Legal
Privacy Policy
What we collect, why, and the choices you have.
Last updated: 5 November 2026
SimplyUpsell is operated by NAIT DIGI.TECH LTD, private limited company, company number 16550159. Registered office: 125 Vine Street, Manchester, England, M18 8SR. All rights reserved.
1. Who is responsible
NAIT DIGI.TECH LTD, a private limited company registered in England and Wales, company number 16550159, registered office 125 Vine Street, Manchester, England, M18 8SR, is the controller of the personal data described here as it relates to SimplyUpsell accounts, purchases and this website. Email: support@simplyupsell.com.
2. Data we collect
- Account data: your name, email address and a hashed password (we never store the password itself).
- Purchase data: plan, amount, date and payment reference. Card details are entered on the payment provider's page and we do not receive or store them.
- Store data you enter: store names and domains, offers (headlines, product titles, prices as text, links and image links).
- Messages you send through the contact form or by email.
- Technical data: your IP address and basic request details. We use the IP address in short-lived rate-limit records (a one-way hash, deleted within a day) to limit abuse. We do not turn on Cloudflare Workers request logging for this site, but Cloudflare, as our host and network provider, processes IP addresses to deliver and protect the service under its own terms.
3. Shopper data and the embed script
When you add the SimplyUpsell script to your store, it asks our servers for your active offers and reports two kinds of event: an offer was shown, or its button was clicked. Each report contains only the store key, the offer, the headline variant (A or B), the type of event and the day. The script sets no cookies, does not read cookies, does not store anything about the shopper and does not identify shoppers. Like any web request, the request reaches our servers and our host processes a technical IP address to deliver the request; we do not store it with the event, and the event beacon keeps only a short-lived one-way hash of it to limit repeat counting. You remain responsible for your own store privacy notice.
4. Why we use it and our legal bases
| Activity | Purpose | Legal basis |
|---|---|---|
| Account and sign-in | Provide the service you asked for | Contract |
| Purchases and refunds | Match payments to accounts, activate plans, process refunds, keep accounting records | Contract, legal obligation |
| Stores and offers | Show your offers on your stores and in Offer Studio | Contract |
| Contact messages | Answer your questions and requests | Legitimate interests, contract |
| Security logs and rate limits | Protect accounts and the service from abuse | Legitimate interests |
5. Who we share it with
We use the providers below to run SimplyUpsell. We do not sell personal data and we do not share it for advertising.
Swipe sideways to see all columns.
| Provider | Purpose | Location | Transfer safeguard |
|---|---|---|---|
| Cloudflare, Inc. | Hosting, content delivery and the database (D1) that stores accounts, stores, offers and offer counts | United States / global network | Standard Contractual Clauses and the UK Addendum |
| Airwallex (UK) Limited and its group companies | Payment processing on the hosted payment page | United Kingdom / global | Contractual terms and transfer safeguards set by the provider |
Email sent to support@simplyupsell.com is received through Cloudflare Email Routing and forwarded to our own mailbox. Confirmation emails are sent from that mailbox. If we change the mail provider we will update this list.
We may also disclose data where the law requires, to protect our rights, or in a business transfer, in which case we will tell you.
6. What stays in your browser
Your theme choice (light or dark) is saved in your browser's local storage. The SimplyUpsell script stores one short flag per offer in the shopper's browser session storage so that a dismissed pop-up does not come back during the same visit. It is never sent to us.
7. Retention
| Data | How long |
|---|---|
| Account details | Until you delete your account |
| Stores, offers and offer counts | Until you delete them or your account |
| Sessions | 30 days, or until you log out |
| Contact messages | 12 months, then deleted |
| Purchase and payment records | Up to 6 years, as required for tax and accounting. If you delete your account the record is kept without your account link. |
| Rate limit records | Deleted after about one day |
8. International transfers
Some providers run services outside the UK. Where personal data leaves the UK we rely on adequacy regulations or on standard contractual clauses with the UK Addendum, as shown in the table above.
9. Your rights
Under UK GDPR you can ask to access, correct, delete, restrict or move your data, and to object to processing based on legitimate interests. You can delete your account in the account page, which removes your account, stores and offers. For other requests, email support@simplyupsell.com. We reply within one month.
10. Complaints
You can complain to the UK Information Commissioner's Office at ico.org.uk. We would like the chance to fix the problem first, so please contact us.
11. Children
SimplyUpsell is business software for people aged 18 or over. We do not knowingly collect data from children.
12. AI and your content
SimplyUpsell does not use AI models to process your content today. We never use your content to train AI models.
13. Changes
We may update this policy. We will change the date at the top and tell you by email if the change is material.
14. Contact
NAIT DIGI.TECH LTD, 125 Vine Street, Manchester, England, M18 8SR. See also our Cookie Policy and Security page.