Privacy Policy

At Flushop, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website.

1. Information We Collect

We collect information that you voluntarily provide to us when registering on the platform, expressing an interest in obtaining information about us or our products and services, when participating in activities on the platform or otherwise contacting us. This includes:

• Personal Data: Name and email address.
• Transaction Data: We process payments through secure providers (e.g., Paystack). We do not store your full credit card details.
• Analytics Data: Pages visited, time on site, and browsing behavior via Google Analytics.
• Security Data: IP addresses, device fingerprints, and login timestamps for security monitoring.

2. How We Use Your Information

We use the information we collect or receive:

• To facilitate account creation and logon process.
• To fulfill and manage your orders, payments, and downloads.
• To send administrative information to you (like order receipts and OTPs for password resets).
• To enforce our terms, conditions, and policies.
• To detect and prevent fraud, abuse, and security threats.
• To improve our services and user experience through analytics.

3. Data Sharing and Disclosure

We may share your information in the following circumstances:

• Payment Processors: We share transaction data with Paystack and other payment providers to process payments.
• Email Service: We use Resend to send transactional emails (order receipts, password resets).
• Cloud Storage: Digital files are stored and delivered via Cloudflare R2-compatible storage.
• Legal Requirements: We may disclose information when required by law or to protect our rights.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, user data may be transferred.

4. Data Retention

We retain your personal data for as long as necessary to provide our services and fulfill the purposes outlined in this policy:

• Order Data: 7 years for legal and tax compliance.
• Account Data: Until account deletion or closure.
• Analytics Data: 26 months as per Google Analytics retention policy.
• Security Logs: 90 days for security monitoring and fraud prevention.

5. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to access or store information:

• Essential Cookies: Required for authentication, shopping cart, and security (cannot be disabled).
• Analytics Cookies: Google Analytics for understanding user behavior and improving our service.
• Functional Cookies: Remember your preferences and settings.

You can manage your cookie preferences through our cookie consent banner and your browser settings.

6. Data Security

We implement a variety of security measures to maintain the safety of your personal information:

• All sensitive information is transmitted via Secure Socket Layer (SSL) technology.
• Passwords are hashed using bcrypt and never stored in plain text.
• We use Sentry for error tracking with sensitive data filtering.
• Database access is restricted and encrypted.
• We implement rate limiting, account lockout, and device tracking for security.

7. Your Rights Under GDPR

If you are located in the European Economic Area (EEA), you have the right to:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data ("right to be forgotten").
• Objection: Object to processing of your personal data.
• Portability: Request transfer of your data to another service ("data portability").
• Restriction: Request restriction of processing your personal data.

You can exercise these rights through your account dashboard or by contacting us at support@flushop.store.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place to protect your data in accordance with this privacy policy and applicable laws.

9. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any changes by posting the new privacy policy on this page and updating the "Last Updated" date.

10. Contact Us

If you have questions regarding this privacy policy or your personal data, please contact us at:

• Email: support@flushop.store
• GDPR Requests: gdpr@flushop.store