Privacy & Cookie Policy

Last updated: 3 October 2026

This policy explains how MyShopCarts collects and uses personal data about the people who visit our website and sign up for our hosting service, and how we use cookies. It applies to www.myshopcarts.com and to your MyShopCarts account.

MyShopCarts is operated by MyShopCarts, a company registered in Ireland, and we are the controller of the personal data described here. Our full company details are at the end of this policy.

Note: this policy covers data we hold as a business (for example, your account and billing details). If you are a MyShopCarts customer, the personal data of your own shoppers that we process on your behalf is governed by our Data Processing Agreement, not this policy.

1. Who to contact

You can reach us about privacy at any time at [email protected]. If we appoint a Data Protection Officer or an EU representative, their details will be published here.

2. What we collect

Depending on how you use MyShopCarts, we collect:

• Account & identity data — your name, business name, email, phone, username, and details of users you add.
• Billing data — billing address, VAT ID, plan, and payment records. Card details are handled by our payment processor, not stored by us.
• Usage & technical data — how you use our website and service, log data, IP address, and device/browser information.
• Support & communications data — messages, tickets, and chats you send us (including via our AI assistant), and our responses.
• Marketing preferences — your choices about hearing from us.

3. Why we use it, and our legal basis

Purpose	Legal basis (GDPR Article 6)
Providing, operating, and supporting the service; managing your account	Performance of our contract with you
Billing, taking payment, and collecting amounts due	Contract; legal obligation
Securing the service, preventing fraud and abuse, keeping the platform stable	Our legitimate interests
Improving the service and understanding how it is used	Our legitimate interests
Measuring how visitors use our website (performance cookies) and whether our ads lead to sign-ups (marketing cookies)	Your consent — given or refused in the cookie banner, and withdrawable at any time (see section 8)
Sending service and administrative messages (invoices, security, changes)	Contract; legal obligation
Sending marketing about our own similar services	Our legitimate interests or your consent, as required — you can opt out any time
Complying with law and responding to lawful requests	Legal obligation

4. Who we share it with

We don't sell your personal data. We share it only with:

• Service providers who help us run MyShopCarts — currently Amazon Web Services (hosting and email delivery, in the EU), Cloudflare (content delivery, domains, and security), and Stripe (billing and payments), together with any support tooling we use. They act on our instructions under contract.
• Google (Google Ireland Limited) — only if you accept the matching cookies: Google Analytics (performance) measures how our website is used on our behalf, and Google Ads (marketing) measures whether our ads lead to sign-ups. For ad measurement, Google acts as an independent controller under its own terms. If you don't accept these cookies, nothing is sent to Google.
• Professional advisers (such as legal and accounting) where needed.
• Authorities or others where required by law, to enforce our terms, or to protect our rights, our users, or the public.
• A successor in connection with a merger, acquisition, or sale of our business.

5. International transfers

We process your personal data in the EU/EEA. If any transfer outside the EEA/UK takes place (for example, through one of our providers), we put an appropriate safeguard in place — such as an adequacy decision or the European Commission's Standard Contractual Clauses (with the UK Addendum where relevant). Google, if you accept performance or marketing cookies, may process data in the United States under the EU–US Data Privacy Framework. Contact us for a copy of the safeguard used.

6. How long we keep it

We keep your personal data for as long as you have an account, and afterwards only as long as we need it — for example, to meet legal, tax, and accounting obligations, and to resolve disputes. When we no longer need it, we delete or anonymise it.

7. Your rights

Subject to the conditions in data-protection law, you can ask us to:

• access a copy of your personal data;
• correct data that is wrong or incomplete;
• erase your data;
• restrict or object to our processing (including objecting to direct marketing at any time);
• port your data to another provider;
• withdraw consent where we relied on it.

To exercise any of these, email [email protected]. You also have the right to complain to a supervisory authority. Our lead authority is the Data Protection Commission (Ireland) (dataprotection.ie) — though we'd appreciate the chance to help first.

8. Cookies

What cookies are

Cookies are small text files a website stores on your device. We also use similar technologies such as browser local storage. We group them into three categories: Essential (the site can't work without them), Performance and Marketing. Performance and marketing cookies are optional and are used only if you accept them.

Essential cookies — always on

These make the site and your account work — signing in, keeping your basket, security, and remembering your cookie choice. They don't need your consent, and turning them off would break the site.

Cookie / storage	Set by	Purpose	Typical duration
PHPSESSID	MyShopCarts	Keeps your session while you browse	Session
form_key	MyShopCarts	Security — protects forms against cross-site request forgery	Session
X-Magento-Vary, private_content_version, section_data_ids	MyShopCarts	Serves the right cart and account content to you	Session to ~1 year
mage-cache-sessid, guest-view	MyShopCarts	Basket and guest-order lookup	Session
msc_consent	MyShopCarts	Remembers your cookie choice	6 months
Sign-in tokens (browser local storage)	MyShopCarts	Keeps you signed in to your account	Until sign-out
__cf_bm, cf_clearance	Cloudflare	Security and bot protection for the site	Up to ~30 min / session
__stripe_mid, __stripe_sid	Stripe	Fraud prevention during checkout and payment	Session to ~1 year

Performance cookies — only with your consent

These help us understand how visitors find and use our website — for example which pages are visited, how people arrive, and how they engage — so we can improve it.

Cookie / storage	Set by	Purpose	Typical duration
_ga, _ga_<ID>	Google Analytics	Distinguishes visits and sessions so we can measure site usage	2 years

Marketing cookies — only with your consent

These let us measure whether our Google ads lead to sign-ups, so we know which advertising works.

Cookie / storage	Set by	Purpose	Typical duration
_gcl_au	Google Ads	Links a sign-up to the ad that led to it (conversion measurement)	90 days

Until you accept a category, its Google tags don't load at all, so nothing is sent to Google.

What we don't do

We don't sell your data, and we don't use your browsing on our site to build advertising profiles of you.

Your choices

• The cookie banner. When you first visit, you can Accept all, Reject optional, or choose category by category under Preferences. Rejecting is as easy as accepting, and the site works the same either way.
• Change your mind any time. Use Cookie settings (also at the bottom of every page). If you withdraw consent, we delete the related cookies from your browser. We ask again after 6 months.
• Essential cookies are always active because the site needs them.
• Browser controls. You can also block or delete cookies in your browser settings. Blocking essential cookies may stop parts of the site working.

9. Changes to this policy

We may update this policy from time to time. If a change is significant, we'll let you know. The "last updated" date at the top shows the current version.

10. Company details