Card data stays with the gateway
Customers pay on your payment gateway's checkout. Card details are handled by the gateway, which carries its own PCI DSS obligations, and are not stored in your store.
Security and data
What is in place for payments, admin access and shopper data. Any further security question is answered in writing.
Customers pay on your payment gateway's checkout. Card details are handled by the gateway, which carries its own PCI DSS obligations, and are not stored in your store.
Role based access in the admin, so a packer sees orders to ship and not your sales reports.
The storefront and admin are served over HTTPS.
Products, customers and orders belong to you. The merchant agreement sets out how you take them with you if you leave.
On the managed plans, our team applies platform updates so you are not running old code.
Hosting region, backup frequency and recovery details are set out in your merchant agreement. Ask before you sign.
Shopper data and the DPDP Act
Names, phone numbers and addresses your customers give you are personal data under the Digital Personal Data Protection Act, 2023. As the merchant you decide why it is collected, so the duties to give notice, honour requests and keep it safe sit with you. ShopenUp handles that data on your behalf, under the merchant agreement.
Your part as the merchant
What ShopenUp handles for you
A general description. Your lawyer can confirm how the Act applies to your business.
Guide
What store owners need to do, in plain language.
Learn moreTrustOS
The Code Colonies platform for notices, consent, requests and breach response.
Visit the siteThis website
How we use what you share on shopenup.com.
Learn moreSee the store running with your own products.
Send a few products and your trickiest order. The demo shows them in the admin and on a storefront, with a plain list of native and custom parts.