App Privacy Policy
This
Privacy Policy (the Privacy Policy) is designed to inform you how OneShop (OneShop,
we," us, or our) handles your Personal Data (as
defined below) in connection with your access to and use of our mobile
application (the App) and any OneShop
services available via the App (the Services). Please read the following
carefully to understand our practices regarding your Personal Data.
In
this Privacy Policy, the term Personal Data means any information relating
to an identified or identifiable individual.
GDPR/UK GDPR. To the extent the General Data
Protection Regulation (GDPR) or the United Kingdom General Data Protection
Regulation (UK GDPR) apply, we act as a data controller with respect to the
processing activities described in this Privacy Policy.
Your Consent. By installing, entering,
connecting to, accessing or using the App and/or the Services, you hereby
consent to the collection, processing, transfer and use of your Personal Data
as outlined in this Privacy Policy (to the extent required by applicable law).
You are not legally required to provide us with your Personal Data; however, if
you do not consent to our collection and processing of your Personal Data, it
will not be feasible to provide you with some or all of
the Services. In such a case, please do not access or otherwise interact with
the App and/or the Services.
This
Privacy Policy is provided in a layered format so you can click through to the
specific areas set out below. We encourage you to read this Privacy Policy
carefully and to regularly check this page to review any changes we might make
to its terms.
1.
The Data We
Collect About You
2.
How We Collect
Your Personal Data
3.
How We Use Your
Personal Data
4.
Sharing Your
Personal Data with Third Parties
5.
Minors
8.
Your Rights
10. Contact
Details
11. Changes
to this Privacy Policy
1.
The Data We Collect About You
We may collect the following categories of
Personal Data about you:
· Usage Data,
including information about how you use or interact with our App and/or the
Services (such as when you entered the App and/or the Services, how long you
stayed on the App and/or the Services, and/or specific pages you visited on the
App and/or the Services), and the searches you conduct within the App regarding
products that may be of interest to you.
·
Technical Data,
including information on your internet connection (such as your IP address and
internet service provider name), and on the device and software that you are
using to access the App (e.g., the operating system on your device and mobile
advertising identifiers).
We also collect, use, and share aggregated data, such
as statistical data, for any purpose. Such information does not reveal your
identity and is therefore not considered Personal Data and is not subject to
this Privacy Policy. For example, we may aggregate your Usage Data to calculate
the percentage of users accessing a specific feature available through the App and/or the Services.
2.
How We Collect Your Personal Data
Automated
technologies or interactions: As
you interact with our App and/or the Services, we may automatically collect
Technical Data and Usage Data. We may collect some of this data using certain
tracking technologies, as further detailed below.
3.
How We Use Your Personal Data
When
the GDPR or the UK GDPR apply, we will commonly use your Personal Data in the
following circumstances:
·
Where the
processing is necessary in connection with the performance of any contract we have entered into with
you or where it is necessary for taking steps at your
request prior to entering into a contract.
·
Where the processing is
necessary for our legitimate interests (or those of a third party), and such
legitimate interests are not overridden by
·
Where the processing is
necessary for compliance with a legal or regulatory obligation.
·
Where you have provided
your consent for such processing. Such consent can be revoked at any time.
Purposes for Which We Use Your Personal Data
We have identified below the purposes for which we
process your Personal Data and the legal bases we rely on to use your Personal
Data (to the extent the GDPR or the UK GDPR apply).
|
Purpose/Activity |
Type of Data |
Lawful basis for processing, including basis of
legitimate interest |
|
·
Providing you with the
App and/or the Services. |
·
Technical Data ·
Usage Data |
·
Performance of, or
entry into, a contract with you. |
|
·
Conducting internal
operations, including troubleshooting, support and
maintenance, security, data analysis, testing, research, and statistical analysis,
including improving our App and/or the Services. |
· Technical Data ·
Usage Data |
·
Performance of, or
entry into, a contract with you; ·
Necessary for our
legitimate interests (to keep our App and/or the Services updated, secured
and relevant, and to develop our business). |
|
·
Protecting our rights
and defense against legal claims, including investigating violations or protecting
the legal rights, personal/real property, or personal safety of our users. |
· Technical Data ·
Usage Data |
·
Necessary for our
legitimate interests (to defend and enforce our legal rights and ensure the
safe environment of our App); ·
Necessary to comply
with a legal obligation. |
|
·
Complying with legal
requirements (including assisting law enforcement officials or government
enforcement agencies). |
· Technical Data ·
Usage Data |
·
Necessary to comply
with a legal obligation. |
Note that we may process your Personal Data for more than one lawful ground
depending on the specific purpose for which we are using your data.
4.
Tracking Technologies
We and our third-party partners may use certain
tracking technologies in our App, including device identifiers, software
development kits (SDKs), cookies, analytics tools and advertising technologies.
These technologies help us provide App functionality, analyze usage patterns,
improve our services, deliver personalized content or advertisements, and
enable us or our third-party partners to calculate commissions payable to us when
you make a purchase from a Marketplace (as defined below) to which we referred
you via the App.
For example, we use Google AdMob to serve
advertisements and monetize our app. AdMob may automatically collect and
process data from your device, such as mobile advertising identifiers (e.g.,
Google Advertising ID), IP address, device model, operating system, and app
usage data. Google may also use this information to provide personalized ads,
measure ad performance, and prevent fraud.
For more information on how Google collects and
processes your data, please visit: https://www.google.com/policies/privacy/partners/.
You may be able to manage your privacy preferences and limit data collection
through your device settings.
5.
