CCPA / CPRA Notice

Last updated: June 21, 2026 · Applies to California residents

Scope

This notice supplements our Privacy Policy and describes how Oshop Ltd. (“Oshop247”, “we”, “us”) handles personal information of California residents under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA).

Oshop247 provides a commerce platform. We act as a business for platform account and billing data, and as a service provider / processor for data merchants collect about their own customers.

Your California privacy rights

Subject to certain exceptions, California residents have the right to:

• Know — request details about categories and specific pieces of personal information we collect, use, disclose, and sell or share
• Delete — request deletion of personal information we hold about you
• Correct — request correction of inaccurate personal information
• Opt out — opt out of the sale or sharing of personal information (see below — we do not sell)
• Limit — limit use and disclosure of sensitive personal information to purposes permitted by CPRA
• Portability — receive a portable copy of certain personal information
• Non-discrimination — not receive discriminatory treatment for exercising these rights

Categories of personal information

In the preceding 12 months, we may have collected the following categories of personal information:

• Identifiers — name, email, phone, IP address, account username, store slug
• Commercial information — subscription plan, billing history, products and orders you manage on the platform
• Internet / network activity — browsing on oshop247.com, feature usage, log data
• Geolocation data — approximate location derived from IP address or selected market
• Professional information — business name, role, industry
• Inferences — limited preferences derived from usage (e.g. selected plan tier)

We do not knowingly collect sensitive personal information such as government ID numbers, precise geolocation, or health data through the platform.

Sources of personal information

• Directly from you — signup, billing, support, and admin activity
• Automatically — cookies, logs, and analytics when you use our website (with consent where required)
• Payment partners — Paystack, Flutterwave, Stripe (transaction status, not full card numbers stored by us)
• Merchants — when you are a customer of an Oshop247-powered store, the merchant provides order data processed on our platform

Business and commercial purposes

We use personal information to:

• Provide and maintain the Oshop247 platform and storefronts
• Process subscriptions, payments, and support requests
• Secure accounts, detect fraud, and comply with law
• Improve products and communicate service updates
• Send marketing where you have opted in

Disclosure, sale & sharing

We do not sell personal information and do not share personal information for cross-context behavioural advertising in a manner that constitutes “sharing” under CPRA.

We disclose personal information to service providers that help us operate the platform, including:

• Cloud hosting and database providers
• Payment processors (Paystack, Flutterwave, Stripe)
• Email delivery and customer support tools
• Analytics providers (only when you consent via our cookie banner)

Service providers may use personal information only to perform services for Oshop247.

Retention

We retain personal information for as long as needed to provide the service and meet legal obligations. After account cancellation, merchant data is generally retained for up to 30 days for export, then deleted or anonymised unless a longer period is required by law. See our Privacy Policy for details.

How to exercise your rights

You may submit a verified request using one of the methods below. We will respond within 45 days (or inform you if an extension is needed).

Opt out of sale / sharing

Although we do not sell or share personal information as defined by CPRA, you may submit a preference request at: Do Not Sell or Share My Personal Information.

Deletion request

Merchants and website users can request deletion of platform data we control:

Access, correction & other requests

To request access to or correction of your personal information, email [email protected] with the subject line “CCPA Request” and describe your request. We may verify your identity before responding.

Non-discrimination

We will not deny goods or services, charge different prices, or provide a different level of service because you exercised your CCPA / CPRA rights, except where a difference is reasonably related to the value of your data or permitted by law.

Contact