Last updated: 10 July 2026
1. Introduction
TiwaStore respects your privacy and is committed to protecting personal information.
This Privacy Policy explains how we collect, use, store, disclose and protect personal information when you:
- visit the TiwaStore website;
- create a TiwaStore account;
- begin a free trial;
- purchase a subscription;
- use the TiwaStore Platform;
- operate a TiwaStore-powered Merchant Store;
- contact our support team;
- subscribe to marketing communications;
- attend an event or promotion;
- apply to work with us; or
- otherwise interact with TiwaStore.
In this Policy:
- “TiwaStore,” “we,” “us,” or “our” means the Tiwa Store brand.
- “Merchant” means a person or business using TiwaStore to operate an online store.
- “Customer” means a person purchasing or interacting with a Merchant through a TiwaStore-powered store.
- “Platform” means TiwaStore websites, software, dashboards, store tools and related services.
- “Personal information” or “personal data” means information relating to an identified or identifiable person.
2. Who Is Responsible for Your Information?
For information collected directly through the TiwaStore website, account registration, billing, marketing and Platform administration, the data controller is:
Tiwastore Brand
Trading as: TiwaStore
Where a Merchant collects customer information through a Merchant Store, the Merchant will generally act as the data controller and TiwaStore may process information on the Merchant’s behalf as a service provider or data processor.
Customers should contact the relevant Merchant regarding how that Merchant uses customer information.
3. Information We Collect
3.1 Information You Provide
We may collect:
- full name;
- business name;
- job title;
- email address;
- telephone number;
- billing address;
- business address;
- country;
- account login information;
- subscription information;
- communication preferences;
- store information;
- domain information;
- support requests;
- feedback;
- survey responses;
- information submitted through contact forms;
- information supplied during onboarding; and
- any other information you choose to provide.
3.2 Business and Merchant Information
When you create or operate a Merchant Store, we may collect:
- company name;
- trading name;
- business registration information;
- tax information;
- store name;
- store URL;
- domain details;
- business category;
- business contact details;
- store logo;
- product information;
- product images;
- pricing information;
- inventory information;
- fulfilment settings;
- delivery settings;
- order records;
- customer support information; and
- store performance information.
3.3 Billing and Payment Information
We may collect:
- subscription plan;
- billing name;
- billing address;
- payment status;
- transaction reference;
- payment method type;
- invoice information;
- tax information;
- subscription renewal date; and
- payment-provider identifiers.
Payments may be processed by third-party payment providers.
Where payment is handled by an external payment provider, TiwaStore may not receive or store complete card numbers, bank-account credentials or card-security codes.
3.4 Information Collected Automatically
When you access the Platform, we may automatically collect:
- Internet Protocol address;
- browser type;
- device type;
- operating system;
- device identifiers;
- approximate location derived from an IP address;
- language settings;
- referring website;
- pages viewed;
- features used;
- buttons clicked;
- session duration;
- dates and times of access;
- error reports;
- diagnostic information;
- security logs;
- cookie identifiers; and
- usage and performance information.
3.5 Merchant Customer Information
When Customers interact with Merchant Stores, TiwaStore may process information on behalf of Merchants.
This may include:
- customer name;
- email address;
- telephone number;
- billing address;
- delivery address;
- order information;
- purchased products;
- order value;
- delivery preferences;
- customer messages;
- refund information;
- payment status;
- transaction references;
- account information; and
- other information required to process an order.
The Merchant determines why this information is collected and used.
Merchants are responsible for providing Customers with an appropriate privacy notice.
3.6 Support Information
When you contact support, we may collect:
- your contact details;
- account information;
- support messages;
- screenshots;
- technical information;
- troubleshooting information;
- call or chat records;
- attachments; and
- feedback regarding support.
3.7 Marketing Information
We may collect:
- marketing preferences;
- email engagement;
- campaign interactions;
- advertisement interactions;
- event registrations;
- competition entries;
- survey responses; and
- information about services that interest you.
4. How We Use Personal Information
We may use personal information for the following purposes.
4.1 Providing the Platform
We use account, contact, business and technical information to:
- create your account;
- provide access to TiwaStore;
- create and host Merchant Stores;
- provide Platform features;
- manage subscriptions;
- display Merchant Content;
- process Platform requests;
- provide customer support;
- maintain your account; and
- deliver contracted services.
Lawful basis: performance of a contract or steps requested before entering into a contract.
4.2 Processing Payments
We use billing and subscription information to:
- charge subscription fees;
- process payments;
- issue invoices;
- manage renewals;
- process refunds;
- monitor payment status;
- recover unpaid amounts; and
- maintain financial records.
Lawful basis: performance of a contract, compliance with legal obligations and our legitimate interests in managing payments.
4.3 Operating Merchant Stores
We process Merchant and Customer information to:
- host Merchant Stores;
- process store activity;
- transmit order information;
- enable account functionality;
- provide Merchant dashboards;
- provide order-management tools;
- support store operations; and
- provide technical services requested by Merchants.
