Two kinds of data
Account data is information about you as a store owner: your name, email, store name, website, platform, order volume and billing details.
Shopper data is information about visitors to your store, such as products viewed, searches, items added to cart and orders placed. For shopper data, your store is the controller and we process it on your behalf.
Shopper data we process
- Product views, searches, filters used and clicks on recommendations, bundles and offers
- Cart contents and orders placed, including order value and products
- A random session identifier and device type, used to keep each shopper in the same test version
- An email address only when a shopper asks for a saved cart to be sent to them
Data we never use
Recommendations and offers are not based on sensitive personal data such as health, religion, caste, political views, sexual orientation or financial standing. We do not buy third-party data about shoppers.
How shopper data is used
Shopper data from one store is never used to serve, train models for, or report to any other store.
- To show recommendations, search results, bundles, upsells and exit offers in that store
- To run A/B tests and produce conversion reports for that store
- To detect abuse and keep the service secure
Cookies and consent
The script stores a session identifier in the shopper's browser. It reads the consent choice your store collects. When a shopper declines tracking, recommendations fall back to non-personal bestsellers and no behavioural profile is kept.
Sharing
We never sell shopper data or account data. We use a small number of service providers for hosting, email delivery and payments, under contracts that limit their use of the data to providing those services.
Security
- Data is encrypted in transit and at rest
- Access to production data is limited to staff who need it to run the service
- Each store's data is kept logically separate from every other store
Retention
Shopper behaviour data is kept for up to 13 months to power seasonal recommendations and year-on-year reports, then deleted or anonymised. When a store closes its account, its shopper data is deleted within 30 days unless the store asks for an export first.
Your rights
Store owners can access, correct, export or delete their account data at any time. Shoppers who want to access or delete their data should contact the store they shopped with, and we will help that store respond.
Questions
If anything here is unclear, write to us through the contact page and we will reply by email.