Skip to content
ShopenUp

Security and data

Plain answers on payments, access and shopper data.

What is in place for payments, admin access and shopper data. Any further security question is answered in writing.

ShopenUpAdmin roles, sample storeAK

Admin roles, sample store

PersonRoleCan seeStatus
Neha P.OwnerEverythingActive
Imran S.PackingOrders to shipActive
Kavita R.SupportOrders, customersActive
Amit D.AccountsPayments, reportsActive
Old agency loginDeveloperNoneRevoked
Representative screen with sample data. Client screens stay private.

Card data stays with the gateway

Customers pay on your payment gateway's checkout. Card details are handled by the gateway, which carries its own PCI DSS obligations, and are not stored in your store.

Staff see only their part

Role based access in the admin, so a packer sees orders to ship and not your sales reports.

Encrypted connections

The storefront and admin are served over HTTPS.

Your data is yours

Products, customers and orders belong to you. The merchant agreement sets out how you take them with you if you leave.

Updates handled

On the managed plans, our team applies platform updates so you are not running old code.

Ask for specifics

Hosting region, backup frequency and recovery details are set out in your merchant agreement. Ask before you sign.

Shopper data and the DPDP Act

You are the Data Fiduciary for your shoppers

Names, phone numbers and addresses your customers give you are personal data under the Digital Personal Data Protection Act, 2023. As the merchant you decide why it is collected, so the duties to give notice, honour requests and keep it safe sit with you. ShopenUp handles that data on your behalf, under the merchant agreement.

Your part as the merchant

  • Decide what shopper data you collect and why
  • Publish a privacy notice your buyers can read
  • Answer requests to see, correct or erase data
  • Choose who in your team sees customer records

What ShopenUp handles for you

  • Hosts and updates the store on the managed plans
  • Keeps card data with your payment gateway
  • Limits admin access by role
  • Processes shopper data on your behalf, under the merchant agreement

A general description. Your lawyer can confirm how the Act applies to your business.

See the store running with your own products.

Send a few products and your trickiest order. The demo shows them in the admin and on a storefront, with a plain list of native and custom parts.