International Data Transfers

1. Overview

ShopVista is a global e-commerce platform, and our services rely on a distributed technology infrastructure. As a result, personal data collected through our website, mobile applications, and customer support channels may be processed outside of your country of residence.

We are committed to ensuring that your personal data receives a level of protection consistent with applicable data protection laws, regardless of where it is processed. This page outlines the legal mechanisms, safeguards, and transparency measures we employ for international data transfers.

2. Legal Framework & Safeguards

When transferring personal data to jurisdictions outside the European Economic Area (EEA), United Kingdom, Switzerland, or other regions with stringent data protection laws, we rely on the following legal mechanisms:

• Adequacy Decisions: Where the European Commission or relevant national authorities have determined that a country provides an adequate level of data protection, we may transfer data without additional safeguards.
• Standard Contractual Clauses (SCCs): For transfers to countries without an adequacy decision, we execute the EU Standard Contractual Clauses (2021/914) and UK International Data Transfer Agreements with all recipients.
• Transfer Impact Assessments (TIAs): We conduct regular TIAs to evaluate the legal environment of the destination country, including surveillance laws and government access regimes, to ensure data remains adequately protected.
• Technical & Organizational Measures: All cross-border transfers are secured using TLS 1.3 encryption in transit, AES-256 encryption at rest, strict access controls, and regular third-party security audits (SOC 2 Type II, ISO 27001).

3. Where We Transfer Data

Our data processing activities may involve transfers to the following regions for the stated business purposes:

This list is subject to change as our infrastructure evolves. We will update this page and notify material changes in accordance with our Privacy Policy.

4. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data, including internationally transferred data:

1. Access & Portability: Request a copy of your data and its processing history.
2. Rectification & Erasure: Correct inaccurate data or request deletion where lawful.
3. Restriction & Objection: Limit processing or object to cross-border transfers for specific purposes.
4. Complaint: Lodge a complaint with your local supervisory authority if you believe our transfers violate applicable law.

To exercise these rights, submit a request through our Privacy Request Portal or contact our DPO directly. We will respond within 30 days.

5. Contact & Data Protection Officer

For questions regarding international data transfers, to request documentation, or to file a privacy concern, please contact: