Version 1.0 · Last updated: 2026/09/06
LinkShop respects and protects your privacy. This Privacy Policy explains how we collect, use, store, and share your personal information when you use our platform and services, and the rights you have under applicable data protection laws (including GDPR and CCPA).
Please read this policy before using the Service. Using the Service means you have read and agree to this policy. We may update it from time to time; material changes will be announced in advance as described in Section 13.
The data controller for the Service is:
| Purpose | Legal basis |
|---|---|
| Provide and maintain the Service | Contract performance |
| Billing and payment processing | Contract performance |
| Customer support | Contract performance / legitimate interests |
| Service notifications (billing, security, policy updates) | Legitimate interests |
| Security and fraud prevention | Legitimate interests |
| Product improvement and analytics | Legitimate interests |
| Legal compliance | Legal obligation |
| Marketing communications (optional) | Your consent |
We may aggregate or de-identify data for statistical analysis. Such data cannot be linked back to an individual.
| Type | Purpose | Can be disabled |
|---|---|---|
| Strictly necessary | Login sessions, core functionality | No |
| Functional | Preferences and personalization | Yes |
| Analytics | Anonymous usage statistics, product improvement | Yes |
Analytics tools we use (only when enabled on this site): Google Analytics 4 and Microsoft Clarity. You can adjust your preferences through your browser settings or our cookie controls.
We do not sell your personal information, including "sale" as defined by applicable law such as the CCPA. We share your information only in the following circumstances:
If a security incident affecting your rights occurs, we will notify you and the relevant supervisory authorities within 72 hours of becoming aware, as required by applicable law. Please keep your account credentials safe and do not share them.
| Data type | Retention period | After expiry |
|---|---|---|
| Account information | While your account is active; 90 days after cancellation | Deleted or anonymized |
| Transaction records | As required by tax and accounting law (typically up to 7 years) | Deleted or archived |
| Support communications | 2 years | Securely deleted |
| Security and audit logs | 12 months | Securely deleted |
To exercise any of the following rights, contact us (see Section 14). We will respond within 30 calendar days.
| Right | Description |
|---|---|
| Right to be informed | Know what data we collect and how we use it |
| Right of access | Obtain a copy of your personal information |
| Right to rectification | Correct inaccurate or incomplete information |
| Right to erasure | Request deletion of your data under certain conditions |
| Right to restrict processing | Pause processing of your data in certain circumstances |
| Right to data portability | Receive your data in a machine-readable format |
| Right to object | Object to processing based on legitimate interests or marketing |
| Right to withdraw consent | Withdraw consent-based processing at any time |
If you believe we have not handled your request properly, you have the right to lodge a complaint with your local data protection authority.
With your consent, we may send you marketing messages by email or in-app notification. You can opt out at any time: click the "unsubscribe" link in any marketing email, disable marketing notifications in your account settings, or contact us. Opting out does not affect essential service notifications (such as billing and security alerts).
Our servers and vendors may be located outside your country. Where personal data is transferred across borders, we protect it through safeguards such as: data processing agreements incorporating the EU Standard Contractual Clauses (SCCs); transferring only to recipients that provide an equivalent level of protection; and other mechanisms where applicable.
The Service is intended for users who are at least 18 years old. We do not knowingly collect information from anyone under that age. If you believe a child has provided us with personal information, contact us immediately and we will delete it promptly.
The Service may contain links to third-party websites or integrations with third-party services (such as payment providers or sign-in providers). This policy applies only to information collected directly by us. We are not responsible for third parties' data practices; please review their policies before using them.
For material changes, we will notify you at least 15 days in advance via a platform announcement or email to your registered address, and update the "Last updated" date at the top of this page. Continued use of the Service after the effective date constitutes acceptance of the updated policy.