Privacy policy
Last updated: 2026-08-08
The data controller is WEBSHOT, Nederland, KvK 51317915. You can reach us at office@webshot.nl. This policy explains what data we process, why, how long we keep it and what rights you have.
What we process
Account data: name, email address, password (stored only as a hash), store name, country and the company details you give us.
Technical data: IP address, browser type and access logs, generated automatically when you use the platform.
Billing data: amounts due and payment history. Card details are handled directly by the payment processor; we do not store them.
Your customers data
For the data of buyers in your store, you are the controller and we are the processor. We process it only to provide the service, on your instructions.
Each store data is physically isolated in its own database. There are no cross-store queries.
Why we process it
Performance of the contract (Art. 6(1)(b) GDPR): providing the platform, billing, support.
Legitimate interest (Art. 6(1)(f)): service security, abuse prevention, product improvement.
Legal obligation (Art. 6(1)(c)): retention of accounting and tax records.
Who we share it with
Cloudflare — hosting and infrastructure. Stripe and Netopia — payment processing. Integrated couriers — only the data needed for delivery, at your request.
We do not sell personal data. We do not transfer it outside the European Economic Area without adequate safeguards.
How long we keep it
Account and store data: for the duration of the contract, plus 30 days after cancellation, for export.
Accounting records: for the statutory retention periods.
Technical logs: 12 months at most.
Cookies
The marketing site uses no tracking or advertising cookies.
The admin panel uses a single strictly necessary cookie for the login session. Without it you cannot sign in, so it does not require consent.
Your rights
You have the right of access, rectification, erasure, restriction, portability and objection. Write to office@webshot.nl and we answer within 30 days.
If you are not satisfied, you can lodge a complaint with the Dutch Autoriteit Persoonsgegevens — our lead supervisory authority, since we are established in the Netherlands — or with the authority in your own country of residence.