Last updated: 17 May 2026

Privacy Policy

This page explains how we collect, use and protect your personal data, and how you can exercise your rights.

Shopiyz Privacy Policy

This Privacy Policy explains how the personal data of individuals and organisations using the Shopiyz platform is processed under the UK GDPR and the Data Protection Act 2018, and under the EU GDPR where it applies.

By using the Shopiyz services you acknowledge that you have been informed about the processing described in this policy.

İNOVABİL TEKNOLOJİ SAN. VE TİC. A.Ş.

İOSB Mah. YTÜ Teknopark Sokak No: 1 İç No: Z11, Başakşehir, Istanbul 34490, Türkiye

Company registration (MERSİS): 0478055847500014

A United Kingdom entity is being established and will become the controller for customers outside Türkiye. This policy will be updated accordingly.

Email: info@shopiyz.com

Phone: +90 850 259 23 23

A/Z

Definitions

Personal Data: Any information relating to an identified or identifiable natural person.
Controller: The party that determines the purposes and means of processing personal data.
Processor: The party that processes personal data on behalf of, and on the instructions of, a controller.
Data Subject: The natural person whose personal data is processed.
Consent: A freely given, specific, informed and unambiguous indication of the data subject's wishes.
Supervisory Authority: The data protection regulator, such as the Information Commissioner's Office in the United Kingdom.

Controller

Your personal data is processed by the company identified above acting as the controller.

Contact details for the controller appear at the top of this policy and in the Contact section.

The Role of Shopiyz

Depending on the service concerned, Shopiyz may act either as a controller or as a processor.

For data relating to the end customers of merchants who run stores on Shopiyz, Shopiyz acts in most cases only as the technical infrastructure provider and as a processor.

Where Shopiyz Acts as a Processor

Customers who place orders and their delivery addresses
End customer contact details
Store customer lists and order histories
Basket data and marketing lists

Shopiyz processes this data solely to provide the service technically and acts on the merchant's instructions. A Data Processing Agreement may be entered into between Shopiyz and the merchant for this purpose. Obligations towards store customers rest principally with the merchant as controller.

What Data We Collect

The following categories of data may be collected while you use the Shopiyz services.

Account and Membership Data

First name, surname, telephone number, email address
Company details and username
Password data, verification data and account security records

Company and Billing Information

Company name, tax number and tax office
Billing address and payment plan
Subscription history and financial records

Store and Commercial Operation Data

Products, variants and categories
Orders and stock movements
Discounts and campaigns
Customer records and shipping processes
Marketplace operations

Technical and Usage Data

IP address, browser type, operating system, device information
Session records and traffic information
Click and usage behaviour
Performance data and error logs

Support and Communication Data

Message content and emails
Call records
Files and screenshots
Technical error reports

Payment Data

Payments are processed through PCI DSS compliant third party payment providers such as Stripe. Sensitive payment data such as card numbers is not stored on Shopiyz servers.

OAuth and Integration Data

With your explicit authorisation, connections may be established with the following services:

Meta (Facebook, Instagram)
Google Ads, Google Merchant Center, Google Analytics
TikTok, YouTube
Marketplaces, ERP and accounting systems
Carriers and payment providers
Email marketing services and CRM systems

These connections are only established once you authorise them. Shopiyz does not access advertising accounts, business assets or third party platforms without your permission.

Purposes of Processing

The data collected may be processed for the following purposes:

Creating a Shopiyz account and verifying the user
Creating and managing a store
Running order processes
Operating marketplace integrations
Connecting advertising platforms
Providing artificial intelligence assisted suggestions
Delivering support and resolving faults
Preventing security threats and detecting fraud
Running billing processes
Meeting legal obligations
Improving service quality and the user experience

Shopiyz aims to process user data only to the extent necessary to deliver the services and applies the principle of data minimisation.

Lawful Bases for Processing

Personal data is processed on the following lawful bases under Article 6 of the UK GDPR.

Performance of a Contract

Account creation, opening a store, order management and billing are processed on this basis.

Legal Obligation

Financial and accounting records kept under tax, company and related legislation are processed on this basis.

Legitimate Interests

Platform security, fraud prevention, measuring service quality and improving the infrastructure are assessed as legitimate interests, balanced against your rights and freedoms.

Consent

Marketing messages, personalisation and non essential cookies rely on your consent, which you may withdraw at any time.

