Privacy Policy

Effective Date: July 28, 2026 · Last Updated: July 28, 2026

MyStore ("MyStore," "we," "us," or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, share, retain, and protect personal data when you use the MyStore mobile application, website, and related services (collectively, the "Services"), and describes the rights available to you under the laws of Belize, including the Belize Data Protection Act, 2021.

This Policy applies to all users of the Services — Customers, Stores, and Delivery Partners — and should be read alongside our Terms of Service. Where this Policy refers to "personal data," it means data relating to an identifiable individual, in accordance with the Belize Data Protection Act, 2021.

MyStore acts as a "data controller" for the personal data described in this Policy, as that term is defined under the Belize Data Protection Act, 2021. By using the Services, you acknowledge that you have read and understood this Policy.

1. Information We Collect

We collect the following categories of personal data, depending on how you use the Services:

Identity & Contact Data: name, email address, phone number, delivery or business address, and, for Stores and Delivery Partners, business registration or identification details where applicable.
Location Data: GPS location, used to show nearby Stores, calculate delivery routes, and confirm delivery completion.
Transaction Data: order details, order history, refund and payout records, and subscription status.
Device & Usage Data: device identifiers, operating system, app version, crash logs, and general usage patterns within the Services.
Content: reviews, ratings, photographs submitted in connection with a refund claim, and other content you choose to submit.
Cookies & Similar Technologies: used to keep you signed in, remember preferences, and understand how the Services are used.

We do not knowingly collect sensitive personal data (as defined under the Belize Data Protection Act, 2021 — including racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic or biometric data, health data, sexual orientation, or criminal record) except where you voluntarily provide it, where it is strictly necessary to provide the Services, or where otherwise permitted by law.

Payment & Card Data

In short: MyStore does not receive, transmit in stored form, or retain your card number, expiry date, or security code. Payments are processed directly through our banking and payment processing partner(s).

When you make a payment through the Services, your card details are submitted directly to our banking and payment processing partner(s) for authorization and processing. Card details must be entered at the time of each payment, as MyStore does not offer a saved-card feature. MyStore retains only the transaction records necessary to process your order, issue refunds, and calculate Store and Delivery Partner payouts — such as the transaction amount, date, order reference, and the payment processor's confirmation of approval or decline — but does not retain the underlying card credentials themselves at any point. The handling of your card data by our payment processing partner(s) is governed by their own privacy and security practices, in addition to this Policy.

2. How We Use Your Information

To create and manage your account and process your orders, subscriptions, and payouts;
To connect Customers with Stores and Delivery Partners, and to facilitate delivery of goods;
To process payments, refunds, and MyStore Wallet transactions;
To provide customer support and respond to inquiries, complaints, or refund claims;
To maintain the security, integrity, and proper functioning of the Services, including fraud prevention;
To send order updates, service notifications, and, where you have not opted out, promotional communications; and
To comply with our legal, tax, and regulatory obligations.

3. Legal Basis for Processing

We process your personal data only where we have a lawful basis to do so under the Belize Data Protection Act, 2021, including where:

Processing is necessary for the performance of a contract with you, including to process your order or facilitate your Subscription;
You have given your consent to the processing, including consent to receive promotional communications;
Processing is necessary to comply with a legal obligation to which MyStore is subject, including tax and accounting recordkeeping obligations; or
Processing is necessary for MyStore's legitimate interests, including preventing fraud and improving the Services, provided those interests are not overridden by your rights and freedoms.

4. Sharing & Disclosure of Information

MyStore does not sell your personal data. We share personal data only with the following categories of recipients, and only to the extent necessary:

Stores, to the extent necessary to fulfil a Customer's order, including the order contents and delivery instructions;
Delivery Partners, to the extent necessary to complete a delivery, including the delivery address and contact details;
Payment processing partner(s), to process payments, refunds, and payouts, as described in Section 1;
Service providers and vendors who support MyStore's operations, including cloud hosting and infrastructure providers, acting on MyStore's instructions and under a written agreement requiring them to protect personal data consistently with this Policy and the Belize Data Protection Act, 2021; and
Regulators, law enforcement, or courts, where disclosure is required by law, by a valid legal process, or to protect the rights, property, or safety of MyStore, our users, or the public.

