Shoofi

Legal

Privacy Policy

This Privacy Policy describes how Shoofi Shopping LTD (“Shoofi,” “we,” “our,” or “us”) collects, uses, discloses, and protects personal data when you access or use our services, website, and mobile applications (together, the “Platform”). It is designed to comply with applicable data protection laws including the Israeli Protection of Privacy Law (1981), the EU General Data Protection Regulation (GDPR), the UK Data Protection Act, and the California Consumer Privacy Act (CCPA), where applicable.

By using our Platform, you consent to the data practices described in this Policy.

Last updated: June 2025

1. Types of Data We Collect

1.1 Data You Provide Directly

  • Identifiers: Full name, email address, phone number, delivery address, and login credentials.
  • Financial Data: Payment card details (processed via third-party payment providers).
  • Communication Data: Content of support requests, feedback, reviews, or complaints.

1.2 Data Collected Automatically

  • Technical Data: IP address, device type, browser type, OS version, time zone, crash logs.
  • Usage Data: Clicks, pages visited, session duration, referring URLs.
  • Cookies and Tracking: Persistent identifiers, ad identifiers, analytics tags.

1.3 Data from Third Parties

  • Social media profile data (if login is via social sign-in).
  • Partner data (e.g., order history from merchants).

2. Legal Bases for Processing (GDPR Specific)

We process your data based on:

  • Performance of a contract (to provide services).
  • Legal obligations (e.g., tax or regulatory requirements).
  • Legitimate interests (e.g., fraud prevention, service improvement).
  • Consent (for marketing or where required by law).

3. How We Use Your Data

3.1 To provide and operate our services.

3.2 To process transactions and deliver your orders.

3.3 To respond to your inquiries and support requests.

3.4 To personalize your user experience.

3.5 To detect and prevent fraudulent or unauthorized activity.

3.6 To send marketing and promotional communications (only with opt-in consent).

3.7 To comply with legal requirements and enforce our terms.

4. Sharing of Personal Data

We may share personal data with:

4.1 Service Providers: Payment processors, IT hosting, analytics, customer support vendors.

4.2 Business Partners: Merchants, delivery providers, or affiliates fulfilling your orders.

4.3 Legal Authorities: Government, law enforcement, or regulators if legally required.

4.4 In Business Transfers: In case of a merger, acquisition, or asset sale.

5. International Transfers of Data

Your data may be transferred to and processed in countries outside your country of residence. Where required, we ensure appropriate safeguards such as Standard Contractual Clauses (SCCs) are in place.

6. Data Retention

We retain personal data only as long as necessary for the purposes stated above, or as required by law, such as tax or accounting obligations.

7. Data Security

We implement appropriate technical and organizational measures to protect your data, including:

  • Encryption in transit and at rest.
  • Role-based access controls.
  • Regular audits and monitoring.

8. Your Rights (Under GDPR, CCPA, and Israeli Law)

8.1 Right to access — Obtain a copy of your personal data.

8.2 Right to rectification — Correct inaccurate or incomplete data.

8.3 Right to erasure — Request deletion of data under certain conditions.

8.4 Right to restrict processing — Limit how your data is used.

8.5 Right to data portability — Receive your data in a structured format.

8.6 Right to object — To direct marketing or certain processing based on legitimate interest.

8.7 Right to withdraw consent — Where processing is based on your consent.

8.8 Right to non-discrimination (CCPA-specific).

To exercise any of these rights, contact us using the information below. You may also have the right to lodge a complaint with a supervisory authority.

9. Cookies and Tracking Technologies

We use cookies, pixels, and other technologies to collect information about your interactions with our Platform, to:

  • Authenticate users
  • Remember preferences
  • Measure usage patterns
  • Show targeted advertisements

You may control cookies through your browser settings or use opt-out mechanisms provided for marketing cookies.

10. Children’s Privacy

Our Platform is not intended for use by individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware of such data being collected, we will delete it promptly.

11. Third-Party Services and Links

Our Platform may contain links to third-party websites or services. We are not responsible for the privacy practices of these external sites.

12. Changes to This Privacy Policy

We may revise this Policy from time to time. The updated version will be posted on this page with the effective date. If material changes are made, we will provide notice as required by law.

13. Contact Information

For questions, requests, or concerns related to your personal data, contact us at:

Email: [email protected]

By continuing to use our Platform, you acknowledge that you have read and understood this Privacy Policy.