Privacy Policy

1. What we collect

Account data (name, email), store data you create (products, orders, customers), and technical data needed to run and secure the service (logs, IP addresses).

Card numbers are never collected by Soooks — customers pay on your payment provider's hosted, PCI-compliant pages.

2. How we use data

To operate the platform, process orders, send the emails you configure, provide support, and keep the service secure. We do not sell personal data.

3. Your customers' data

Data about your customers belongs to your store and is processed to run it: orders, marketing consent, and segmentation. Marketing email respects the consent state your customers chose.

When a shopper pins their address on a map, the map is drawn by Google Maps, or by OpenFreeMap when Google isn't available; like any online map, they receive the viewer's IP address and the part of the map being viewed.

4. Connected Instagram accounts

When a merchant connects Instagram to show posts on their store, we keep the account's username and account type, an access token (encrypted at rest), and a copy of up to 24 recent posts (image links, captions and post links). We use them only to display those posts on that merchant's store, and refresh them about once a day. We never post, message or read anything else.

Disconnecting Instagram in the store admin deletes the token and the saved posts straight away. Removing the app from your Instagram settings, or asking Instagram to delete your data, does the same automatically, and you receive a confirmation code with a page showing the deletion is complete.

5. Combined statistics and the showcase

Soooks may publish statistics that combine data from many stores — for example, the share of orders paid on delivery. A figure is used only when at least 10 stores contribute to it and no single store makes up more than 30% of it; it never names a store or shows one store's numbers. Merchants can leave their store out in Online Store → Preferences.

Stores appear in the showcase on soooks.com only when their owner turns it on in Online Store → Preferences. The showcase shows what the store already shows publicly: its name, address, home page description and sharing image.

6. Cookies and analytics on soooks.com

This website (soooks.com) and the Theme Store (themes.soooks.com) use Google Analytics to count visits and see which pages are useful — for example how many people read a guide, open a theme's demo or start a sign-up. Google Analytics sets cookies and receives your IP address, your browser and the pages you view. We do not use it for advertising and do not send it your name, email or anything you type into a form. The merchant admin does not use it at all.

If you visit from the European Economic Area, the United Kingdom or Switzerland, we ask first: nothing is loaded and no analytics cookie is set unless you accept. Your choice covers both sites, and you can change it at any time with "Cookie settings" at the bottom of every page. Elsewhere, analytics starts when you arrive; the same link lets you turn it off.

The site also keeps one cookie of its own to remember whether you chose the light or dark design. Merchants' stores are separate: each merchant decides which analytics tools their store uses and whether its visitors are asked first.

7. Retention

Placeholder: retention windows per data category to be finalized with counsel.

8. Security

Stores are isolated per tenant, access is role-based, sensitive settings are encrypted at rest, and traffic is encrypted in transit.

9. Your rights

You can get a copy of the personal data Soooks holds about you, correct it in your account settings, close your account, and have your personal data erased. When signed in, use Settings → Privacy and data. Otherwise use the Privacy centre at soooks.com/privacy-center, which confirms your email address before anything happens.

If you are a customer of a store that runs on Soooks, that store decides what it keeps about you and answers your request. Ask the store from your account there, or use the Privacy centre and we pass your request to the store.

Some records stay after an erasure where accounting, tax or dispute rules require them: orders, payments and invoices, with your name and contact details removed. Backups cannot be edited and expire within about a month.

Placeholder: jurisdiction-specific rights language to be inserted by counsel.

10. Data sources and credits

To suggest a shopper's country at checkout, a store looks up the visitor's IP address in a copy of IPinfo's free country database kept on Soooks' own servers. The address is never sent to IPinfo, and only the country is used. The shopper can always choose another country.

IP address data by IPinfo, used under the CC BY-SA 4.0 licence.

The Lebanese towns and areas offered in address forms come from the Central Administration of Statistics, Lebanon (via OCHA Humanitarian Data Exchange), used under the CC BY licence, with Soooks' corrections.

11. Contact

Privacy questions reach us via the contact page and are answered by a human.