5. International Data Transfers & Cloud Storage

MyStore uses cloud-based infrastructure, which may store or process personal data outside of Belize. Where personal data is transferred outside of Belize, we take steps to ensure an adequate level of protection or appropriate safeguards are in place, consistent with the Belize Data Protection Act, 2021. Consistent with that Act, personal data may be transferred outside of Belize for the purpose of cloud storage without requiring separate consent for that specific transfer.

6. Data Retention

We retain personal data only for as long as necessary to provide the Services, fulfil the purposes described in this Policy, or comply with our legal, tax, and accounting obligations. Retention periods vary depending on the category of data and the purpose for which it was collected:

Data Category	Retention Approach
General account & personal data (Customers, and Store/Delivery Partner account holders)	Retained for up to 2 years from your last activity on the Services if no deletion request is made. Where you submit a deletion request, we action it within 30 days, except where retention is required as described below.
Order & Transaction History	Active order and transaction records are retained in our live database for a rolling period of 4 months, after which they are routinely archived and permanently purged. However, high-level financial summaries may be retained longer where strictly necessary to comply with our tax, accounting, or legal obligations.
Store & Delivery Partner catalog and business listing data	Remains active while a Subscription is in place. Upon cancellation or lapse of a Subscription, this data is hidden from Customer-facing search but retained for up to 12 months, and may be restored if the Subscription is renewed within that period. If not renewed, the data is archived or deleted after 12 months. A Store or Delivery Partner may request earlier deletion of this data at any time.
Data subject to an active dispute, fraud investigation, or regulatory inquiry	Retained until that matter is resolved, regardless of the periods stated above.

7. Your Rights Under the Belize Data Protection Act, 2021

As a data subject, you have the following rights in relation to your personal data, subject to the exceptions and conditions set out in the Belize Data Protection Act, 2021:

Right of AccessTo be informed whether your data is being processed, and to receive a copy of it.

Right to RectificationTo have inaccurate or incomplete personal data corrected.

Right to ErasureTo request deletion of your personal data where it is no longer necessary, where you withdraw consent, or where it has been unlawfully processed.

Right to Restriction of ProcessingTo request that we limit how your data is processed in certain circumstances.

Right to Data PortabilityTo receive your data in a structured, commonly used, machine-readable format.

Right to ObjectTo object to processing that is likely to cause you damage or distress, and to object at any time, without needing to give a reason, to processing for direct marketing purposes.

To exercise any of these rights, contact us at info@mystore.bz. We may need to verify your identity before acting on a request. We will respond to your request without undue delay and, in any event, within one month of receipt, as required by the Belize Data Protection Act, 2021; this period may be extended by up to two further months for complex requests, in which case we will inform you of the extension and the reason for it.

8. Children's Privacy

The Services are not directed at children under the age of 16. Where the processing of a child's personal data relies on consent, that consent must be given or authorised by a parent or legal guardian, except that a child who is 13 years of age or older may give their own consent. A child is entitled to the same privacy protections and rights as an adult under this Policy. If we become aware that we have collected personal data from a child in a manner not permitted under this Section, we will take steps to delete that data.

9. Security

We implement appropriate technical and organizational measures designed to protect personal data against unauthorized or unlawful processing, and against accidental loss, destruction, or damage, taking into account the nature of the data and the risks involved. These measures include encryption, access controls, and secure storage practices. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your account login credentials confidential.

10. Data Breach Notification

In the event of a personal data breach, MyStore will, without undue delay and, where feasible, within 72 hours of becoming aware of it, notify Belize's Data Protection Commissioner, unless the breach is unlikely to result in a risk to individuals' rights and freedoms. Where a breach is likely to result in a high risk to your rights and freedoms, we will also notify you directly, without undue delay, describing the nature of the breach and the steps being taken in response.

11. Your Right to Complain

If you believe your personal data has been processed in violation of the Belize Data Protection Act, 2021, you have the right to lodge a complaint with Belize's Data Protection Commissioner. We encourage you to contact us first at info@mystore.bz so that we may attempt to resolve your concern directly.

12. Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our practices or in applicable law. Where a change is material, we will make reasonable efforts to notify you, such as by posting a notice within the Services or updating the "Last Updated" date at the top of this page. Your continued use of the Services after such a change takes effect constitutes your acceptance of the revised Policy.

13. Contact Us

Questions, requests, or concerns about this Privacy Policy or MyStore's handling of your personal data may be directed to: info@mystore.bz

← Back to Home