Your store and your customers
are always protected

At Shopiyz every product decision starts with one question: is this safe for our customers? The confidentiality and integrity of your data, and the continuity of your business, are not a promise for us but a requirement. When we built our infrastructure we treated security as the architecture itself, not as a layer added later.

Every domain connected to Shopiyz is automatically protected with a 256 bit SSL/TLS certificate. When your customers reach the checkout page their data is encrypted end to end. Our payment infrastructure works with PCI DSS certified integration partners; card details are never stored on Shopiyz servers.

We meet our obligations under the UK GDPR, the Data Protection Act 2018 and, where applicable, the EU GDPR. Data belonging to merchants and end users is processed only to deliver the service and is not shared with third parties for advertising or marketing. Your rights to retention, erasure and objection are always available.

We run the following processes continuously to keep improving platform security:

• Continuous security monitoring: infrastructure anomalies and suspicious access attempts are detected and acted on in real time.

• Regular penetration testing: independent security firms carry out periodic tests and code audits.

• DDoS protection: automatic filtering and traffic management are active against distributed denial of service attacks worldwide.

• Secure development: every code change passes automated security scanning, with proactive measures against unknown vulnerabilities.

Our infrastructure and operational processes are designed in line with international security standards and are updated continuously.

Shopiyz is hosted on geographically distributed data centres operating with a 99.9% uptime commitment. Your data is protected with encrypted, incremental backups; under our disaster recovery plan, the system comes back automatically and quickly if an interruption occurs.

In the event of a security incident or planned maintenance, all merchants receive an email and a dashboard notification. Our security policies, processing records and privacy principles are always public. If you discover a vulnerability you can reach our security team directly and start the responsible disclosure process.