Privacy Policy
LGScommerce · last updated 23 September 2026
This policy explains what we do with personal data when you visit this website or subscribe to the service. It is about you, our customer.
If you are a shopper who bought from a shop built on this platform, the shop is the controller of your data, not us. Read that shop's own privacy policy, and contact the shop to exercise your rights. We process that data only on the shop's instructions — see our Data Processing Agreement.
1. Controller
1.1 [Registered company name], trading as LGScommerce, is the controller of the personal data described here.
1.2 Registered office: [Registered office address]
1.3 Privacy enquiries: privacy@lgscommerce.com
1.4 [Name a data protection officer here if you are required to appoint one, or delete this clause.]
2. What we collect about you
| Category | Data |
|---|---|
| Account | Your name, email address and password (stored hashed). |
| Your shops | Shop name, address, subdomain or custom domain, plan and settings. |
| Billing | Subscription, invoices, payment outcomes, and the last digits and type of the card used. We do not receive or store full card numbers. |
| Stripe connection | Your Stripe account identifier and whether it can take payments, so we can tell you when something needs your attention. |
| Support | Messages you send us and our replies. |
| Technical | IP address, browser and device information, and pages visited on this website. |
3. Why we use it, and our legal bases
| Purpose | Legal basis |
|---|---|
| Providing the service, hosting your shops and supporting you | Performance of a contract |
| Taking payment and keeping billing records | Performance of a contract; legal obligation |
| Keeping accounting and tax records | Legal obligation |
| Securing the service, preventing fraud and abuse | Legitimate interests: protecting the platform and its customers |
| Understanding how the website and service are used, in aggregate | Legitimate interests: improving what we offer |
| Sending service messages about your account, billing or outages | Performance of a contract |
| Sending marketing about the platform | Consent, or our legitimate interest in marketing to existing business customers; withdrawable at any time |
| Non-essential cookies | Consent |
4. Marketing
4.1 Every marketing email carries an unsubscribe link, and you can change your preference in your account.
4.2 Unsubscribing does not stop service messages about your account, billing or security. Those are part of providing the service and cannot be opted out of while you have an account.
5. Cookies
5.1 This website uses cookies. What they are and how to control them is set out in our Cookie Policy.
6. Who we share it with
6.1 We share personal data with the suppliers who help us run the service:
| Supplier | What for |
|---|---|
| Stripe | Payment processing and subscription billing |
| Amazon Web Services | Hosting, storage and backups |
| [Email provider] | Sending transactional and marketing email |
6.2 We also share data where required by law, and in connection with a sale or reorganisation of our business.
6.3 We do not sell personal data.
7. International transfers
7.1 Some suppliers process personal data outside the United Kingdom.
7.2 Where data goes to a country without an adequacy decision, we rely on standard contractual clauses or another lawful transfer mechanism. Details on request.
8. How long we keep it
| Data | Retained for |
|---|---|
| Billing and tax records | The period required by law, ordinarily six years. |
| Your account | While you have a subscription, and [12 months] after your last one ends. |
| Shop data | 30 days after a subscription ends, then deleted from live systems. |
| Support correspondence | [2 years] from the last message. |
| Website technical data | [state your retention period]. |
9. Your rights
9.1 You have the right to be informed, of access, to rectification, to erasure, to restrict processing, to data portability, to object to processing based on legitimate interests, and to object to direct marketing at any time. Where we rely on consent you may withdraw it at any time.
9.2 To exercise a right, email privacy@lgscommerce.com. We respond within one month, extendable by two further months for a complex request; we will tell you if that applies.
9.3 We may ask for enough information to satisfy ourselves who you are.
9.4 Records we must keep by law are retained for the remainder of that period and used for nothing else.
10. Automated decision-making
10.1 We do not take decisions with legal or similarly significant effects about you by automated means alone.
11. Complaints
11.1 Please raise any concern with us first at privacy@lgscommerce.com.
11.2 You may also complain to the Information Commissioner's Office, at ico.org.uk.
12. Changes
12.1 The current version is always on this page, with the date it last changed at the top. Where a change materially affects how we use your data we will tell you.