Data
This policy explains how Shoorah manages, protects, and processes data securely ensuring every organisation and individual can use our platform with confidence.
Last Updated: July 28, 2025
Data Protection
This Data Protection Policy (“Policy”) forms part of, and is incorporated into, the Shoorah Terms of Service or any other agreement governing your use of the Services (the “Agreement”). This Policy explains how Shoorah handles, processes, protects, and manages Personal Data in connection with the provision of its Services.
Shoorah is committed to maintaining appropriate technical, organisational, and operational measures designed to protect Personal Data against unauthorised access, misuse, loss, destruction, alteration, or disclosure.
This Policy applies only to the extent Shoorah Processes Personal Data in connection with providing the Services and in accordance with applicable data protection and privacy laws.
This Policy does not apply to information processed outside of Shoorah’s Services or where Shoorah acts solely as an independent Data Controller for its own internal business operations, analytics, security, legal compliance, or service improvement purposes as described in the Privacy Policy.
In the event of any conflict between this Policy and the Agreement, this Policy will govern with respect to the Processing of Personal Data, except where otherwise required by applicable law.
Definitions
Capitalised terms used but not defined in this Policy have the meanings given to them in the Agreement or under applicable data protection and privacy laws.
For the purposes of this Policy:
- “Personal Data” means any information relating to an identified or identifiable individual processed through the Services.
- “Processing” means any operation performed on Personal Data, including collection, storage, use, transfer, disclosure, deletion, or anonymisation.
- “Controller”, “Processor”, “Service Provider”, “Subprocessor”, and “Data Subject” shall have the meanings assigned to them under applicable data protection laws.
Roles and Responsibilities
You act as the Controller or Business, as applicable, of the Personal Data submitted to Shoorah through the Services and determine the purposes and means of Processing such Personal Data.
Shoorah acts as a Processor and/or Service Provider only to the extent necessary to provide the Services in accordance with the Agreement and applicable law.
Each party is responsible for complying with its own obligations under applicable data protection and privacy laws.
How Shoorah Processes Data
Shoorah Processes Personal Data only where necessary to:
- Provide and maintain the Services
- Support platform functionality and security
- Respond to support requests
- Improve product performance and user experience
- Comply with applicable legal and regulatory obligations
Shoorah may also aggregate, anonymise, or de-identify Personal Data for lawful operational, analytical, security, and service improvement purposes, provided such data cannot reasonably be used to identify individuals.
Data Security & Protection
Shoorah implements and maintains reasonable technical and organisational measures designed to protect Personal Data against unauthorised or unlawful Processing, accidental loss, destruction, alteration, or disclosure.
These measures may include:
- Secure infrastructure and hosting environments
- Access controls and authentication measures
- Encryption and data protection safeguards
- Internal confidentiality obligations
- Monitoring and security management procedures
Only authorised personnel with a legitimate business need are permitted access to Personal Data.
Personal Data Breaches
Shoorah will notify affected parties without undue delay after becoming aware of and confirming a Personal Data breach affecting Personal Data processed through the Services, where required by applicable law.
Shoorah will provide reasonable information available at the time to assist in understanding the nature and potential impact of the breach.
Subprocessors & Third-Party Services
Shoorah may engage trusted third-party providers (“Subprocessors”) to support the delivery, hosting, maintenance, analytics, communication, or security of the Services.
Shoorah takes reasonable steps to ensure that such providers are subject to appropriate contractual and security obligations consistent with applicable data protection laws.
Where required by law, Shoorah may provide notice of material changes to its Subprocessors.
International Data Transfers
Where Personal Data is transferred internationally, Shoorah will take reasonable steps to ensure that appropriate safeguards are implemented in accordance with applicable data protection laws.
Data Retention & Deletion
Shoorah retains Personal Data only for as long as reasonably necessary to provide the Services, comply with legal obligations, resolve disputes, enforce agreements, maintain backups, or support legitimate operational purposes.
Upon termination of the Services, Shoorah will take reasonable steps to delete, anonymise, or securely dispose of Personal Data where feasible and subject to applicable legal, technical, or operational limitations.
Your Responsibilities
You are responsible for:
- Providing all necessary notices to individuals
- Obtaining all required consents
- Ensuring you have lawful grounds for sharing Personal Data with Shoorah
- Complying with applicable privacy and data protection laws
You acknowledge that you are responsible for determining whether Shoorah’s Services are suitable for your own compliance obligations.
Changes to this Policy
Shoorah may update or amend this Policy from time to time by publishing an updated version on its website or otherwise making it available through the Services.
Continued use of the Services after any updated Policy becomes effective constitutes acceptance of the revised Policy.
Governing Law
This Policy is governed by and construed in accordance with the laws of England and Wales, unless otherwise required by applicable law.
Any disputes arising from or relating to this Policy shall be subject to the exclusive jurisdiction of the courts of England and Wales.
Contact
If you have any questions regarding this Policy or Shoorah’s handling of Personal Data, please contact:
Shoorah Support Team
support@shoorah.io
