Privacy Policy
Last updated: [14 August 2026]
1. Who we are
IMSHOP UK LTD ("IMSHOP.AI", "we", "us", "our") provides a mobile application platform for e-commerce brands. This policy explains how we collect and use personal data through our website imshop.ai (the "Site") and in the course of our business relationships.
| Company | IMSHOP UK LTD |
|---|---|
| Company number | 13942198 |
| Registered address | 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom |
| Contact | privacy@imshop.ai |
We are the controller for the personal data described in this policy. Where we process data on behalf of our business customers as part of delivering our platform, we act as a processor, and the terms of the relevant customer agreement apply.
2. Scope
This policy covers:
- visitors to the Site;
- people who contact us, request a demo, or subscribe to our communications;
- representatives of our business customers, partners, and suppliers.
It does not cover end users of mobile applications we build for our customers. In those apps, our customer is the controller and their own privacy notice applies.
3. What we collect
Information you give us
- Name, business email address, company name, job title, phone number
- The content of your enquiry or demo request
- Correspondence with us by email or through the Site
- Marketing preferences
Information collected automatically
- IP address, browser type, device type, operating system, language settings
- Pages visited, referring URL, time spent, and interactions on the Site
- Cookie identifiers — see our Cookie Policy
Information from third parties
- Publicly available business information used for outreach, for example from LinkedIn or company websites
- Data from advertising and analytics platforms about how you reached the Site
- Referrals from partners
We do not intentionally collect special category data, and we do not knowingly collect data from children.
4. Why we use it and on what basis
| Purpose | Legal basis |
|---|---|
| Responding to enquiries and demo requests | Legitimate interests; steps prior to entering a contract |
| Providing and administering our services | Performance of a contract |
| Sending marketing communications about our platform | Consent where required, otherwise legitimate interests for existing business contacts |
| Measuring how the Site is used and improving it | Consent (analytics cookies) |
| Advertising and campaign measurement | Consent (marketing cookies) |
| Managing supplier and partner relationships | Performance of a contract; legitimate interests |
| Meeting legal, accounting, and regulatory obligations | Legal obligation |
| Protecting our systems and preventing fraud or abuse | Legitimate interests |
Where we rely on legitimate interests, we have assessed that our interest in operating and growing the business does not override your rights. You can object to this processing at any time — see section 8.
5. Who we share it with
We share personal data with:
- Service providers who support our operations — hosting, analytics, CRM and marketing tools, email delivery, customer support, and professional advisers. Where they process personal data on our behalf, they act on our instructions and are subject to appropriate contractual obligations.
- Advertising and analytics platforms, where you have consented to the relevant cookies.Depending on the service and processing involved, these providers may process personal data as processors, independent controllers or joint controllers.
- Professional advisers, regulators, and authorities, where required by law or to establish or defend legal claims.
- A buyer or successor, if we sell or reorganise part of our business.
We do not sell personal data.
6. International transfers
Where personal data is transferred outside the United Kingdom or the European Economic Area, we ensure that an appropriate transfer mechanism or safeguard is in place where required. Depending on the recipient and the circumstances, this may include an applicable adequacy decision or regulation, the UK Extension to the EU–US Data Privacy Framework or the EU–US Data Privacy Framework where the recipient is eligible and appropriately certified, the UK International Data Transfer Agreement or Addendum, the European Commission’s Standard Contractual Clauses, or another lawful transfer mechanism.
You can request details of the safeguards applied by contacting us at privacy@imshop.ai.
7. How long we keep it
We keep personal data only as long as necessary for the purposes described above.
| Data | Typical retention |
|---|---|
| Enquiries and demo requests that do not convert | 24 months from last contact |
| Customer and contract records | Duration of the relationship plus 6 years |
| Marketing contacts | Until you unsubscribe, or 24 months of inactivity |
| Website analytics | Up to 26 months |
| Accounting and tax records | 6 years, as required by law |
8. Your rights
Under the UK GDPR and, where applicable, the EU GDPR, you have the right to:
- access the personal data we hold about you;
- have inaccurate data corrected;
- have your data erased in certain circumstances;
- restrict or object to processing, including direct marketing;
- receive your data in a portable format;
- withdraw consent at any time, without affecting processing already carried out.
To exercise any of these, email privacy@imshop.ai. We respond within one month. We may ask you to verify your identity first.
If you are unhappy with our response, you can complain to a supervisory authority:
- United Kingdom — Information Commissioner's Office, https://ico.org.uk/make-a-complaint/
- European Economic Area — the data protection authority where you live or work.
9. Marketing
You can opt out of marketing emails at any time using the unsubscribe link in any message, or by emailing us. Opting out of marketing does not stop service-related messages about an existing contract.
10. Security
We use technical and organisational measures appropriate to the risk, including access controls, encryption in transit, and contractual obligations on our providers. No transmission over the internet is completely secure, and we cannot guarantee absolute security.
11. Cookies
The Site uses cookies and similar technologies. Non-essential cookies are set only with your consent, which you can change at any time. Full detail is in our Cookie Policy.
12. Changes
We update this policy when our practices or legal obligations change. The date at the top shows the last revision. Material changes will be communicated through the Site or by email where appropriate.