SHOPEALO – PRIVACY POLICY
Last updated: 26 July 2025

1. Controller Identification

• Owner/Controller: Shopealo (online e-commerce site)
• Email: admin@shopealo.now
• Mailing address (legal correspondence only): 10642 Roundwood Glen Ct, Jacksonville, FL 32256, USA

2. Scope of This Policy

This Privacy Policy explains how Shopealo collects, uses, stores, and protects personal information of visitors and purchasers (“you”). By using our site, you accept these practices. If you disagree, please refrain from using the site.

3. Personal Data We Collect

We collect only what is necessary to process orders and improve your experience:

• Identity & Contact: name, billing / shipping address, email, phone
• Payment: PayPal email or transaction ID, or other payment-method tokens handled via WooCommerce (we never store full card numbers)
• Order & Transaction: items purchased, order ID, timestamps, communications, tracking numbers
• Usage: IP address, browser type, pages viewed, items in cart, clicks
• Cookies: session cookies (essential) and optional analytics cookies only with your consent (see Section 8)

We do not collect sensitive data such as SSNs, health information, religious beliefs, etc.

4. Purpose & Legal Basis for Processing

• Fulfil orders, process payments, ship goods – Performance of a contract
• Customer service & transactional emails – Legitimate interest
• Marketing emails & newsletters (opt-in) – Consent (CAN-SPAM & GDPR Art. 6 (1)(a))
• Site analytics (optional cookies) – Consent
• Regulatory, tax, anti-fraud compliance – Legal obligation

We do not use your data for targeted advertising, sell or rent it, or profile you for automated decisions.

5. Retention Period

• Order & payment records: up to 4 years (or longer if required by U.S. or Florida tax law)
• Customer-service communications: until the issue is resolved, then deleted or anonymised
• Marketing email list: until you unsubscribe or request deletion
• Analytics data: Google Analytics default (e.g., 14 months) or shorter

When data is no longer needed and no legal obligation applies, we securely delete or anonymise it.

6. Data Sharing & International Transfers

We never sell your data. We share only the minimum required with:

• Payment processors (PayPal, Stripe) – PCI-DSS compliant
• Shipping carriers / fulfilment partners (USPS, UPS, FedEx, etc.)
• Hosting & IT providers (secure U.S. servers)
• Analytics provider (Google Analytics, IP anonymised, consent-based)
• Messaging tools (WhatsApp, Meta Messenger)
• Legal authorities when lawfully compelled

If you are outside the USA, you consent to transfer of your data to the United States (GDPR Art. 49 (1)(b)). Standard safeguards apply where required.

7. Data Security

• SSL/TLS encryption on every page (“https://”)
• Payments processed only by PCI-DSS–compliant gateways
• Role-based access controls & strong credentials for staff
• Up-to-date WordPress, WooCommerce, plugins; Wordfence monitoring; encrypted off-site backups

Despite best efforts, no system is 100 % secure. In case of a data breach we will notify affected users and authorities as required by law.

8. Cookies & Tracking Technologies

Essential cookies – enable cart, login, checkout; cannot be disabled without breaking the site.
Analytics cookies – anonymous stats via Google Analytics; disabled by default and enabled only if you opt in through the cookie banner.
We do not use advertising or targeting cookies. A banner on first visit lets you accept or reject non-essential cookies and update preferences later.

9. Your Privacy Rights

Depending on your jurisdiction you may have the rights to: access, rectify, erase, restrict/object processing, data portability, withdraw consent, and not be subject to automated decisions.

California & other U.S. state rights: request categories of data collected, specific data pieces, deletion, or correction. Shopealo does not sell or share personal data as defined by CPRA/CCPA.

Do-Not-Sell/Share link: a footer link labeled “Do Not Sell or Share My Personal Information” leads to an opt-out / confirmation form.

To exercise any right, email privacy@shopealo.now or admin@shopealo.now. We may verify your identity and will answer within 30 days (extendable once if necessary).

EU/EEA residents may also lodge a complaint with their local Data Protection Authority, though we encourage direct contact first.

10. Minors & Children’s Privacy

The site is not intended for anyone under 18. We do not knowingly collect data from children under 13. Parents who believe information was collected in error should email us for immediate deletion.

11. Changes to This Policy

We may revise this Policy periodically. Updates will appear on this page with a new “Last updated” date. For material changes, we will provide prominent notice (banner or email). Continued use after changes constitutes acceptance.

12. Contact

• Email: admin@shopealo.now
• Mail: Shopealo – Privacy, 10642 Roundwood Glen Ct, Jacksonville, FL 32256, USA

Thank you for trusting Shopealo. We are dedicated to safeguarding your privacy while delivering great deals and a safe shopping experience.