Data processing.

Roles & scope

You are the Controller of your customers' personal data. City Embroidery Ltd, trading as ProfitMuncher, is the Processor, acting on your documented instructions.

We process the personal data your storefront collects (names, emails, addresses, order details) only to provide the service: hosting, transmitting, displaying and backing it up. Using the service constitutes your instruction to process for those purposes.

Confidentiality

Access to customer data is limited to personnel who need it to operate the service, and they are bound by confidentiality obligations. We never use your customers' data for our own marketing.

Subprocessors

The current subprocessors that may handle your customers' personal data:

• Hetzner Online GmbH — hosting — Germany
• Cloudflare, Inc. — content delivery, security, object storage — global (US HQ)
• Backblaze, Inc. — encrypted backup storage — EU (Amsterdam region)
• Brevo SAS — email delivery — France

Payment providers you connect to your storefront (Stripe, PayPal, bank transfer) act for you directly under your own agreements with them — they are your processors, not our subprocessors.

We'll give you at least 30 days' email notice before a new subprocessor handles your customers' data.

Security measures

• Encryption in transit (TLS) across all connections
• Nightly backups, encrypted on our servers before upload and stored in the EU
• Least-privilege access to production systems
• Web application firewall and DDoS protection at the network edge (Cloudflare)
• Containerised services on an isolated internal network

Breach notification

If we become aware of a personal data breach affecting your customers' data, we will notify you without undue delay, and share what we know — the nature and scope of the breach, its likely consequences, and the measures taken — so you can meet your own notification obligations as Controller.

Deletion & return

When you close your account, email [email protected] and we'll return your customers' data in a machine-readable format and delete it from live systems on request. Backup copies age out of the backup rotation automatically.

International transfers

Customer data is hosted and backed up in the EU (Germany; Amsterdam region for backups). Where a subprocessor processes data outside the UK/EU, the transfer is covered by the UK's approved safeguards, as described in our Privacy Policy.