Last updated : 24 March 2025
- Personal-Data Controller
- What Personal Data We Collect
- Why We Process Your Data
- Legal Bases (EEA / UK)
- Cookies & Similar Technologies
- Who Else Receives Your Data
- Your Privacy Rights & How to Exercise Them
- Age Limitation
- International Data Transfers
- U.S. State Privacy Notice (California + others)
- Data Security
- Data Retention
- Changes to this Policy
- Contact Us
The Service is provided by APH Services LLC, 16192 Coastal Highway, Lewes, Delaware 19958, USA (“Shopping Protection”, “we”, “our”, “us”).
| Category | Examples | How we obtain it |
|---|---|---|
| Identifiers | Name, email, postal address, phone, account ID, hashed password | You provide when creating an account, filing a claim, joining a wait-list or contacting support |
| Payment & Subscription Data | Last 4 digits & expiry of card, billing address, payment token, subscription status, trial start/end, refunds | Our payment processors send us confirmation data – we never store full card numbers |
| Claim Documentation | Order confirmations, invoices, chat transcripts with the merchant, photos, shipping receipts, legal letters | You upload via the claim portal or by emails |
| Device / Usage Data | IP address, time-zone, language, browser type, OS, referral URL, pages visited, error logs | Collected automatically through cookies, SDKs and server logs |
| Marketing & Preference Data | Newsletter opt-in, SMS opt-in, ad-campaign source/medium, in-app event data | Your choices; analytics & marketing partners |
| Support/Feedback | Emails, chat transcripts, satisfaction ratings | You provide during interactions with our team |
We do not knowingly collect: children’s data (< 18 years), biometric templates, or full credit-card numbers.
| Purpose | Typical processing activities | Main data used |
|---|---|---|
| Provide & operate the Service | Create your account; authenticate login; enable claims workflow; troubleshoot bugs | Identifiers, Claim docs, Device/Usage |
| Process payments & manage subscriptions | Start free-trial; bill introductory month; handle renewals, refunds & chargebacks | Identifiers, Payment data |
| Customer support | Respond to emails/live chat; investigate issues; send service notices | Identifiers, Support/Feedback, Claim docs |
| Improve & secure the Service | Analytics, A/B testing, crash reports, fraud detection | Device/Usage, Marketing data |
| Marketing & personalised ads | Send product updates, discount offers; retarget visitors on social-networks | Identifiers (hashed), Device/Usage, Marketing data |
| Legal & compliance | Keep mandatory tax/transaction records; respond to lawful requests; enforce Terms | All categories as relevant |
| Legal basis (GDPR Art.) | Applies to |
|---|---|
| Contract (Art 6 (1)(b)) | Creating & servicing your account; processing payments; customer support |
| Legitimate interest (Art 6 (1)(f)) | Analytics, anti-fraud, direct marketing of similar services, network security |
| Consent (Art 6 (1)(a)) | Non-essential cookies & personalised ads; newsletter or SMS opt-in |
| Legal obligation (Art 6 (1)(c)) | Accounting, consumer-protection and KYC/AML record-keeping |
| Vital / Public interest | Not relied upon under normal circumstances |
You may withdraw consent or object to processing based on legitimate interest at any time – see Section 7.
We use first-party and third-party cookies, pixels and local-storage to:
- keep you logged in,
- remember site preferences,
- measure traffic & conversions,
- personalise advertising.
For full details and opt-out options, please see our separate Cookie Policy.
| Partner type | Examples | Why we need them |
|---|---|---|
| Payment processors | PayPal, Solid [LINK] | Secure card payments, refunds, anti-fraud |
| Cloud hosting & storage | AWS, Google Cloud | Run our infrastructure, back-ups |
| Analytics | Google Analytics, Firebase, Amplitude, Hotjar | Understand feature usage & improve UX |
| Customer engagement | Hubspot (support), Customer.io (email), Twilio (SMS) | Support tickets, product e-mails, SMS alerts |
| Marketing / ad networks | Google Ads, Meta Ads, Microsoft Advertising | Show relevant ads, retargeting |
| Professional advisors / law firms | Local counsel, bailiffs | Handle escalated claims & legal compliance |
| Government or regulators | Courts, tax authorities | Where required by law |
We never sell your personal data for money. Some states treat targeted-ad sharing as a “sale” – see Section 10 for your opt-out rights.
| If you live in EEA/UK | If you live in certain U.S. states | How to exercise |
|---|---|---|
| Access, Rectify, Erase, Restrict, Portability, Object, Withdraw consent, Complaint to a DPA | Access/Know, Correct, Delete, Portability, Opt-out of Sale/Sharing/Targeted Ads, Limit Sensitive PI | Email help@shopping-protection.com. We will verify your identity before acting. |
The Service is intended for adults 18 years or older. We do not knowingly process data of children. If you believe a minor has provided data, contact us and we will delete it.
We are a U.S. company. Your data may be stored in the United States or other jurisdictions where our processors operate.
When we transfer personal data from the EEA/UK to a country lacking an adequacy decision, we rely on EU Standard Contractual Clauses and equivalent UK Addendum.
If you reside in California, Colorado, Connecticut, Utah, Virginia, or any other U.S. state with consumer-privacy legislation, you have additional rights to:
- Opt out of “sale”/“sharing” for targeted ads (use the “Do Not Sell / Share” link in the footer).
- Receive detailed disclosures of categories collected & shared in the last 12 months.
- Appeal a denial of your privacy request.
See our full U.S. States Privacy Notice.
- Data in transit is protected by TLS 1.2+.
- Sensitive documents at rest are encrypted with AES-256.
- Access to production systems is limited to authorised staff with MFA.
- We conduct regular penetration tests and maintain a security-incident response plan.
We retain personal data only as long as necessary for the purposes listed in Section 3, or to meet legal/accounting obligations:
- Account & billing records — 10 years (tax laws)
- Claim documentation — 7 years after case closes
- Marketing opt-out lists — indefinitely (to honour your request)
- Analytics raw logs — 13 months, then aggregated or deleted
When retention expires, data is securely anonymised or deleted.
We may update this Policy from time to time. Material changes will be announced by:
- updating the “Last updated” date above, and
- emailing active Members or showing an in-app notice.
Continued use of the Service after the change takes effect constitutes acceptance.
Shopping Protection – APH Services LLC
16192 Coastal Highway, Lewes, DE 19958, USA
✉ help@shopping-protection.com
If you have questions, complaints, or wish to exercise your rights, please reach out – we respond to verified requests within 30 days (45 days for California).
By using our website or starting a free trial, you acknowledge that you have read and understood this Privacy Policy.