We are Gshopx.com, a company located in the United Kingdom (hereinafter referred to as “Gshopx”, “we”, “us”, or “our”).
You can contact us at: sz2@ripplesoftlimited.co.uk
2. Scope of This Privacy Policy
2.1 This Privacy Policy applies to www.Gshopx.com and all services provided through it, including purchases, login access, technical support, and any other services we provide (collectively referred to as the “Gshopx Services”).
2.2 This Privacy Policy governs the collection of both personal and non-personal data when you use Gshopx Services.
“Personal Data” means any information that can identify you directly or indirectly, including but not limited to your name, identification number, location data, or online identifiers.
2.3 We respect your privacy and process your personal data in accordance with applicable laws, including regulations in the European Union, the United States (including COPPA), and other jurisdictions.
2.4 For the purposes of applicable EU data protection laws, Gshopx acts as the data controller of your personal data.
We recognize the importance of protecting children's privacy. We do not knowingly collect personal data from children under the age of 16.
If you believe a child has provided us with personal data, please contact us at: sz2@ripplesoftlimited.co.uk
4. What Information We Collect
4.1 Data Necessary for Contract Performance & API Fulfillment
We operate a guest checkout system (no registration required). When you make a purchase, we collect:
Email address: Used to deliver digital goods, send order confirmations, provide support, and verify transactions.
Order details: Product information, transaction time, and amount.
API Integration Data: To fulfill your order for virtual items (such as CD keys), necessary transaction data (e.g., Order ID) is securely transmitted to our digital goods suppliers and API partners to generate and retrieve your purchased item.
Legal Basis: GDPR Article 6(1)(b) – performance of a contract
4.2 Website Security & Technical Data
When you access Gshopx, we automatically collect:
- IP address
- Device type
- Operating system
- Browser type and settings
- Referrer URL
- Access timestamps
Purpose: System diagnostics, site management, fraud prevention
Legal Basis: GDPR Article 6(1)(f) – legitimate interests
We use Google services to improve user experience. These may include:
- Page duration
- Clickstream data
- Conversion rates
- Approximate location (country/city level)
We apply IP anonymization, ensuring no direct identification.
Legal Basis: Your consent (cookie-based)
4.4 Payment Processing & Financial Security
All payments are handled by PCI-DSS certified third-party providers (such as PayPal):
- We do NOT collect or store full credit card details or passwords
- We only receive limited transaction feedback:
- Transaction status
- Transaction ID
- Fraud risk score
- Billing email
Legal Basis: Contract performance & legal compliance
We retain data only as necessary:
- Order data: Retained for 6 years to comply with UK tax and accounting legal requirements.
- Technical logs: Typically deleted within 30–90 days
You have the right to:
- Access your data
- Request correction or deletion
- Restrict processing
To exercise your rights, contact us via our support email.
We collect information:
- (a) Directly from you
- (b) When you contact support
- (c) Via third-party platforms using Gshopx API
- (d) Through optional surveys or polls
We use cookies to collect data.
Please refer to our Cookie Policy for details and consent management.
We process your data to:
- Provide services (contract performance)
- Comply with legal obligations
- Serve legitimate interests (e.g., fraud prevention, marketing relevance)
Where required, we rely on your consent, which you may withdraw at any time.
We store your data on secure servers and implement appropriate technical and organizational safeguards.
- Support communications: retained as necessary
- Public content: retained until deleted by you
We use your data to:
- Provide services and fulfill orders
- Improve website performance
- Send marketing communications (optional)
- Prevent fraud and unauthorized access
- Analyze marketing effectiveness
- Notify updates
- Personalize services
We may use data for personalized recommendations, but:
No automated decision-making affecting legal rights
You can opt out anytime via the unsubscribe link in our marketing emails or by contacting our support team.
We may share aggregated anonymous data with partners to improve services.
We only share data when necessary with:
Digital Goods Suppliers & API Partners: To process orders, retrieve digital keys, and fulfill purchases.
- Customer support providers
- Advertising & analytics partners
- Fraud prevention services: Including sharing necessary transaction data or IP addresses to validate the safety of a transaction before dispensing digital keys.
- Payment processors (e.g., PayPal)
- Legal and financial advisors
We may also disclose data if required by law.
Your data may be processed outside your country (e.g., US, Canada).
We ensure protection via the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses (SCCs), as approved by the Information Commissioner's Office (ICO).
Our services may link to third-party websites.
These have their own privacy policies, which we do not control.
We may disclose data:
- To comply with legal obligations
- During business restructuring or mergers
Depending on your location, you may have the right to:
- Access your data
- Delete your data
- Correct your data
- Transfer your data
- File complaints with authorities
Contact: sz2@ripplesoftlimited.co.uk
We may update this Privacy Policy as needed.
Changes will be published on our website with an updated revision date.
Please also review our Terms of Service, which govern your use of Gshopx.