Where we process Customer information on behalf of a Merchant, we generally act as the Merchant’s data processor.
4.4 Improving TiwaStore
We may use usage, technical and feedback information to:
- understand how the Platform is used;
- improve user experience;
- develop new features;
- fix errors;
- assess Platform performance;
- conduct research;
- produce aggregated statistics; and
- improve our products and services.
Lawful basis: our legitimate interests in operating and improving the Platform.
4.5 Security and Fraud Prevention
We may use account, payment, device and technical information to:
- protect accounts;
- prevent unauthorised access;
- identify fraud;
- detect abuse;
- investigate suspicious activity;
- enforce Platform policies;
- secure our infrastructure;
- prevent malware and cyberattacks; and
- protect users and third parties.
Lawful basis: our legitimate interests, compliance with legal obligations and the protection of legal rights.
4.6 Customer Support
We use contact, account and support information to:
- respond to enquiries;
- investigate problems;
- provide technical assistance;
- resolve complaints;
- improve support services; and
- communicate regarding your account.
Lawful basis: performance of a contract and our legitimate interests in supporting users.
4.7 Service Communications
We may send:
- account notifications;
- security alerts;
- billing messages;
- renewal notices;
- service updates;
- maintenance notices;
- policy updates;
- order-related Platform notices; and
- other essential communications.
These messages are necessary to operate the Platform and may not be optional while your account remains active.
Lawful basis: performance of a contract, legal obligations and legitimate interests.
4.8 Marketing
Subject to applicable law, we may use your contact and preference information to send:
- product updates;
- TiwaStore news;
- feature announcements;
- educational content;
- promotions;
- event invitations;
- business resources; and
- special offers.
Lawful basis: consent where required or our legitimate interests where permitted.
You can unsubscribe using the link included in marketing emails or by contacting us.
4.9 Legal and Regulatory Purposes
We may use information to:
- comply with applicable law;
- respond to lawful requests;
- maintain tax and accounting records;
- enforce agreements;
- investigate legal claims;
- protect our legal rights;
- cooperate with regulators; and
- prevent unlawful activity.
Lawful basis: compliance with legal obligations and our legitimate interests.
5. Cookies and Similar Technologies
We may use cookies, pixels, local storage and similar technologies.
Cookies may be used to:
- keep users signed in;
- remember preferences;
- provide account functionality;
- maintain security;
- prevent fraud;
- understand Platform usage;
- measure performance;
- improve user experience;
- provide analytics; and
- support advertising or marketing where permitted.
Cookies may include:
Essential Cookies
Required for security, authentication, account access and core Platform functionality.
Preference Cookies
Used to remember settings, language and other choices.
Analytics Cookies
Used to understand website traffic, Platform usage and performance.
Marketing Cookies
Used to measure campaigns or provide relevant advertising where consent is required.
You can manage cookie preferences through our cookie banner or browser settings.
For additional information, see our Cookie Policy.
6. How We Share Personal Information
We may share information with the following categories of recipients.
6.1 Service Providers
We may use providers that support:
- website hosting;
- cloud infrastructure;
- data storage;
- email delivery;
- customer support;
- analytics;
- cybersecurity;
- communications;
- billing;
- payment processing;
- website monitoring;
- domain services;
- marketing;
- accounting; and
- professional services.
Providers may process information only for authorised purposes and subject to appropriate contractual obligations.
6.2 Payment Providers
We may share billing and transaction information with payment providers to:
- process subscription payments;
- authenticate transactions;
- prevent fraud;
- process refunds; and
- manage payment disputes.
Payment providers may act as independent controllers for certain activities.
6.3 Merchants
Where a Customer purchases through a Merchant Store, relevant information will be available to the Merchant so that the Merchant can:
- process orders;
- provide customer service;
- arrange delivery;
- issue refunds;
- communicate with Customers; and
- meet legal obligations.
The Merchant is responsible for its own use of Customer information.
6.4 Third-Party Integrations
Where you activate an integration, information may be shared with the connected service.
Examples may include:
- payment services;
- delivery services;
- analytics services;
- marketing platforms;
- social-media platforms;
- accounting platforms;
- domain providers; and
- email services.
Your use of those services is governed by their own terms and privacy policies.
6.5 Professional Advisers
We may disclose information to:
- lawyers;
- accountants;
- auditors;
- insurers;
- consultants; and
- other professional advisers.
6.6 Legal Authorities
We may disclose information where reasonably necessary to:
- comply with law;
- respond to a court order;
- comply with a lawful government request;
- investigate fraud;
- enforce our rights;
- protect safety;
- prevent unlawful activity; or
- defend legal claims.
6.7 Business Transfers
Information may be transferred as part of:
- a merger;
- acquisition;
- investment;
- restructuring;
- financing;
- sale of assets;
- insolvency process; or
- transfer of all or part of TiwaStore.
Where appropriate, we will require the recipient to protect personal information.
7. International Data Transfers
TiwaStore and its service providers may process information outside your country.
