Privacy Policy

This policy explains how ShopyLink SARL (“ShopyLink”, “we”, or “our”) collects, uses, and protects personal data belonging to solution users and website visitors.

We protect your privacy in accordance with the GDPR and Luxembourg data-protection laws.

The data controller is:

• ShopyLink SARL
• RCS : B296597
• Registered office: 58 Station Avenue, 4130 Esch-sur-Alzette, Luxembourg
• Email: contact@shopylink.io

We collect the following categories:

• Restaurant customers: name, email, phone, restaurant name and address, company number, credentials, and login logs
• Payment data is processed by Stripe; we do not store bank details
• End customers: identity and contact details, delivery address, order history, preferences, and loyalty data
• Browsing data: IP address, browser and device type, pages visited, visit duration, and cookies

Data is processed to provide and manage ShopyLink, manage orders and deliveries, invoice and process payments, provide support, improve services, send service communications, and meet legal obligations.

• Contract performance: processing required to provide the Service
• Consent: marketing communications, withdrawable at any time
• Legitimate interest: service improvement and security
• Legal obligation: retention of billing data

• Account data: subscription duration plus 3 years
• Billing data: 10 years
• Browsing data: no more than 13 months
• End-customer data: managed by the restaurant under its obligations

Data may be shared with internal support, technical and sales teams; technical processors; Stripe; and authorities where legally required.

We never sell your data to third parties.

Data is hosted in the European Union. Appropriate GDPR safeguards, such as standard contractual clauses and certifications, apply to third-country transfers.

We implement appropriate technical and organizational measures, including encryption, access controls, regular backups, and continuous infrastructure monitoring.

Under the GDPR, you have rights of access, rectification, erasure, restriction, portability, objection, and withdrawal of consent at any time.

To exercise these rights, email contact@shopylink.io.

You may lodge a complaint with Luxembourg’s National Commission for Data Protection (CNPD): cnpd.public.lu.

Changes will be published on this page with an updated date. Please review it regularly.

For questions about this policy:

• Email: contact@shopylink.io
• Address: ShopyLink SARL, 58 Station Avenue, 4130 Esch-sur-Alzette, Luxembourg