Legal & Compliance
SHARPEFY LTD (UK #16429418)
Legal & Compliance
How SHARPEFY LTD collects, protects, and processes personal data.
SHARPEFY LTD acts as an independent Data Controller regarding all Client account administrators, billing profiles, and corporate representative records under registration with the UK Information Commissioner's Office (ICO No. C1684413).
For inquiries regarding data privacy or supervisory representation, contact: privacy@hivendly.com.
| Processing Purpose | Data Categories | Legal Basis (GDPR) | Retention Period |
|---|---|---|---|
| Merchant Account & Store Setup | Director name, corporate email, phone, business address, company number, VAT number. | Article 6(1)(b) Contract Performance | Duration of active account + 5 years (statutory limitation). |
| Billing & Tax Invoicing | Billing address, tax ID, payment method tokens, subscription logs. | Article 6(1)(c) Legal Compliance (HMRC & EU VAT) | 10 years pursuant to corporate tax accounting laws. |
| Infrastructure Security & DDoS Defense | IP addresses, server access logs, browser user-agents, authentication logs. | Article 6(1)(f) Legitimate Interests | 12 rolling months, purged automatically via Cloudflare & AWS. |
Personal data is processed primarily within European Union data centers (AWS Paris eu-west-3 / Google Cloud Ireland). Any international onward transfer beyond the UK or EEA is safeguarded via European Commission Standard Contractual Clauses (SCCs 2021/914) or UK International Data Transfer Agreements (IDTA).
Pursuant to Chapter III of the UK/EU GDPR, individuals retain rights of access, rectification, erasure ("right to be forgotten"), restriction of processing, data portability, and objection. Direct requests to privacy@hivendly.com with responses provided within one calendar month.
Complaints may be lodged with the UK Information Commissioner's Office (ICO) or national data protection supervisory bodies across the EU (e.g., CNIL in France, BfDI in Germany).