Introduction
In our mission to make commerce better for
everyone at YouShopper, we collect and use information about you, our
This Privacy Policy will help you better understand how we
collect, use, and share your personal information. If we change our privacy
practices, we may update this privacy policy. If any changes are significant,
we will let you know (for example, through the YouShopper admin or by email).
Our values
Trust is the foundation of the YouShopper
platform and includes trusting us to do the right thing with your information.
Three main values guide us as we develop our products and services. These
values should help you better understand how we think about your information
and privacy.
We
carefully analyze what types of information we need to provide our services,
and we try to limit the information we collect to only what we really need.
Where possible, we delete or anonymize this information when we no longer need
it. When building and improving our products, our engineers work closely with
our privacy and security teams to build with privacy in mind. In all of this
work our guiding principle is that your information belongs to you, and we aim
to only use your information to your benefit.
If
a third party requests your personal information, we will refuse to share it
unless you give us permission or we are legally required. When we are legally
required to share your personal information, we will tell you in advance,
unless we are legally forbidden.
Many of the merchants and partners using YouShopper
do not have the benefit of a dedicated privacy team, and it is important to us
to help them meet their privacy obligations. To do this, we try to build our
products and services so they can easily be used in a privacy-friendly way. We
also provide detailed FAQs, documentation and whitepapers covering the most
important privacy topics, and respond to privacy-related questions we receive.
Why we process your information
We generally process your information when we
need to do so to fulfill a contractual obligation (for example, to process your
subscription payments to use the YouShopper platform), or where we or someone
we work with needs to use your personal information for a reason related to
their business (for example, to provide you with a service). European law calls
these reasons “legitimate interests.” These “legitimate interests” include:
We only process personal information for these
“legitimate interests” after considering the potential risks to your
privacy—for example, by providing clear transparency into our privacy
practices, offering you control over your personal information where
appropriate, limiting the information we keep, limiting what we do with your
information, who we send your information to, how long we keep your
information, or the technical measures we use to protect your information.
One of the ways in which we are able to help
merchants using YouShopper is by using techniques like “machine learning” (European law refers to this as “automated
decision-making”) to help us improve our services. When we use machine
learning, we either: (1) still have a human being involved in the process (and
so are not fully automated); or (2) use machine learning in ways that don’t
have significant privacy implications (for example, reordering how apps might
appear when you visit the app store).
We may process your personal information where you have provided
your consent. In particular, where we cannot rely on an alternative legal basis
for processing, where your data is sourced and it already comes with consent or
where we are required by law to ask for your consent in the context of some of
our sales and marketing activities. At any time, you have a right to withdraw
your consent by changing your communication choices, opting out from our
communications or by contacting us.
Your rights over your information
We believe you should be able to access and
control your personal information no matter where you live. Depending on how
you use YouShopper, you may have the right to request access to, correct,
amend, delete, port to another service provider, restrict, or object to certain
uses of your personal information (for example, direct marketing). We will not
charge you more or provide you with a different level of service if you
exercise any of these rights.
If you buy something from a YouShopper-powered
store and wish to exercise these rights over information about your purchase,
you need to directly contact the merchant you interacted with. We are only a
processor on their behalf, and cannot decide how to process their information.
We will of course help our merchants to fulfill these requests by giving them
the tools to do so and by answering their questions.
If you are a merchant, partner, Shop user, YouShopper
employee, or other individual that YouShopper has a direct relationship with,
please submit your data subject request through our online portal.
Please note that if you send us a request relating to your personal
information, we have to make sure that it is you before we can respond. In
order to do so, we may use a third party to collect and verify identification
documents.
If you are not happy with our response to a
request, you can contact us to resolve the issue. You also have the right to
contact your local data protection or privacy authority at any time.
Finally, because there is no common understanding about what
a “Do Not Track” signal is
supposed to mean, we don’t respond to those signals in any particular way.
Where we send your information
We are a Canadian company, but we work with
and process data about individuals across the world. To operate our business,
we may send your personal information outside of your state, province, or
country, including to the United States. This data may be subject to the laws
of the countries where we send it. When we send your information across
borders, we take steps to protect your information, and we try to only send
your information to countries that have strong data protection laws.
Transfers outside of Europe and Switzerland
If you are in Europe, the UK, or Switzerland,
your personal information is controlled by our Irish affiliate, YouShopper
International Ltd. Your information is then sent to other YouShopper locations
and to service providers who may be located in other regions, including Canada
(where we are based) and the United States. When we send your personal
information outside of Europe, we do so in accordance with European law.
If you are in Europe, the UK, or Switzerland,
when we send your personal information to Canada it is protected under Canadian
law, which the European Commission has found will adequately protect your
information.
Finally, while we do what we can to protect your information, we
may at times be legally required to disclose your personal information (for
example, if we receive a valid court order).
How we protect your information
Our teams work tirelessly to protect your information, and to
ensure the security and integrity of our platform. We also have independent
auditors assess the security of our data storage and systems that process
financial information. However, we all know that no method of transmission over
the Internet, and method of electronic storage, can be 100% secure. This means
we cannot guarantee the absolute security of your personal information.