Last Updated: January 1, 2025
Effective Date: January 1, 2025
ShopWa ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website shopwa.net and use our WhatsApp Business solutions and services (collectively, the "Services").
Please read this Privacy Policy carefully. By accessing or using our Services, you acknowledge that you have read, understood, and agree to be bound by the terms of this Privacy Policy.
1. Information We Collect
1.1 Personal Information You Provide
We may collect personal information that you voluntarily provide to us when you:
- Register for an account or request our services
- Fill out a contact form on our website
- Subscribe to our newsletter or communications
- Communicate with us via email, phone, or WhatsApp
- Participate in surveys, promotions, or events
This information may include:
- Full name and job title
- Business name and registration details
- Email address and phone number
- Billing and payment information
- Business address
- WhatsApp Business account details
1.2 Information Collected Automatically
When you access our website, we may automatically collect certain information, including:
- IP address and browser type
- Operating system and device information
- Pages visited, time spent, and navigation patterns
- Referring website or source
- Date and time of access
1.3 Information from Third Parties
We may receive information about you from third-party sources, including:
- Meta/WhatsApp Business Platform (business account data, message delivery status)
- Analytics providers
- Business partners and referral sources
2. How We Use Your Information
We use the information we collect for the following purposes:
- Service Delivery: To provide, maintain, and improve our WhatsApp Business solutions and services
- Communication: To respond to your inquiries, provide customer support, and send service-related notifications
- Account Management: To create and manage your account, process transactions, and send billing information
- Analytics: To analyze usage patterns, improve our website, and develop new features
- Marketing: To send promotional communications (with your consent) about our services, updates, and industry insights
- Compliance: To comply with legal obligations, enforce our terms, and protect our rights
- Security: To detect, prevent, and address fraud, security issues, and technical problems
3. Legal Basis for Processing (GDPR)
If you are located in the European Economic Area (EEA), we process your personal data based on the following legal grounds:
- Consent: Where you have given explicit consent for specific processing activities (e.g., marketing communications)
- Contract Performance: Where processing is necessary to perform our contract with you or take pre-contractual steps at your request
- Legitimate Interests: Where processing is necessary for our legitimate business interests, provided these do not override your rights
- Legal Obligation: Where processing is necessary to comply with applicable laws and regulations
4. How We Share Your Information
We do not sell your personal information. We may share your information in the following circumstances:
- Service Providers: With trusted third-party service providers who assist us in operating our business (hosting, analytics, payment processing), bound by contractual data protection obligations
- Meta/WhatsApp: With Meta Platforms, Inc. as required for WhatsApp Business API operations, subject to Meta's data policies
- Legal Requirements: When required by law, regulation, legal process, or governmental request
- Business Transfers: In connection with a merger, acquisition, or sale of assets, with appropriate notice to affected users
- With Your Consent: In any other circumstances where you have provided explicit consent
5. Data Security
We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:
- Encryption of data in transit and at rest (TLS/SSL, AES-256)
- Access controls and authentication mechanisms
- Regular security assessments and vulnerability testing
- Employee training on data protection and security practices
- Incident response procedures for data breach management
While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security but commit to promptly notifying affected users and relevant authorities in the event of a data breach, as required by applicable law.
6. Data Retention
We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including:
- For the duration of our business relationship and active service provision
- As required to comply with legal, regulatory, or reporting obligations
- To resolve disputes and enforce our agreements
- For a reasonable period after account termination to handle any outstanding matters
When personal data is no longer needed, we securely delete or anonymize it in accordance with our data retention policy.
7. Your Rights
Depending on your location and applicable law, you may have the following rights regarding your personal data:
- Right of Access: Request a copy of the personal data we hold about you
- Right to Rectification: Request correction of inaccurate or incomplete personal data
- Right to Erasure: Request deletion of your personal data ("right to be forgotten")
- Right to Restrict Processing: Request limitation of how we process your data
- Right to Data Portability: Receive your data in a structured, machine-readable format
- Right to Object: Object to processing based on legitimate interests or for direct marketing
- Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent
To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days, or as required by applicable law.
8. Cookies and Tracking Technologies
Our website may use cookies and similar tracking technologies to enhance your browsing experience. Types of cookies we use include:
- Essential Cookies: Necessary for website functionality and cannot be disabled
- Analytics Cookies: Help us understand how visitors interact with our website (e.g., Google Analytics)
- Marketing Cookies: Used to deliver relevant advertisements and measure campaign effectiveness
You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect website functionality.
9. International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. When we transfer personal data internationally, we ensure appropriate safeguards are in place, including:
- Standard Contractual Clauses approved by the European Commission
- Adequacy decisions by relevant data protection authorities
- Binding Corporate Rules where applicable
10. Children's Privacy
Our Services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal data from a child without parental consent, we will take steps to delete that information promptly.
11. Third-Party Links
Our website may contain links to third-party websites and services. This Privacy Policy does not apply to those third-party sites. We encourage you to review the privacy policies of any third-party sites you visit.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. We will notify you of material changes by posting the updated policy on our website with a revised "Last Updated" date. Your continued use of our Services after any changes constitutes acceptance of the revised Privacy Policy.
13. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority.