Data Processing Agreement

Version 2026-11-07. Between the business using ForecastMyShop ("you", the controller) and Forecast my shop, forecastmyshop.com ("we", the processor), under Article 28 of the EU General Data Protection Regulation (GDPR).

In short: your sales data is yours. We use it only to make your forecasts, keep it in the EU, delete it on schedule, never sell it and never use it to train anything for anyone else. You accept this agreement once, in the app, before your first upload.

1. Roles

You decide why and how your sales data is processed: you are the controller. We process it on your behalf, only to provide ForecastMyShop: we are the processor. This agreement is part of your use of ForecastMyShop and lasts as long as your account does.

2. What we process, and why

• Purpose: to read your sales files, check them, make forecasts, accuracy checks, sales insights and order suggestions, and give you the downloads. Nothing else.
• Data: the sales records you upload (dates, products, stores, quantities, and prices or promotions if your file has them), stock details you enter, and the results.
• Personal data: sales files rarely need any. If your file contains personal data (for example a customer's or employee's name, an email address or a loyalty number), it is processed under this agreement. Please leave it out: dates, products and quantities are all a forecast needs.
• People concerned: only those whose personal data you choose to include, such as your customers or staff.

3. How long we keep it

• Uploaded files: deleted 24 hours after upload.
• Forecast results: deleted after 72 hours, or the 30 or 90 days you choose in Settings → Data & privacy. You can delete a forecast's results yourself at any time.
• When your account closes, your organization's data is deleted, except what the law requires us to keep (such as invoices).

4. What we commit to

• We process your data only on your instructions: using ForecastMyShop, and your settings, are those instructions. We tell you if we think an instruction breaks data protection law.
• Everyone at ForecastMyShop who can see your data is bound to confidentiality. If our staff ever view your organization's data, it is logged and you can see it in Settings → Data & privacy.
• We keep your data secure (Article 32): hosting in the EU, encrypted connections (HTTPS), each organization's data kept apart in the database, spreadsheet formulas read as values and macros never run, two-step login available for your team.
• We never sell your data, never use it for marketing, and never use it to train anything for anyone else.
• We help you answer requests from people exercising their rights (access, correction, deletion), and with security questions or impact assessments where our part matters.
• If we become aware of a personal data breach affecting your data, we tell you without undue delay, and within 48 hours, with what we know and what we are doing about it.
• On request, we give you the information you need to show this agreement is respected.

5. Sub-processors

We use these companies to run ForecastMyShop. You agree to them by accepting this agreement. We will tell you before adding or replacing one, so you can object; if you object and we can't accommodate it, you may close your account.

Payments go through Stripe or Mollie, which receive your billing details, never your sales data.

6. Transfers outside the EU

Your sales data is stored and processed in the EU. We don't transfer it outside the EU or the European Economic Area.

7. Changes

If we change this agreement, we publish the new version here with a new date and ask you to accept it in the app before your next upload.

8. Contact

Forecast my shop, forecastmyshop.com. Questions about this agreement or your data: contact@forecastmyshop.com.