Our Commitment

DropshipBuys is committed to protecting your personal data and respecting your privacy. This GDPR Policy explains how we comply with the European Union General Data Protection Regulation (GDPR) and the rights it gives you over your personal data. It applies to anyone in the European Economic Area (EEA), the United Kingdom, and Switzerland who uses our services.

Data Controller

DropshipBuys, operated by ShopWebCo, Inc. is the data controller responsible for your personal data. If you have any questions about this policy or how we handle your data, contact our data protection team at [email protected].

What Data We Collect

• Account and business details such as your name, email, password, and store information.
• Order, payment, and payout information needed to process transactions.
• Storefront, catalog, and supplier-sourcing data.
• Shipping addresses and order-recipient details you process.
• Usage, device, and technical data such as IP address and browser type.

Legal Bases for Processing

We process your personal data only when we have a lawful basis to do so, including:

• Contract: to create your account and fulfill your orders.
• Consent: for marketing emails and non-essential cookies, which you can withdraw at any time.
• Legal obligation: to meet tax, accounting, and other legal requirements.
• Legitimate interests: to secure our platform, prevent fraud, and improve our services.

Your Rights Under GDPR

You have the right to:

• Access the personal data we hold about you.
• Rectify data that is inaccurate or incomplete, directly in your account settings.
• Erase your data ("right to be forgotten"), subject to the legal exceptions described below.
• Restrict or object to certain processing.
• Data portability: receive your data in a portable, machine-readable format.
• Withdraw consent at any time, without affecting prior processing.
• Lodge a complaint with your local supervisory authority.

We do not yet have a self-service tool for erasure or data export. Closing your account through the app suspends it immediately; to request erasure, a data export, or exercise any other right above, email [email protected]. Our team reviews and processes these requests manually and will respond within one month, as required by the GDPR.

Erasure and portability requests are honored except where we're permitted or required to keep specific records — for example, transaction records needed for tax and accounting law, records needed to establish or defend a legal claim, or an active seller dispute involving your order. In those cases we retain only what the exception covers, for only as long as it applies.

Data Retention

We keep your personal data only for as long as necessary: for the life of your account, and afterward only for the specific period required by an applicable legal, accounting, or dispute-resolution obligation. Outside of those exceptions, data is deleted or anonymized on request (see above) or once it is no longer needed.

International Transfers

Where we transfer personal data outside the EEA, we use appropriate safeguards such as Standard Contractual Clauses to ensure your data receives an equivalent level of protection.

Data Security

We use technical and organizational measures, including encryption and access controls, to protect your personal data against unauthorized access, loss, or misuse.

Updates to This Policy

We may update this GDPR Policy from time to time. Any changes will be posted on this page with an updated revision date.

Contact Us

If you have questions about this GDPR Policy or your data-protection rights, contact us at [email protected].