Privacy Policy | The Simple Stream

1. Introduction

The Simple Stream ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our live shopping platform.

2. Information We Collect

2.1 Information You Provide

Account Information: Name, email address, company name, password
Billing Information: Payment card details, billing address (processed by our payment provider)
Profile Information: Business details, industry, website URL
Communications: Messages you send us, support tickets, feedback

2.2 Information Collected Automatically

Usage Data: Pages visited, features used, stream statistics
Device Information: Browser type, operating system, device identifiers
Log Data: IP address, access times, referring URLs

2.3 Information from Third Parties

Shopify: Store information, product data, order information (with your consent)
Analytics Services: Aggregated usage data

3. How We Use Your Information

We use collected information to:

Provide, maintain, and improve the Service
Process transactions and send related information
Send technical notices, updates, and support messages
Respond to your comments, questions, and requests
Monitor and analyse usage patterns and trends
Detect, prevent, and address technical issues or fraud
Send marketing communications (with your consent, which you can withdraw at any time)

4. Legal Basis for Processing (GDPR)

We process your data under the following legal bases:

Contract: Processing necessary to provide the Service
Legitimate Interests: Improving our Service, preventing fraud
Consent: Marketing communications, optional features
Legal Obligation: Compliance with laws and regulations

5. Data Sharing and Disclosure

We may share your information with:

Service Providers: Companies that help us operate (hosting, payment processing, analytics)
Shopify: As necessary to provide integration features
Legal Requirements: When required by law or to protect our rights
Business Transfers: In connection with a merger, acquisition, or sale of assets

We do not sell your personal information to third parties.

6. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. After account deletion, we may retain certain data for up to 90 days for backup and fraud prevention purposes, and longer if required by law.

7. Data Security

We implement appropriate technical and organisational measures to protect your information, including:

Encryption of data in transit and at rest
Regular security assessments
Access controls and authentication
Employee training on data protection

8. Your Rights

Under GDPR and UK data protection laws, you have the right to:

Access: Request a copy of your personal data
Rectification: Request correction of inaccurate data
Erasure: Request deletion of your data ("right to be forgotten")
Restriction: Request limited processing of your data
Portability: Request transfer of your data to another service
Objection: Object to processing based on legitimate interests
Withdraw Consent: Withdraw consent at any time

To exercise these rights, contact us at privacy@thesimplestream.com.

9. International Transfers

Your information may be transferred to and processed in countries outside the UK/EEA, including the United States (for AWS services). We ensure appropriate safeguards are in place, such as Standard Contractual Clauses.

10. Children's Privacy

The Service is not intended for individuals under 18. We do not knowingly collect information from children. If you believe we have collected data from a child, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or through the Service. Your continued use after changes constitutes acceptance of the updated policy.

12. Contact Us

For questions about this Privacy Policy, please contact:

Email: privacy@thesimplestream.com

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe we have not handled your data appropriately.