, Stripe, is registered to our EU business address, and its standard terms are expected to cover this transfer automatically. More detail is available in our Data Processing Agreement.
7. Data Retention
We retain personal data described in this Policy for as long as needed to provide the Shoptest service, comply with legal obligations, resolve disputes, and enforce agreements, and delete or anonymize it thereafter.
8. Your Rights
Subject to applicable law, you may have the right to access, correct, delete, or port your personal data, to object to or restrict certain processing, and to withdraw consent where processing is based on consent. To exercise these rights, contact us at legal@shoptest.ai.
If your personal data is processed by Shoptest as a Processor on behalf of a Shopify Merchant (i.e., you are a shopper at a store using Shoptest), please direct your request to that Merchant — see our Data Access & Processing Disclosure for the mechanism we provide Merchants for this.
9. Security
We use technical and organizational measures designed to protect personal data against unauthorized access, alteration, disclosure, or destruction. No system is completely secure, and we cannot guarantee absolute security.
10. Children's Privacy
Shoptest is a business tool and is not directed at, nor knowingly used to collect personal data from, individuals under the age of 16. If we become aware that we have inadvertently collected such data, we will take steps to delete it.
11. Changes to This Policy
We may update this Policy from time to time. Material changes will be communicated as described in our Terms of Service. The "Last updated" date at the top of this page indicates the current effective version.
12. Contact
Hyper Effekt sp. z o.o. ("Shoptest", "the Company") — KRS: 0001118008 · REGON: 529220060 · NIP: 7831908473. Registered office: ul. 27 Grudnia 5/5A, 61-737 Poznań, Poland. Privacy contact: legal@shoptest.ai