Privacy Policy

Last updated: February 4, 2026

Privacy Statement - ShaboPay

ShaboPay is responsible for processing personal data as shown in this privacy statement.

Contact Details

Website: https://shabopay.com
Email: [email protected]

Personal Data We Process

ShaboPay processes your personal data because you use our services and/or because you provide this data to us yourself.

Below is an overview of the personal data we process:

  • First and last name
  • Phone number
  • Email address
  • IP address
  • Other personal data that you actively provide, for example, by creating a profile on our website, in correspondence, or by phone
  • Location data
  • Data about your activities on our website
  • List of contact details of the customer via an app
  • Internet browser and device type
  • Payment information (processed securely through third-party payment providers)

Special and/or Sensitive Personal Data

Our website and/or service does not intend to collect data about website visitors under the age of 16 unless they have permission from parents or a guardian. However, we cannot check whether a visitor is over 16. We therefore advise parents to be involved in the online activities of their children to prevent data about children being collected without parental consent. If you believe that we have collected personal information about a minor without such consent, please contact us at [email protected], and we will delete this information.

Purposes and Legal Grounds for Processing

ShaboPay processes your personal data for the following purposes:

  • Handling your payment
  • Sending our newsletter and/or promotional brochure
  • To be able to call or email you if necessary to carry out our services
  • To inform you about changes to our services and products
  • To offer you the opportunity to create an account
  • To deliver goods and services to you
  • ShaboPay analyzes your behavior on the website to improve the website and tailor the offer of products and services to your preferences
  • ShaboPay also processes personal data if we are legally obliged to do so, such as data we need for our tax return

Automated Decision-Making

ShaboPay does not make decisions based on automated processing on matters that can have (significant) consequences for people. These are decisions made by computer programs or systems, without human involvement (e.g., an employee of ShaboPay).

How Long We Keep Personal Data

ShaboPay does not retain your personal data longer than strictly necessary to realize the purposes for which your data is collected.

We apply the following retention periods:

  • Personal data: 7 years - For customer records and potential follow-up
  • Address: 7 years - For customer records and potential follow-up
  • Contact details: 7 years - For customer records and potential follow-up
  • Email data: 7 years - Needed to send receipts and tickets. If the customer enters their email address once, it will be remembered for the next time
  • Payment data: 30 days - To handle refunds if an item is no longer available after payment. These data are automatically deleted after 30 days
  • Lead data (demo requests): Until conversion + 2 years, or until deletion requested

Sharing Personal Data with Third Parties

ShaboPay shares your personal data with various third parties if this is necessary to execute the agreement and to comply with any legal obligation. We enter into a data processing agreement with companies that process your data on our behalf to ensure the same level of security and confidentiality. ShaboPay remains responsible for these processing operations.

Additionally, ShaboPay will only share your data with other third parties with your explicit consent.

Data Processing Agreements (Article 28 GDPR)

ShaboPay has concluded data processing agreements with the following parties in accordance with Article 28 GDPR:

  • Payment Service Providers (Stripe, Paystack) - For processing payments securely
  • Cloud Hosting Providers - For hosting our services and data storage

These data processing agreements ensure that these parties only process your data according to our instructions and take appropriate security measures.

International Data Transfers

We work with several international service providers who are contractually obligated to process your data primarily within the European Economic Area (EEA). These parties may be part of American companies, which means data may be transferred to the United States for technical support.

We have concluded Standard Contractual Clauses (SCCs) to protect your data, in accordance with GDPR Article 46. These clauses are approved by the European Commission and provide appropriate safeguards for your privacy.

Cookies and Similar Technologies

ShaboPay uses functional, analytical, and tracking cookies. A cookie is a small text file that is stored in your browser on your computer, tablet, or smartphone when you first visit this website. ShaboPay uses cookies with a purely technical functionality, ensuring that the website works properly and that, for example, your preferred settings are remembered.

In addition, we place cookies that track your browsing behavior to offer tailored content and advertisements.

For a complete overview of all cookies and how to manage them, see our Cookie Policy.

Viewing, Modifying, or Deleting Data

You have the right to view, correct, or delete your personal data. You also have the right to withdraw your consent for data processing or to object to the processing of your personal data by ShaboPay.

You also have the right to data portability. This means that you can submit a request to us to send the personal data we hold about you in a computer file to you or another organization you specified.

You can send a request for access, correction, deletion, data transfer, withdrawal of consent, or objection to the processing of your personal data to [email protected].

To ensure that the request is made by you, we ask you to send a copy of your identity document with the request. Make sure to black out your photo, MRZ (machine-readable zone), passport number, and citizen service number (BSN) in this copy. This is to protect your privacy. We will respond to your request as quickly as possible, but within four weeks.

ShaboPay also points out that you have the possibility to file a complaint with the national data protection authority, the Dutch Data Protection Authority (Autoriteit Persoonsgegevens). You can do this via the following link: https://autoriteitpersoonsgegevens.nl/en/contact-dutch-dpa/contact-us

How We Protect Personal Data

ShaboPay takes the protection of your data seriously and takes appropriate measures to prevent misuse, loss, unauthorized access, unwanted disclosure, and unauthorized changes. If you feel that your data is not properly secured or if there are indications of misuse, please contact our customer service or via [email protected].

We do everything we can to protect the stored personal data as securely as possible and will never share this data with others without good reason.

We use reputable antivirus and security programs to protect our hardware and software. The cloud environments we operate in are secured with passwords and, where possible, two-factor authentication.