Privacy Policy

Last updated: 11 September 2026

1. Scope and roles

This policy explains how YoopCart handles personal data about website visitors, account owners, merchant staff, prospective customers, support contacts, and marketplace participants. For merchant customer data processed to provide a store, the merchant normally determines the purposes and means of processing and YoopCart acts as processor under the Data Processing Addendum. Merchants remain responsible for their own customer privacy notices.

2. Data we collect

We collect account and contact details; authentication and security information; store, subscription, billing, and transaction metadata; support communications; marketplace and licence activity; device, browser, IP address, log, and usage data; consent choices; and information supplied through forms or integrations. Payment card data may be collected directly by an authorised payment provider rather than stored by YoopCart.

3. Why we use data

We use personal data to create and administer accounts and stores; provide, secure, troubleshoot, and improve the Services; process subscriptions; communicate service and security information; provide support; prevent fraud and abuse; meet accounting and legal obligations; and, with consent where required, send product or launch communications.

4. Legal bases

Depending on the context, processing is necessary to perform a contract, comply with law, protect legitimate interests such as service security and improvement, protect vital interests, or act on consent. Consent may be withdrawn without affecting earlier lawful processing.

We share data only as needed with infrastructure, hosting, communications, support, analytics, identity, billing, professional, and security providers; with integrations selected by a user; within a corporate transaction; or with authorities where legally required. International transfers use an applicable adequacy decision, standard contractual clauses, or another lawful safeguard.

6. Retention and security

We retain data for as long as needed for the Services, contractual commitments, dispute resolution, security, accounting, and legal duties. Retention periods vary by data type and account status. We use access controls, encryption, logging, backups, secure development practices, and incident response measures appropriate to the risk. No system can be guaranteed completely secure.

7. Your rights

Subject to applicable law, you may request access, correction, deletion, restriction, portability, or objection; withdraw consent; and complain to a supervisory authority. We may verify identity and may retain information where law permits or requires. For data controlled by a merchant, contact that merchant first; we assist merchants with valid requests.

8. Children, changes, and contact

YoopCart is a business service and is not directed to children. We may update this policy and will identify the current date and provide notice of material changes where required. Privacy requests and questions may be sent to privacy@yoopcart.com. Individuals in the EEA may also contact the competent data protection authority.

Partner referrals

When you register using a partner code or link, we record the referral and assess eligibility for the partner programme. See [Partner referral storage](/legal/cookie-policy#partner-referral-storage) for browser retention choices, removal and the treatment of submitted registration records.