Privacy Policy
1. Who we are
AIShopCart Ltd ("we", "us", "our") is the data controller responsible for your personal data. We provide AI-powered ecommerce services to businesses in the UK and are committed to protecting the privacy of all individuals who interact with our website and services.
Contact us at: hello@aishopcart.co.uk
2. What data we collect
Data you provide to us directly:
- Contact form submissions: Name, email address, business name, industry type and project description when you fill in our contact form.
- Account information: Name, email address, business details and billing information when you become a client.
- Communications: Emails, messages or other correspondence you send us.
Data collected automatically:
- Usage data: Pages visited, time on site, referring URL, browser type and device information via standard web analytics.
- Cookies: See Section 8 for full details of cookies we use.
- IP address: Collected automatically by our hosting infrastructure for security purposes.
Data from your store (clients only):
- Product catalogues, order data and customer records that you upload to your store. This data belongs to you and is processed by us solely to provide the service.
We do not collect payment card data. All payments are processed directly by Stripe and governed by Stripe's Privacy Policy.
3. How we use your data
We do not use your data for automated decision-making or profiling. We do not sell your data to any third party. We do not use your data for advertising.
4. Legal basis for processing
Under UK GDPR, we rely on the following legal bases:
- Contract: Processing necessary to fulfil our service agreement with you (setting up and running your store).
- Legitimate interests: Responding to enquiries, improving our services, security monitoring. We have assessed that our legitimate interests do not override your rights.
- Legal obligation: Processing required to comply with UK law (e.g. VAT records, fraud prevention).
- Consent: Where you have explicitly opted in to receive marketing communications from us. You may withdraw consent at any time.
5. Data sharing & third parties
We share data with the following third-party service providers solely to deliver our services. Each is bound by their own privacy policies and data processing agreements:
Where data is transferred outside the UK, we ensure appropriate safeguards are in place including Standard Contractual Clauses (SCCs) or UK adequacy decisions.
We may disclose your data to law enforcement or regulatory authorities where required by law.
6. Data retention
After the applicable retention period, data is securely deleted or anonymised.
7. Your rights
Under UK GDPR, you have the following rights regarding your personal data:
- Right of access: Request a copy of the personal data we hold about you.
- Right to rectification: Request correction of inaccurate or incomplete data.
- Right to erasure: Request deletion of your data in certain circumstances ("right to be forgotten").
- Right to restriction: Request that we restrict processing of your data in certain circumstances.
- Right to data portability: Receive your data in a machine-readable format where technically feasible.
- Right to object: Object to processing based on legitimate interests or for direct marketing.
- Rights related to automated decision-making: We do not carry out automated decision-making or profiling.
To exercise any of these rights, email us at hello@aishopcart.co.uk. We will respond within one calendar month. There is no charge for reasonable requests.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.
8. Cookies
We use the following types of cookies on our website:
We do not use advertising cookies and do not share cookie data with advertisers. When you first visit, a cookie banner asks you to accept or reject analytics cookies; nothing beyond essential cookies is set until you choose.
You can change your choice at any time: .
You can also control cookies through your browser settings. Disabling essential cookies may affect site functionality. For more information, visit allaboutcookies.org.
9. Security
We implement appropriate technical and organisational measures to protect your data including:
- SSL/TLS encryption for all data in transit
- Encrypted storage for sensitive data at rest
- Access controls limiting who can access personal data
- Regular security reviews of our infrastructure
- Staff awareness of data protection obligations
No method of transmission over the internet is 100% secure. In the unlikely event of a data breach that affects your rights and freedoms, we will notify you and the ICO within 72 hours as required by UK GDPR.
10. Children
Our services are intended for businesses and individuals aged 18 and over. We do not knowingly collect personal data from children under 13. If you believe a child has submitted data to us, please contact us and we will delete it promptly.
11. Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify existing clients of material changes by email at least 14 days before they take effect. The "Last updated" date at the top of this page will always reflect the most recent version.
We encourage you to review this policy periodically.
12. Contact us
For any privacy-related questions, data requests or concerns, please contact us:
We aim to respond to all privacy requests within 5 working days and will always respond within the legally required one calendar month.