Privacy Policy

Overview

This policy explains what personal data Shop Starter collects through this website, why we collect it, and what rights you have over it. It covers the checkout, order and onboarding questionnaire on this website only — not the privacy policy of any store we build for you, which is a separate document for your own site.

The business operating Shop Starter is Kęstutis Žvaginis (individuali veikla), Bajorų kel. 29-47, Vilnius, Lithuania (individual activity certificate No. 667795). For anything in this policy, contact info@shopstarter.store.

Information we collect

At checkout, to create and confirm your order:

• Name, email address and, if you provide one, company name
• Payment details — entered directly into Stripe’s payment form and sent straight to Stripe. We never see or store your full card number.

After purchase, in the onboarding questionnaire that becomes your build brief:

• Business details — business and contact name, phone, country, existing website, legal/company name and VAT number where applicable
• Product information — descriptions, category, links to your product photos or copy, and any files you upload (logos, brand guides, product images)
• Store preferences — domain, branding, payment providers, shipping carriers, selling regions, language preferences and any notes you add

If you use the contact form:

• Name, email address and the message you send
• A one-way cryptographic hash of your IP address — not the address itself — kept only to limit spam

We also automatically collect standard server request data (such as IP address and browser user agent) for security and fraud prevention.

Cookies and advertising

Reaching the checkout page loads Stripe’s payment form, which sets its own cookies for fraud prevention — these are governed by Stripe’s privacy policy, not ours.

Every page on this site also loads Google’s advertising tag (gtag.js), which sets Google Ads cookies. We use it to measure which ads bring visitors here and what they do afterwards: reaching the checkout page, reaching the payment step, and completing a purchase. Each of these events carries only the order amount, currency and, for a completed purchase, the order reference we generate — never your card details. If Google’s “Enhanced Conversions” matching is enabled on our account, these events also include a one-way cryptographic hash of your email address (not the address itself), which lets Google match your purchase to the ad that led to it, including across devices; a hash cannot be reversed back into your email by Google or anyone else. See Google’s own privacy policy for how it handles this data on its side.

How we use your information

• To process payment and fulfil your order
• To build the store you purchased, from your questionnaire answers
• To send order confirmations, receipts and your onboarding link by email
• If you start checkout but do not complete payment, to send you a reminder email — later ones may include a limited-time discount. You can stop these at any time via the unsubscribe link in the email, with no effect on any order you go on to complete
• To provide customer support and reply to messages you send us
• To meet our tax, invoicing and accounting obligations
• To detect and prevent fraud and abuse of the checkout

Who we share it with

We share personal data only with the providers that run this service:

• Stripe — payment processing
• Resend — delivery of order and onboarding emails
• Our hosting provider — runs the application and database
• Google Ads — advertising conversion tracking, as described under “Cookies and advertising” above

We do not sell personal data, and we do not share it with anyone else except where required by law.

Your onboarding link

Your onboarding questionnaire is reached through a link emailed to you at checkout. We store only a hash of that link’s token, not the link itself, so treat it like a password — anyone with the link can open your brief.

Data retention

We keep order and onboarding records for as long as needed to build your store, provide support, and meet accounting and tax retention requirements, after which we delete or anonymise them on request where we are not legally required to keep them.

Security

Traffic to this site is encrypted in transit. Uploaded files are stored under generated names, not the names or extensions you uploaded them with, and are never publicly reachable. Pricing is always computed server-side, and admin access is password protected.

International transfers

Your data is processed on servers operated by us and by the providers listed above, which may be located outside your country. Where required, we rely on appropriate safeguards for any such transfer.

Children

This service is intended for business owners and is not directed at children. We do not knowingly collect personal data from anyone under 16.

Your rights

Because Shop Starter is operated from Lithuania, the EU General Data Protection Regulation applies to how we handle your data wherever you live. You have the right to access, correct, delete, restrict or object to our processing of your personal data, and to receive a copy of it in a portable format. To exercise any of these, contact info@shopstarter.store. You also have the right to lodge a complaint with the State Data Protection Inspectorate of Lithuania (Valstybinė duomenų apsaugos inspekcija), or with the data protection authority in your own country.

Changes to this policy

We may update this policy as the service changes. Material changes will update the “Last updated” date above.

Contact

Questions about this policy: email info@shopstarter.store. See also our Terms of Service.