Legal
Privacy Policy
How ShipFeeder handles personal data, for merchants and for the shoppers of their stores.
Last updated: 7 November 2026
1. Who is responsible for your data
NAIT DIGI.TECH LTD, a private limited company registered in England and Wales, company number 16550159, registered office 125 Vine Street, Manchester, England, M18 8SR, is the operator of ShipFeeder. Our role depends on whose data it is:
- Controller for data about our own customers: visitors to this website, people who contact us, and merchants who buy and use ShipFeeder (account data, purchases, support messages).
- Processor for data about a merchant's own shoppers (customer email, order totals, order references, discount codes, points). The merchant is the controller of that data and decides how it is used. We process it only on the merchant's documented instructions, which are these policies, the Terms and the way the merchant configures the service.
If you are a shopper at a store that uses ShipFeeder, please contact that store about your data first. You can also write to us at support@shipfeeder.com and we will pass your request to the store.
2. What we collect
Swipe sideways to see all columns.
| Who | Data | Source |
|---|---|---|
| Website visitors | IP address, browser type and request details in short-lived server logs needed to serve and secure the site | Your browser |
| People who contact us | Name, email address, subject and message | You, through the contact form or email |
| Merchants (account) | Name, email address, password (stored only as a salted hash), plan, stores you create, program settings | You |
| Merchants (purchase) | Plan, amount, date and payment reference. We do not receive card numbers | You and our payment provider |
| Shoppers of a merchant | Email address, name if the store sends it, order reference, order total, discount codes used, points balance and history, tier, referral code, email preferences | The merchant's store, CSV import or manual entry |
| Shoppers using the widget | The email address the store's theme passes to the widget, to look up points | The merchant's storefront |
We do not collect shipping addresses, phone numbers, card numbers, product details or any special category data as part of the loyalty service, and you should not send them to us.
3. How we use data and our legal bases
Swipe sideways to see all columns.
| Purpose | Data | Legal basis (UK and EU GDPR) |
|---|---|---|
| Create and run merchant accounts, deliver purchased plans | Account and purchase data | Contract |
| Take payments, keep accounting records, prevent fraud | Purchase data | Contract and legal obligation |
| Answer messages and give support | Contact and account data | Contract and legitimate interests |
| Secure the service, rate limit, detect abuse | Logs, session data | Legitimate interests |
| Notices about the service, such as changes to the terms or your plan | Account data | Contract and legitimate interests |
| Run a merchant's loyalty program: award points, tiers, referrals, the widget, dashboard and emails | Shopper data | On the merchant's instructions. The merchant relies on its own legal basis, usually legitimate interests or consent |
We do not sell personal data, we do not use it for advertising, and we never use any data to train AI models.
4. Emails sent to shoppers
On the merchant's behalf, ShipFeeder sends account notifications to shoppers: points earned, a new tier reached with its reward, and a reminder when points are unused. They are sent through Cloudflare Email Service. Each email names the store and has an unsubscribe link. A shopper who unsubscribes receives no more of these emails from that store and keeps their points.
We do not send newsletters or advertising. Merchants must have a lawful basis for the emails they enable, as the Terms require.
6. International transfers
Cloudflare operates a global network and we and our providers may process data outside the UK and the European Economic Area, including in the United States. Where we do, we rely on adequacy decisions where they exist, or on the UK International Data Transfer Addendum and the EU Standard Contractual Clauses, together with technical protections such as encryption in transit.
7. How long we keep data
Swipe sideways to see all columns.
| Data | Kept for |
|---|---|
| Contact messages | Up to 12 months |
| Login sessions | 30 days, then expired sessions are deleted |
| Purchase records | 6 years, to meet accounting and tax rules |
| Merchant account and program data (stores, shoppers, orders, points) | Until the merchant deletes the account, then deleted within 30 days |
| Email queue and send log | 90 days |
| Rate-limit counters | 24 hours |
| Server logs | Short-lived operational logs kept by our hosting provider |
8. Your rights
Under UK and EU GDPR you can ask to access your data, correct it, delete it, restrict or object to its use, and receive it in a portable format. Where we rely on consent you can withdraw it at any time. Email support@shipfeeder.com. We reply within one month and may need to check your identity.
Merchants can delete their account and all its program data from the account page. For shoppers, requests are normally handled through the store, and we help the store to carry them out.
You may complain to the UK Information Commissioner's Office at ico.org.uk, or to the data protection authority where you live or work. We would appreciate the chance to put things right first.
9. Security
We protect data with encryption in transit, salted password hashing, signed webhooks, rate limiting and access controls. See the Security page. No system is perfectly secure, and we will tell affected merchants and the regulator where the law requires after a breach.
11. Children
ShipFeeder is for businesses and is not directed at anyone under 18. We do not knowingly collect data from children. Merchants should not send us data about shoppers they know to be under the age at which they can lawfully take part in a loyalty program.
12. Changes to this policy
We will post changes here and update the date above. For material changes we will also tell merchants by email.
13. Contact
NAIT DIGI.TECH LTD, 125 Vine Street, Manchester, England, M18 8SR. Email support@shipfeeder.com.
Contact
NAIT DIGI.TECH LTD, 125 Vine Street, Manchester, England, M18 8SR. Company number 16550159.
Email: support@shipfeeder.com or use the contact page. Support hours: Mon to Fri, 09:00 to 17:00 UK time.