Trust Center
Built on the boring fundamentals.
We do not believe in trust theatre. This page tells you exactly where your data lives, how it is protected, and what we have and have not done. If something is unclear, ask us.
GDPR aligned
Designed around UK GDPR and EU GDPR. Clear legal basis for every category of processing.
CCPA aligned
Honours the rights of California residents - access, deletion, correction, opt-out.
TLS in transit
All traffic between your devices and our servers is encrypted with TLS 1.2 or higher.
Encrypted at rest
Databases and object storage encrypt customer data at rest by default using AES-256.
Compliance documents
Everything in one place. Each document has a "Last updated" date so you can see when we revised it.
Privacy Policy
What we collect, why we collect it, how long we keep it.
Data Subject Rights
Your UK GDPR, EU GDPR, and CCPA rights and how to exercise them.
Cookie Policy
Which cookies we use and why - strictly minimal, no advertising.
Security
Encryption, hosting, access controls, backups, and incident response.
Terms of Service
The agreement between you and ShopRunner.
Trademarks
Supplier and product names and logos belong to their respective owners.
Need something specific?
Procurement questionnaire, signed DPA, a question about a sub-processor - get in touch.