Consent and Marketing Permissions

Shopiyz obtains separate consent before sending commercial electronic messages (email, SMS, notifications) and before offering personalised content.

Processing That Relies on Consent

Campaign, discount and announcement emails
Product and service recommendation notices
Personalisation based on usage behaviour
Artificial intelligence assisted profiling and segment suggestions
Sharing with third party advertising measurement systems

Marketing consent can be withdrawn at any time through account settings or the link at the bottom of each message. Withdrawal does not make processing before that date unlawful.

Withdrawing marketing consent does not remove the obligation of Shopiyz to send contractual notices and invoices.

Artificial Intelligence and Automation

Shopiyz may offer artificial intelligence assisted suggestions, automation systems, product descriptions, advertising recommendations, content generation, analysis tools, customer segmentation, predictive reporting and similar features to improve the user experience.

Outputs produced in this way are suggestions, predictions or automation only and are intended to assist the user.

Automated Decision Making

Shopiyz does not take decisions producing legal effects concerning you, or similarly significant effects, based solely on automated processing. Where such processing were to take place, you would have the right to obtain human intervention, to express your point of view and to contest the decision.

You remain responsible for checking the accuracy of artificial intelligence outputs and their suitability for your own commercial activity.

Third Party Services and Integrations

Shopiyz may integrate with third party services to improve the user experience and simplify ecommerce operations.

Integration Scope

Meta (Facebook Business, Instagram)
Google Ads, Google Merchant Center, Google Analytics
TikTok, YouTube
Marketplaces
ERP and accounting systems
Carriers and payment providers
CRM and email services
External applications and App Store solutions

Connecting to these services depends entirely on your explicit permission and authorisation. When you disconnect an integration, Shopiyz ends its access to that platform; how the third party platform retains earlier transaction records is governed by that platform's own policy.

Matters Outside the Responsibility of Shopiyz

Changes to API policies or restrictions on access permissions
Discontinuation of services or changes to technical infrastructure
Suspension of accounts or withdrawal of data sharing permissions
Technical outages

Transactions you carry out on third party platforms are governed by the terms and privacy policies of those platforms.

International Transfers

Shopiyz uses cloud based technologies that operate globally. Your data may therefore be processed, transferred or stored in data centres inside or outside the United Kingdom and the European Economic Area.

Infrastructure Where Data Is Processed

Cloud server providers and CDN services
Security and backup systems
Analytics services and artificial intelligence systems
Email service providers and integration services

Transfer Safeguards

Where personal data is transferred outside the United Kingdom or the European Economic Area, the transfer is made on the basis of an adequacy decision, or protected by appropriate safeguards such as the UK International Data Transfer Agreement or the Standard Contractual Clauses, together with the technical and organisational measures required.

Account Security and User Responsibility

You are responsible for the security of the username, password, API keys, access permissions and administrator rights belonging to your Shopiyz account.

Risks Accepted by the User

Using a weak password
Granting unauthorised team access
Sharing credentials with third parties
Giving uncontrolled access to external applications
Signing in from compromised devices

Where suspicious access is detected, Shopiyz reserves the right to request additional verification, restrict access or temporarily suspend the account.

Misuse and Account Suspension

Shopiyz reserves the right to suspend an account temporarily or permanently, without prior notice, in the following circumstances:

Selling counterfeit products or offering unlawful products and services
Spam activity and attempted fraud
Abuse of chargeback mechanisms
Activity that threatens system security
Attempts to collect data without authorisation
Distributing malicious software or generating fake traffic
Use that infringes the rights of third parties

Where necessary, Shopiyz may cooperate with the relevant authorities and law enforcement.

Security Measures

Protecting user data is one of the core priorities of Shopiyz.

Security Technologies in Use

SSL/TLS encryption
Authorisation systems and server firewalls
Access logs and anomaly detection systems
Regular security updates
Role based access controls and security monitoring

Personal Data Breaches

Where a personal data breach is likely to result in a risk to the rights and freedoms of individuals, Shopiyz notifies the competent supervisory authority without undue delay and, where the risk is high, informs the individuals concerned.

No transmission of data over the internet is ever entirely free of risk. Shopiyz does not guarantee absolute security.

Service Continuity and Technical Interruptions

Shopiyz aims to provide its services without interruption, but temporary interruptions may occur due to technical maintenance, system updates, security measures, third party outages, internet infrastructure problems, force majeure or unforeseen technical causes.

