Legal
Privacy Policy
What personal data we collect, why we hold it, how long we keep it, and how to get a copy of it or have it erased.
Last updated: September 2026 · Controller for account data · Processor for merchant customer data
Who we are
BestWebby (“we”, “us”, “our”) operates the BestWebby platform. We are the Data Controller for information collected directly from platform users. For merchant customer data, we act as a Data Processor.
What we collect
We collect information you provide directly:
- Account registration information (name, email, company)
- Payment and billing information (processed by Stripe — we do not store card data)
- Business and product information uploaded to the Platform
- Communications you send us
We collect automatically:
- Usage and analytics data (pages visited, features used)
- Technical information (browser, device, IP address)
- Cookies and similar tracking technologies
How we use your data
We use your data to: provide and improve the Platform, process payments, send transactional communications, provide customer support, and comply with legal obligations.
Cookies
We use essential cookies (required for Platform operation), functional cookies (preferences), and analytics cookies (usage patterns). You can control or delete cookies at any time through your browser settings. To opt out of analytics cookies, contact us via our contact form.
Your rights (GDPR)
If you are in the EEA or UK, you have the right to: access your data, correct inaccurate data, erase your data, restrict processing, data portability, and object to processing. Submit requests through our contact form.
Data retention
We retain account data for the duration of your subscription plus 90 days after cancellation. If you close your account yourself, you can restore it within those 90 days; after that it is deleted. You may request immediate erasure at any time, except for the billing and legal records described below.
If an invoice is still unpaid 15 days after we send its payment link, your account is disabled. You can still sign in to pay and to export your data while it is disabled. An account that stays disabled is deleted 30 days after it was disabled. We warn you 14, 7 and 2 days before deletion, and we do not delete the account until each of those warnings has been sent. Deleted data cannot be recovered.
After an account is deleted, for either reason, we keep its invoices, payment records, records of acceptance of our terms, and records of the notices we sent, for 6 years. We keep them as the law requires and so we can show what happened. They do not include your store content or your customers' data, and we do not use them for anything else.
Contact
Data protection inquiries can be sent through our contact form.