Privacy Policy
Welcome to Shine Online, accessible via getshineonline.com (our “Platform”).
Shine Online is owned and operated by Digimos Limited. At Digimos Limited, we take the privacy and protection of your personal data very seriously. This Privacy Policy outlines how we collect, use, process, and protect your information when you access our website and use our review management platform and services.
Shine Online is owned and operated by Digimos Limited. At Digimos Limited, we take the privacy and protection of your personal data very seriously. This Privacy Policy outlines how we collect, use, process, and protect your information when you access our website and use our review management platform and services.
1. ABOUT US AND WHO IS RESPONSIBLE
Digimos Limited is the Data Controller responsible for your personal data collected through this website and during account creation.
- Company Name: Digimos Limited (Registered in England & Wales, Company No: 12414047)
- Registered Office Address: 19 Mile Oak Gardens, Brighton, BN41 2PH, United Kingdom
- Contact Email: contact@getshineonline.com
- Effective Date: 11 September 2026
If you have any questions regarding this Privacy Policy or our data protection practices, please contact us at contact@getshineonline.com or write to us at our registered address above.
2. APPLICABLE LAWS & LEGAL TERMINOLOGY
Our processing of personal data is governed strictly by UK Data Protection legislation, including the UK Data Protection Act 2018 (DPA 2018), the UK General Data Protection Regulation (UK GDPR), the EU GDPR (where applicable), and the Privacy and Electronic Communications Regulations (PECR).
- Personal Data: Any information relating to an identified or identifiable living individual (such as name, email address, postal address, phone number, IP address, or device identifiers).
- Processing: Any operation performed on personal data, whether or not by automated means, such as collection, recording, organization, storage, adaptation, retrieval, disclosure, or erasure.
3. LEGAL BASES FOR PROCESSING DATA
Under UK data protection law, we must have at least one valid legal basis to process your personal data:
- Contractual Necessity: Processing is required to perform our contract with you (such as providing access to our review management software, creating your account, billing, and technical support).
- Legitimate Interests: Processing is necessary for our legitimate business interests, provided those interests do not override your fundamental privacy rights (such as ensuring network security, corporate governance, defending legal claims, enforcing our legal rights, and improving platform performance).
- Legal Obligation: Processing is necessary to comply with statutory legal or regulatory obligations (such as accounting, tax, and retention mandates).
- Consent: Where you have explicitly given us consent to process personal data for specific purposes (such as non-essential analytics cookies or direct marketing communications). You may withdraw your consent at any time.
4. DATA WE COLLECT AUTOMATICALLY
Log Files
Each time you visit our website, our system automatically collects technical data from your device and stores it in log files:
- IP address of the accessing device
- Date and time of visit
- Name of file accessed and volume of data transferred
- Web browser type, version, and operating system
- Internet service provider
- Referring website URL and pages visited on our site
Legal Basis: Legitimate interest in maintaining network security, server stability, and efficient operation of the site.
Web Hosting
Our website infrastructure and server operations are hosted by Hetzner Online GmbH (Industriestr. 25, 91710 Gunzenhausen, Germany). Hetzner processes inventory data, contact data, content data, usage data, metadata, and communication data of visitors and customers on our behalf to ensure secure and efficient service provision.
Cookies & Tracking Tools
We use cookies (small text files stored on your web browser) on our site. These include:
- Essential Cookies: Necessary to provide a secure and functional website.
- Non-Essential Cookies: Used to analyze user behavior or display relevant content.
In accordance with PECR, non-essential cookies are only set with your consent, obtained and documented through our cookie consent banner. When using the cookie banner, technical data (your IP address, browser/device info, time of visit, and consent status) is logged to record your choice. Please refer to our Cookie Policy for further details.
5. DATA WE COLLECT DIRECTLY FROM YOU
Contact Enquiries
When you contact us, we collect your name, email address, phone number (if provided), IP address, and the contents of your message to process and respond to your request.
Legal Basis: Your consent and our legitimate interest in managing customer support.
Account Registration & Platform Use
When registering for an Account and using our Services, we collect your full name, username, email address, and account password. This data is used to establish and manage your user account and deliver contractual services.
Legal Basis: Performance of a contract and fulfillment of legal obligations.
Billing & Payment Data
When you make purchases on the platform, payments are processed securely via our payment service provider, Stripe, Inc. (510 Townsend Street, San Francisco, CA 94103, USA). Digimos Limited does not store or have direct access to your raw payment card details submitted to Stripe.
Legal Basis: Performance of a contract.
6. DATA CONTROLLER VS. DATA PROCESSOR ROLES
When you use our review management platform:
- You (The Client) act as the Data Controller for third-party end-customer data (such as customer review contacts, emails, or phone numbers) uploaded to or processed through the platform.
- Digimos Limited acts as the Data Processor under Chapter 4 of the UK GDPR, processing such data strictly on your instructions and solely for providing the agreed services.
Customer Responsibilities:
As the Data Controller, you represent and warrant that:
- You have in place all necessary privacy notices, legal bases, and appropriate consents required to share third-party personal data with us.
- You agree to indemnify Digimos Limited against all liabilities, penalties, fines, or legal costs arising from your non-compliance with applicable data protection laws.
7. THIRD-PARTY SERVICES & INTEGRATIONS
Our platform integrates with and utilizes third-party providers for content display, service execution, review platform synchronization (such as review aggregators), communications, IT infrastructure, and marketing.
Integrating third-party content or services requires those providers to process technical indicators (such as your IP address) to deliver content or features to your browser. Third-party providers process data in accordance with their respective privacy policies.
8. ECONOMIC ANALYSES & MARKET RESEARCH
For business management purposes, we analyze transactions, contracts, enquiries, and browsing behavior. These analyses are conducted strictly for business evaluations, market research, and platform improvements. Data processed for these analysis purposes is kept pseudonymous or anonymized wherever feasible and is not disclosed externally.
9. DATA SECURITY & RETENTION
We use SSL/TLS encryption to protect data transmission across our platform. We enforce strict internal technical and organizational measures (TOMs), restricting employee data access strictly on a need-to-know basis.
We retain personal data only for as long as necessary to fulfill the operational purposes for which it was collected or as required by applicable UK statutory retention periods (such as commercial and tax record retention requirements, which typically range from 2 to 6 years).
10. INTERNATIONAL DATA TRANSFERS
Where personal data is transferred to third countries outside the UK or EEA, we enforce contractual protections and technical safeguards (such as Standard Contractual Clauses or UK Addendums) to ensure your data receives an equivalent level of protection.
11. YOUR STATUTORY PRIVACY RIGHTS
Under UK data protection legislation, you have the following rights:
- Right to Information: Request confirmation of what personal data we hold about you.
- Right to Rectification: Request correction of inaccurate or incomplete data.
- Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data.
- Right to Data Portability: Request a structured copy of your data.
- Right to Object & Withdraw Consent: Object to processing based on legitimate interests or withdraw consent at any time.
- Automated Decision-Making: We do not conduct automated decision-making without human intervention.
- Do Not Sell: We do not sell your personal data.
To exercise any of your rights, submit a written request to contact@getshineonline.com. We respond to statutory requests without undue delay and within 30 days.
12. COMPLAINTS TO SUPERVISORY AUTHORITY
If you have concerns regarding our data handling, please contact us first so we can resolve the issue. You also have the right to lodge a complaint with the UK data protection supervisory authority:
- Information Commissioner’s Office (ICO)
- Website: https://ico.org.uk
- Helpline: 0303 123 1113