Shopiyz does not warrant that the services will always be error free, uninterrupted or continuously available. Shopiyz is not liable for direct or indirect commercial loss arising from these causes.

Limitation of Liability

To the fullest extent permitted by applicable law, Shopiyz is not liable for consequences arising from:

Loss of profit or turnover
Decline in advertising performance
Data loss and marketplace sales losses
Integration problems and API changes
Loss of search engine rankings and loss of commercial opportunity
Indirect loss

In particular, differences in service caused by changes on third party platforms (Meta, Google, TikTok, marketplaces, payment providers, carriers and similar services) fall outside the responsibility of Shopiyz.

Liability that cannot be limited by law is unaffected.

Retention and Deletion

Shopiyz keeps personal data only for as long as the purposes of processing require and for the retention periods set out in applicable legislation.

Retention Periods by Data Type

Financial and accounting records6 years (statutory)

Contract and account data6 years after account closure

Invoice and payment records6 years

Support and communication records3 years

Security and access logs2 years

Marketing dataUntil consent is withdrawn

Legal dispute recordsUntil the matter is resolved

If you close your account, your data is deleted, anonymised or put beyond use to the extent permitted by law.

Backup Systems and Data Recovery

Shopiyz uses automated backup and disaster recovery systems to maintain service continuity. Some deleted data may remain in encrypted backup systems for a limited period.

Purpose of Backups

Preserving system integrity
Preventing potential data loss
Security investigations
Legal obligations

Immediate or individual restoration from backup systems is not always possible.

Cookies and Similar Technologies

Shopiyz may use cookies, pixel technologies, software development kits and similar tracking technologies to improve the website and dashboard experience.

Purposes

Session management and account security
Remembering user preferences
Performance measurement and traffic analysis
Advertising performance measurement
Running integrations
Improving the user experience

Third Party Cookie Providers

Google services
Meta services
TikTok technologies
Analytics tools and advertising measurement systems

You can change your cookie preferences or disable certain cookies through your browser settings. For details, see our Cookie Policy page.

Your Rights and How to Exercise Them

Under the UK GDPR you have the following rights in relation to your personal data:

The right to be informed about how your data is used
The right of access to your personal data
The right to rectification of inaccurate or incomplete data
The right to erasure in the circumstances provided by law
The right to restrict processing
The right to data portability
The right to object to processing based on legitimate interests, and to object to direct marketing at any time
Rights in relation to automated decision making and profiling
The right to withdraw consent at any time, without affecting processing carried out before withdrawal

How to Make a Request

You can exercise your rights through any of the following channels:

Email: info@shopiyz.com (from your registered address or with identity verification)
Written request to the postal address given at the top of this policy

Requests are answered within one month of verifying your identity. That period may be extended by a further two months where a request is complex or where several requests have been received, in which case you will be informed. Requests are handled free of charge; a reasonable fee may be charged only where a request is manifestly unfounded or excessive.

Complaints

If you are not satisfied with our response, you have the right to lodge a complaint with a supervisory authority, in the United Kingdom the Information Commissioner's Office, or with the authority in your country of residence.

Data requests may not be processed without identity verification.

Children's Privacy

The Shopiyz services are not directed at individuals under the age of 18.

There is no intention to knowingly collect personal data from children. Where it is identified that data belonging to a person under 18 has been processed by mistake, the records concerned are reviewed for deletion within a reasonable period.

Changes to This Policy

Shopiyz reserves the right to update, change or revise this Privacy Policy at any time.

Circumstances in Which Changes May Be Made

Changes in legislation (data protection, ecommerce and similar)
Technical infrastructure updates
New integrations, products and services
Security requirements and changes to the business model

Where changes are significant, notice may be given through the user panel, by email or on the website. The current version is always published on the privacy policy page .

Continuing to use the Shopiyz services may be taken as acceptance of the current version of this policy.

Contact

You can contact us about your personal data, our privacy practices or any data request using the contact details given at the top of this policy.

Final Provision

This Privacy Policy has been prepared to explain the processing of personal data connected with use of the Shopiyz platform under the UK GDPR, the Data Protection Act 2018 and, where applicable, the EU GDPR.

This policy should be read together with the Shopiyz Terms of Use .

By using the Shopiyz services you are deemed to have been informed about the processing described in this Privacy Policy.

For data requests

Questions about your personal data?

Our team will review your request.

Get in touch