Legal
Privacy Policy
Last updated: 26 August 2026
This policy explains what we do with your personal data when you use Shopply: what we collect, why we need it, who we share it with and how long we keep it. It also sets out the rights you have and how to use them.
1. Who is responsible for your data
The controller of your personal data is Digital Traders sp. z o.o., ul. Stefana Batorego 18/108, 02-591 Warszawa, Poland, KRS 0001253066, NIP 7011322455. For anything to do with your data, write to [email protected].
2. What we collect
Account data. Your e-mail address and the password you choose, which we store only as an encrypted hash and never in readable form. We also keep the country you shop from, the settings you choose and, if you contact us, your messages.
Shopping and cashback data. Which retailer links you clicked, the transactions retailers report back to us, the value and status of your cashback, your balance and the history of your claims.
Payout data. The details needed to send your money, such as your PayPal address or bank account number, the name on the account, and where the law requires it, information confirming your identity.
Technical data. IP address, device and browser information, the pages you open on Shopply, and identifiers stored in cookies.
We do not ask for special categories of data such as health or political views. Please do not send them to us.
3. Why we use it and on what basis
To run your account and pay your cashback. This is necessary to perform our agreement with you under Article 6(1)(b) GDPR. Without this data we cannot track purchases or send you money.
To keep the service safe. We check for multiple accounts, fake orders and other abuse, and we investigate suspicious payouts. This is our legitimate interest in protecting the service and our partners under Article 6(1)(f) GDPR.
To meet legal duties. Accounting and tax records, and answering lawful requests from public authorities, under Article 6(1)(c) GDPR.
To send service messages. Confirmations, payout notices and changes to our terms, as part of performing the agreement.
To send offers and newsletters. Only with your consent under Article 6(1)(a) GDPR, and you can withdraw it at any time using the link in the message or by writing to us.
To understand how the site is used and improve it. Based on your consent for analytics cookies, or on our legitimate interest where the analysis uses data that cannot identify you.
4. Cookies and tracking
Shopply needs cookies to work. When you click through to a retailer, a tracking cookie tells the retailer and the affiliate network that the visit came from us, which is how your cashback is credited. Without these cookies there is no cashback, so they are treated as necessary for the service you asked for.
We also use cookies that keep you signed in and remember your settings, and, with your consent, cookies that measure how the site is used. You can manage cookies in your browser, but blocking them will usually stop cashback from tracking.
5. Who we share it with
We share personal data only where it is needed, and with recipients who process it for us under a contract:
- affiliate networks and retailers, so that your purchases can be matched to your account and the commission can be paid;
- payment providers, so that payouts reach you;
- hosting, e-mail and support providers that run the technical side of the service;
- accountants, auditors and legal advisers, where a case requires it;
- public authorities, where the law obliges us to hand data over.
We do not sell your personal data.
6. Transfers outside the European Economic Area
Some of our partners operate outside the European Economic Area. Where data is transferred there, we rely on an adequacy decision of the European Commission or on the standard contractual clauses, together with the additional safeguards those transfers require. You can ask us for a copy of the safeguards used.
7. How long we keep it
Account and cashback data is kept for as long as you have an account. After you close it, we keep what is needed to settle outstanding payments and to defend against claims, normally for up to six years.
Records connected with payouts and accounting are kept for five years counted from the end of the year in which the tax became due, as Polish tax law requires. Data collected for fraud prevention is kept for as long as it is needed for that purpose. Data processed on the basis of consent is deleted once you withdraw it, unless another basis applies.
8. Your rights
Under the GDPR you have the right to access your data and get a copy of it, to have inaccurate data corrected, to have data erased, to restrict or object to processing, and to receive the data you gave us in a portable format. Where processing is based on consent, you can withdraw it at any time without affecting what we did before.
To use any of these rights, write to [email protected] from the address linked to your account. We answer within one month and will tell you if a complex request needs longer.
If you think we handle your data incorrectly, you can complain to the President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warszawa, Poland, or to the supervisory authority in the country where you live.
9. Automated decisions
We use automated checks to spot suspicious activity, for example several accounts created from one device or unusual patterns of orders. A flagged case is reviewed by a person before we suspend an account or refuse a payout, so no decision with a legal effect on you is taken by software alone.
10. Security
We protect your data with encrypted connections, encrypted storage of passwords, restricted access for our staff and regular review of the providers we work with. No service can promise perfect security, so please use a strong password that you do not use anywhere else.
11. Children
Shopply is not intended for people under 18 and we do not knowingly collect their data. If you believe a minor has registered, tell us and we will remove the account.
12. Changes to this policy
We update this policy when the service or the law changes. The current version is always published here with the date at the top. If a change matters to you, we will tell you by e-mail before it takes effect.
13. Contact
Digital Traders sp. z o.o., ul. Stefana Batorego 18/108, 02-591 Warszawa, Poland, [email protected].