Where personal information is transferred internationally, we will take reasonable steps to apply appropriate safeguards as required by applicable law.
Safeguards may include:
- adequacy regulations or recognised adequacy decisions;
- approved contractual protections;
- standard contractual clauses;
- international data-transfer agreements;
- contractual security obligations; or
- other legally recognised transfer mechanisms.
You may contact us for additional information regarding international data transfers.
8. Data Retention
We retain personal information only for as long as reasonably necessary for the purposes described in this Policy.
Retention periods may depend on:
- the duration of your account;
- the duration of our contractual relationship;
- legal requirements;
- tax and accounting obligations;
- dispute-resolution requirements;
- security requirements;
- fraud-prevention requirements;
- backup cycles; and
- the nature of the information.
We may retain:
- active account information while an account remains open;
- billing and transaction records for the period required by financial and tax laws;
- support information where needed to maintain service history;
- security logs for fraud prevention and system protection;
- contractual records where necessary to establish or defend legal rights; and
- backup copies for a limited period after deletion.
When information is no longer required, we may securely delete or anonymise it.
9. Data Security
We use reasonable technical and organisational measures designed to protect information from:
- unauthorised access;
- accidental loss;
- unlawful use;
- alteration;
- disclosure;
- destruction; and
- cyber threats.
Measures may include:
- encrypted connections;
- access controls;
- authentication measures;
- system monitoring;
- backups;
- security updates;
- restricted internal access;
- staff confidentiality requirements; and
- security reviews.
No online platform or transmission method can be guaranteed completely secure.
You are responsible for:
- protecting your password;
- using secure devices;
- enabling available security features;
- restricting account access; and
- notifying us promptly of suspected unauthorised activity.
10. Your Privacy Rights
Depending on your location and applicable law, you may have the right to:
- request access to your personal information;
- request correction of inaccurate information;
- request deletion of information;
- request restriction of processing;
- object to certain processing;
- request transfer of information;
- withdraw consent;
- object to direct marketing;
- request information about data use; and
- complain to a data-protection authority.
These rights may be subject to legal limitations or exemptions.
To exercise a right, contact:
[PRIVACY EMAIL ADDRESS]
We may request information to verify your identity before responding.
11. Marketing Preferences
You can unsubscribe from marketing emails at any time by:
- selecting the unsubscribe link in a marketing email;
- updating your communication preferences where available; or
- contacting us.
Unsubscribing from marketing does not prevent us from sending essential account, security, billing or service communications.
12. Merchant Responsibilities for Customer Data
Merchants using TiwaStore are responsible for complying with applicable privacy and data-protection laws.
Merchants must:
- provide Customers with an appropriate privacy notice;
- collect only information reasonably required;
- use Customer information lawfully;
- maintain a valid legal basis;
- obtain marketing consent where required;
- respond to Customer privacy requests;
- protect Customer information;
- avoid unauthorised disclosure;
- notify TiwaStore of relevant security incidents;
- avoid exporting or using information unlawfully; and
- comply with applicable retention requirements.
Merchants must not use Customer information obtained through TiwaStore for unrelated or unlawful purposes.
13. Children’s Privacy
TiwaStore is intended for business users and is not directed at children.
You must be at least 18 years old to create a Merchant account unless applicable law permits otherwise and appropriate authorisation is provided.
We do not knowingly collect personal information directly from children for the purpose of creating TiwaStore Merchant accounts.
Contact us if you believe a child has provided personal information unlawfully.
14. Third-Party Websites
The Platform may contain links to external websites or services.
We are not responsible for the privacy practices, content or security of third-party websites.
You should review the privacy policy of each external service before providing information.
15. Automated Decision-Making
TiwaStore does not currently make decisions producing legal or similarly significant effects solely through automated processing, unless clearly disclosed.
We may use automated systems to:
- identify suspicious activity;
- detect fraud;
- protect accounts;
- identify security risks;
- filter spam; or
- improve Platform operation.
Where applicable law provides rights regarding automated decisions, you may contact us for additional information.
16. Data Breaches
Where we become aware of a personal-data breach, we will investigate the incident and take reasonable action to limit risk.
Where required by applicable law, we will notify relevant authorities and affected individuals.
Merchants must notify TiwaStore promptly if they become aware of a security incident involving the Platform or information processed through it.
17. Changes to This Privacy Policy
We may update this Privacy Policy to reflect:
- changes to our services;
- changes to technology;
- legal requirements;
- regulatory guidance;
- security practices; or
- business operations.
The updated Policy will be published on the TiwaStore website with a revised “Last updated” date.
Where required, we will provide additional notice of material changes.
18. Complaints
Please contact us first if you have concerns regarding your personal information.
You may also have the right to complain to the data-protection authority responsible for your location.
For UK users, complaints may be made to the Information Commissioner’s Office where applicable. Information about privacy rights and complaints is available through the ICO.
19. Contact Us
For privacy questions, requests or complaints, contact us here.