Your EveningsPrivacy notice: EU Product Identifier Check for Shopify
Last updated 23 October 2026. Effective from 23 October 2026.
This notice covers the EU Product Identifier Check for Shopify ("the Check") only. The Check is for businesses. Most of what we handle is product data, which isn't usually personal information. The personal information we handle is mostly about people who buy or contact us for a business. Visits to our web pages, including the Check's pages, are covered by our website privacy notice at yourevenings.com/privacy. We count visits with Cloudflare Web Analytics, which uses no cookies.
Who we are
Your Evenings Ltd is the controller. We're registered in England and Wales, company number 17185055. Registered office: 66 Paul Street, London, EC2A 4NA. Email: hello@yourevenings.com. ICO registration number: ZC183075.
What we collect
- When you pay: Stripe runs our checkout and collects your payment details. We get your name, email address, store name and store URL, the amount, currency, date and payment status, and any billing address Stripe collects. We never see your full card number.
- When you email us: your email address, name, signature details and messages.
- Your files: the product CSV and any other files you send, and the files we send back. These are mainly product data but can include personal information, such as a staff name in a vendor field or note.
Why we use it
| Purpose | Lawful basis (UK GDPR) |
|---|---|
| Taking payment, running the Check and sending the results | Contract, if you're a sole trader or partnership; otherwise legitimate interests in providing the service your business paid for |
| Answering questions and support | Legitimate interests |
| Payment and accounting records | Legal obligation |
| Refunds, complaints and disputes | Legitimate interests |
We don't send marketing emails.
How we process your files
Your files are stored and processed by our AI assistants on our work computer, a cloud machine in the United States run by Cursor (Anysphere, Inc.), our AI assistant provider, and checked by our director where needed. Our AI assistants may open your file to answer your questions or check our output. The check itself is a script that uses no AI model. We don't sell your files or share them with anyone else.
Who we share it with
We use service providers ("processors") who handle information for us:
| Provider | What for | Where |
|---|---|---|
| Stripe | Payment | United States (Stripe, LLC), and other countries where Stripe and its providers operate |
| Cloudflare (Email Routing) and Cursor | Our hello@yourevenings.com mailbox, where emails you send to that address arrive | United States |
| Zoho (EU service) | Our director's mailbox (matt@yourevenings.io), where your Check files arrive when you reply to our email | EU (the Netherlands and Ireland). Zoho support staff in India may access it in rare cases |
| Cursor (Anysphere, Inc.), our AI assistant provider, which runs our work computer | Storing and processing Check files | United States |
| The AI model providers Cursor uses to run our AI assistants | Answering your questions and checking our output | Outside the UK, including the United States |
We may also share information with our professional advisers, or with authorities where the law requires it.
Transfers outside the UK: - Stripe processes information in the United States. Stripe relies on the UK Extension to the EU-US Data Privacy Framework (the UK-US "data bridge"), with the UK International Data Transfer Addendum as a fallback. - Cloudflare passes emails sent to hello@yourevenings.com on to our mailbox at Cursor, and may handle them in the United States or other countries. Cloudflare's data processing addendum relies on the UK Extension to the EU-US Data Privacy Framework where it applies, and otherwise on the EU standard contractual clauses with the UK Addendum. - Zoho stores our director's mailbox in the EU, which UK law recognises as giving adequate protection. If Zoho's support staff in India need to access it, Zoho relies on standard contractual clauses. - Cursor and the AI model providers it uses hold our hello@ mailbox and process information in the United States, and may process it in other countries outside the UK. Cursor's privacy policy says it requires an adequate level of data protection when it transfers information outside the UK.
How long we keep it
- Your files and ours: deleted 30 days after delivery. This covers the files you send, the files we return and copies in our mailboxes, including the matt@yourevenings.io Zoho mailbox.
- Payment and accounting records: kept for 6 years from the end of the financial year they relate to, as UK company law requires.
- Support emails: deleted 12 months after the last message.
Your rights
You can ask to access, correct or erase your personal information, or to restrict how we use it. Where we rely on contract, you can ask for a portable copy. We don't make decisions about you by automated means alone.
Your right to object: where we rely on legitimate interests, you can object at any time. We'll stop unless we have compelling grounds to continue or need the information for a legal claim.
Email hello@yourevenings.com to use any right. We'll reply within one month, normally free of charge.
We need payment, a contact email, and your store name and URL to run the Check.
Security
Only the people who need your files to provide the Check can reach them. Our work computer is a separate virtual machine that other Cursor customers can't reach.
Complaints
Please tell us first at hello@yourevenings.com. You can also complain to the Information Commissioner's Office: ico.org.uk/make-a-complaint
Changes
We'll update the date at the top if we change this notice, and tell you first if a change materially affects information you've already given us.