Privacy policy

Who we are

SendToShop (sendtoshop.com) is run by Agochar Tech LLP (“we”, “us”), a limited liability partnership registered in India, of 415 Decora Square, Sadhu Vasvani Road, Rajkot 360005, Gujarat, India. You can reach us at support@sendtoshop.com.

For shop accounts and this website we are the controller of the personal data. For the files and details your customers send to your shop, your shop is the controller and we are its processor, under our data processing agreement (DPA).

What we collect from shops and their staff

Account: the owner’s and each staff member’s name, email and password (stored only as a hash), the owner’s mobile number if they give one (used only by our support team, never shown to customers), and, if turned on, the two-step sign-in secret and backup codes (stored encrypted).

Shop: its name, link, location line, country, time zone, business type, logo, tax number (such as a VAT number or GSTIN), settings, the PCs you pair, team invitations, branches, and the counter TV display link.

Billing: your plan, subscription and invoices. Card and PayPal details are entered with Razorpay or PayPal and never reach us; we receive only a reference and the payment status.

Sign-ins: for each session, the time, IP address and browser, to keep accounts safe.

Server logs: for each request to our servers, from shops and their customers alike, the IP address, time, page and browser, to keep the service secure and to prevent fraud and abuse. They never record file contents, or the parts of links that sign you in or open a screen.

What we process for shops’ customers

Files customers send (photos, documents, and videos and audio where the shop takes them) go to the shop they chose, and nowhere else. We remove location data from photos: on the phone for JPEG, TIFF and most camera RAW files, and on the shop’s PC for other photos (HEIC, PNG, WebP) before they are saved. Canon CR3, Fujifilm RAF and Photoshop files are kept exactly as sent. Videos and recordings in MP4 and QuickTime formats (MP4, MOV, M4A, 3GP) have where they were made removed on the phone; other video and audio formats are sent as they are. SendToShop staff cannot open customer files.

Details, if the shop asks for them: name, phone number, email and a note, and the shop’s own note on the order. With each order we also keep its number, file names and sizes, and a keyed hash of the connection it came from, so a shop can block a sender for 7 days without us keeping the address.

When a shop tells a customer their order is ready, the message opens in the shop’s own WhatsApp, messaging app or email; we do not send it.

Invite links: a shop can make a link for one customer and enter their name, phone number and email, which are filled in on the page for them. If the shop asks, we email the link once from our address, with replies going to the shop. We use the address for nothing else, and delete these details a day after the link expires (30 days at most).

Why we use it, and our legal bases

To provide the service you signed up for, including delivering files, billing and support (performance of a contract).

To keep the service secure and working, prevent abuse and fix faults, and to tell you about changes that affect your account (our legitimate interests in running a safe, reliable service).

To keep invoices and tax records (legal obligation).

We do not sell personal data, use it for advertising, or make decisions about you by automated means that have legal or similarly significant effects.

Where data is stored

Our servers are in the United Kingdom. Files customers send wait in the storage region nearest the shop, on Cloudflare R2: shops in the UK and Europe use the EU region. Other providers we use are listed on our sub-processors page, with where they process data.

Where personal data leaves the UK or the EU, we rely on adequacy decisions or the Standard Contractual Clauses (with the UK Addendum). Transfers from India follow the Digital Personal Data Protection Act, 2023.

How long we keep it

Customer files: our cloud copy is deleted as soon as the shop’s PC confirms the download, or after 7 days at most. Customer details and notes: on our servers until the shop erases them, or for the period the shop chooses (30 days to 5 years), then erased automatically. The Shop app on the shop’s own PCs keeps its copy after that, so staff can find returning customers, unless the shop chooses to erase it there too. A shop can erase one customer’s details at any time, everywhere, at their request.

Shop accounts: while the account is open. When a shop asks us to delete its account (on its Account page, or by email), we delete its files, orders, PCs and sign-ins within 30 days, and keep only what tax law requires: invoices and billing records, for as long as that law requires (typically 6 to 8 years).

Server logs: up to 180 days, then deleted. Database backups are encrypted copies kept for 14 days. Contact form messages are kept in our support inbox for as long as needed to answer them.

Security

All traffic is encrypted (HTTPS). Files are encrypted at rest and reached only through short-lived signed links. Passwords are hashed, two-step sign-in is available to shop owners, and our own staff use two-step sign-in; every admin action is logged. To help with a support question, our support staff can see a shop’s dashboard read-only for up to 30 minutes, with customer notes hidden; each visit is logged.

This website and cookies

We use Plausible, a cookieless analytics service that does not collect personal data or follow you across sites. With your consent, given in the banner on sendtoshop.com and withdrawable at any time through “Cookie choices” in the footer, we also use Google Analytics 4 and Microsoft Clarity to see how the website is used and improve it; they set cookies and record page use (with typed text masked), and process that data in the United States under Standard Contractual Clauses. The dashboard and the customer page use neither. See the cookie policy.

Who we share data with

Only the sub-processors on our sub-processors page, to run the service (hosting, storage, email, payments, error reports), and authorities where the law requires it. Each is bound by a contract to protect the data.

Your rights

Depending on where you are, you can ask for access to your data or a copy of it, its correction, completion or deletion, the restriction of its use, or a portable copy, and you can object to uses based on our legitimate interests. Shop owners can also delete their account themselves in the dashboard.

Write to us at the address below. We answer within one month. If you are unhappy, you can complain to the Information Commissioner’s Office (UK), your local data protection authority (EU), or the Data Protection Board of India.

Customers of a shop should contact the shop first, as it decides how their data is used; we help the shop answer.

Children

Shop accounts are for businesses and people aged 18 or over. Customers send to a shop of their choosing; a shop serving children is responsible for any consent their local law requires.

Changes to this policy

We will post any change here with a new date, and email shop owners before a change that materially affects them.

Contact and grievance officer

For any privacy question or request, or a grievance under Indian law, write to our grievance officer at support@sendtoshop.com, or by post to Agochar Tech LLP, 415 Decora Square, Sadhu Vasvani Road, Rajkot 360005, Gujarat, India. We acknowledge grievances within 48 hours and resolve them within 30 days.