Third Party Links and Embedded Pages
The App and/or the Services may contain links to, or display
embedded pages from, third-party websites, plug-ins, and applications,
including, without limitation, websites and applications that operate online
marketplaces or e-commerce platforms, such as eBay and AliExpress
(collectively, the Marketplaces). By clicking on these links or
interacting with such embedded pages, your Personal Data may be shared with the
relevant third party. Those links or embedded pages may also be associated with
certain tracking technologies maintained by such third parties. We do not
control these third-party websites or applications and are not responsible for
their privacy practices. We therefore recommend that you review the privacy
policy of every third-party website or application you access or interact with.
6.
Sharing Your Personal Data with Third Parties
Service Providers
We may share Personal Data with third party service
providers that provide us services in connection with the purposes listed
above. For example, we may share your Personal Data with third parties that use
certain tracking technologies in our App, such as Google (as further detailed above).
Marketplace Providers
We may disclose Personal Data to Marketplace providers.
For example, we may transmit your Usage Data and/or Technical Data, to
Marketplace providers, to enable the display of relevant results from their
platforms directly within the App.
Additional Cases
We may also share your Personal Data in the following
situations: (a) if required to fulfill a legal obligation, respond to a court
order, or comply with requests from regulatory or governmental bodies; (b) in
the event of a business transition, such as a merger, acquisition,
restructuring, or sale of all or part of OneShops assets,
or to prospective buyers of or investors in OneShop or
its business, in the course of due diligence; (c) to protect the safety,
rights, or property of OneShop, its users, or the
public; (d) to investigate, prevent, or take action regarding suspected fraud,
security incidents, or technical problems; (e) to our professional advisors
(e.g. lawyers, accountants) to the extent necessary for the provision of their
services to us; or (f) to assert or enforce policies or agreements with you, or
to defend OneShop against legal claims or disputes.
To use the App and/or the Services, you must be at
least 16 years of age. Our App and/or the Services are not designed for use by
anyone under the age of 16, and we do not knowingly collect Personal Data from
children under the age of 16.
8.
International Transfers
We
may transfer your Personal Data to countries outside of the country in which
you reside (including outside of the European Economic Area (EEA) or the United
Kingdom (UK)) that do not necessarily provide the same level of data protection
as the country in which you reside and are not recognized by the European
Commission and/or UK government as providing an adequate level of data
protection. To the extent required by applicable law, you hereby consent to
such cross-border transfer of your Personal Data.
Our international transfers of Personal Data are conducted
for the performance of a contract or the implementation of pre-contractual
relations with you, based on your consent, or subject to safeguards that ensure
the protection of your Personal Data, such as standard contractual clauses
approved by the European Commission and/or the applicable UK authority (when the
GDPR or the UK GDPR apply).
We retain your Personal Data for as long as necessary
to fulfill the purposes for which we collected it, including for legal or
reporting requirements. To determine the appropriate retention period for
Personal Data, we consider the following criteria: the volume, nature, and
sensitivity of the Personal Data, the potential risk of harm from unauthorized
use or disclosure of Personal Data, the purposes for which we collect and
process Personal Data, the timeframe during which we may require such Personal
Data in connection with potential litigation, and applicable legal
requirements.
Certain privacy laws, including the GDPR and UK GDPR,
provide users with rights related to their Personal Data. Accordingly, you may
have the following rights:
·
Request access. This means that you may receive a copy of the
Personal Data we hold about you.
·
Request correction. This means that you may ask us to correct or complete
inaccurate, incomplete, outdated, or unclear data that we hold about you.
·
Request erasure.
This means that you may ask us to delete or remove Personal Data that we hold
about you. If we are unable to comply with such a request, we will notify you
of the specific legal reasons for our decision.
·
Object to processing.
This means that you may object to the processing of your Personal Data where it
is used for direct marketing purposes, or where we are relying on a legitimate
interest and you feel that such interest is overridden by your rights and
freedoms.
·
Request restriction of processing.
This means that you may ask us to suspend the processing of your Personal Data
if you believe that such data is inaccurate, if our processing is unlawful, or
if we no longer need to process such data for a particular purpose, but you require
us to continue to hold the data.
·
Data Portability. This means that you may request that we transfer your
Personal Data to you or to a third party. This right applies where we have
obtained and processed the data from you based on your consent or where we used
the information to perform a contract with you.
·
Withdraw consent at any time (if the GDPR or the UK GDPR apply). This means that you
may withdraw your consent where we are processing your Personal Data based on
your consent.
Additionally, in accordance with the provisions of the
Israeli Protection of Privacy Law, 5741-1981, you are entitled to review your
Personal Data held by us and request its correction, subject to the conditions
specified therein.
Please note that the aforementioned
rights may be limited or restricted under applicable laws.
If you wish to exercise any of the rights set out
above, please contact
us.
What We May Need From You
When you submit a request to us to exercise one of your
rights, we may require you to provide information necessary to confirm your
identity. This is a security measure to ensure that your Personal Data is not
disclosed to any unauthorized person.
Time Limit to Respond
We endeavor to respond to all legitimate requests
within one month or less, or as otherwise required by law. If it takes us longer
than
11. Accessibility
If you have any questions or concerns, please contact
us at:
Email:
You have the right to lodge a complaint at any time with
the relevant data protection authorities. However, we would appreciate the opportunity
to address your concerns before you approach a data protection authority, so
please contact us in the first instance.
13.
Changes to this Privacy Policy
We reserve the right to amend this Privacy Policy at
any time. Should we do so, we will post an updated version of this Privacy
Policy so that our users are always aware of the information we collect, use,
and disclose, and make commercially reasonable efforts to notify you of such
change via the e-mail address you provided us with. Your continued use of our App
and/or the Services following any change to this Privacy Policy will constitute
your acceptance of such change.