Preview and invitation privacy

Redacted public display copy — company identity/contact details updated 31 October 2026. The exact prior text is preserved privately; this display copy is not the original agreed record. Existing acceptance records and substantive service terms are unchanged.

MYONDER PREVIEW, INVITATION ACTIVITY AND APPLICATION PRIVACY INFORMATION
Version: selftry-preview-v1 — 27 October 2026
Document ID: myonder-free-pilot-intake-self-try-privacy

Who handles your application
MYONDER LTD, company 17526763, 8 Copthall Corner, Gerrards Cross, United Kingdom, SL9 0BZ, is responsible for this pilot application information. For pilot enquiries, support, privacy questions or requests about your information, contact pilots@myonder.com. MYONDER LTD handles these requests through its authorised team.

Trying your own website before replying
If you are authorised for the selected retailer material, choosing Preview my shop asks Myonder to retrieve the public website/pages needed for that preview, copy and format selected product text, images and branding, and render them for your own unpublished review. This limited request does not include public display, Mall admission, AI training or a paid agreement. Use the licensed sample instead if you cannot authorise the selected material.

The website URL and import options are sent to Myonder's server, which reads public source pages and returns a catalogue snapshot. Image requests can use a server proxy, with image responses marked publicly cacheable for one hour; do not use confidential assets. The resulting draft and preview choices are saved in your browser; this is not entirely browser-only processing. The preview does not create an account or save a durable catalogue to an account. Necessary service/security processing still occurs, including an instance-local IP burst counter with a 60-second expiry and applicable platform records.

Browser-local drafts have no implemented age-based expiry. Your browser's site-data controls can remove them, but can also remove preferences and sign you out; signing out alone is not erasure. Prices and availability are snapshots, and some sites cannot be read. This unpublished preview is not a promise of confidential hosting or access control.

Optional invitation activity
You can try the preview without sharing activity. The separate, initially unchecked activity box asks for your consent to help MYONDER LTD understand whether an invitation link is being used and whether an explicit website import succeeds. Checking it immediately sends one shared-visit event for that page. While it remains checked, choosing to create or manually refresh an own-site preview can record an import attempt and its server result. Automatic background range enrichment is not counted as another explicit attempt. Simply opening an email is not recorded by this feature.

The activity record contains an opaque invitation reference, random event identifier, UTC event time, notice version and, for an import, succeeded/failed status and a completion time, and a product count capped at 24 or a coarse error code. It does not contain your email, IP address, website URL, products, photographs or raw invitation token. Myonder can associate the invitation reference with the business invited, so this is not anonymous data. A link may be forwarded, repeated or used by someone else: records do not establish a person's identity or authority, nor prove that the 3D store rendered or was reviewed. Import results are saved once the server finishes; interrupted requests, recording failures and limits can leave missing or unconfirmed activity. No pending attempt is saved by this version. No activity does not prove that nobody tried.

The invitation token arrives in a URL fragment, is removed from the visible URL before application state is prepared, and is held in page memory. This activity module does not write cookies or local/session storage; other existing preview storage and necessary platform processing remain separate. A capability request checks whether activity is available but does not create a shared-visit event. Shared records are held in restricted Microsoft Azure storage in the United States and available only to authorised Myonder staff. They are not marketing registration, publication permission or pilot admission.

You may untick the activity box at any time to stop future sharing from this page. Use “Withdraw shared activity” to remove this page's previously shared events from the active activity record; if the request fails, the page must say so and you can retry. Reloading or closing the page loses its in-memory event references. For earlier sessions or any help withdrawing or requesting erasure, contact pilots@myonder.com; provide the retailer/invitation and approximate time, not passwords or tokens. We may need proportionate information to locate a record without deleting another user's activity. Withdrawal keeps only the random identifiers and withdrawal time, grouped under the invitation reference, to prevent an in-flight result from restoring withdrawn activity. Up to 40 such suppression entries per reference are retained; they contain no import outcome or product count and are not used to measure engagement. They follow the same 30-day exclusion and cleanup rules below, measured from their withdrawal entry time. We rely on legitimate interests in honouring your withdrawal for this limited suppression processing. Withdrawals can reduce the remaining activity capacity; they do not reset the tracking allowance. Withdrawal does not affect the lawfulness of processing before withdrawal. Necessary service/security records have separate purposes and are not erased by the activity control.

Invitation attribution lasts no longer than 30 days from link creation. Each of up to three invitation references holds at most 20 visits and 20 attempts. Records aged 30 days are excluded from the staff view and are removed on a subsequent activity write or by an explicit staff cleanup. There is no scheduled deletion timer: exclusion from view and link expiry do not by themselves physically delete stored records. MYONDER LTD is responsible for checking and completing expired-record cleanup at the end of the trial and handling withdrawal requests promptly. Supplier recovery, security and hold copies remain subject to their separate controls, as described below.

If you reply, we handle the reply under the application/contact policy below. Choosing a feedback-copy control only prepares text for you to send; it does not automatically send feedback. The source-permission box is separate from the optional activity choice: it requests limited use of authorised public material, rather than giving data-protection consent for unrelated processing. For necessary preview delivery and protection involving personal information, we rely on legitimate interests in providing the requested preview securely, or requested pre-contract steps where you contract personally. Optional invitation activity relies on your consent.

What we collect and why
We use your business name and website, contact name and role, business email, country, commerce platform and the pilot/device requirements you choose to provide to assess your request, contact you about it and keep a restricted application/support record. Campaign source labels may identify where a request came from. Please do not send passwords, access tokens, customer/order/card records, identity documents or sensitive personal information.

For company representatives, our basis is legitimate interests in responding to a requested business enquiry and administering a small, limited pilot, with necessary information, restricted access and limited retention. If you contract personally, information necessary for requested pre-contract steps may instead use the contract basis. A company contract is not automatically a contract with its employee.

If we invite you first, we use a relevant business contact from your retailer's public business website, a prior business exchange or a referral, with the actual source recorded for that invitation. We use it to assess fit and send an individually reviewed invitation, relying on legitimate interests only where that is appropriate and electronic-marketing rules permit. Public availability is not consent. You can ask which source was used and tell us not to contact you further.

An enquiry is not permission to retrieve your catalogue. The limited self-try request described above is separate from an enquiry and from account-backed pilot preparation. Public website-link release and optional Mall discovery require separate instructions and permissions. Nothing is charged or automatically converted to a paid service. We do not add applicants to unrelated marketing lists.

Where information goes
Authorised Myonder operators handle the application, qualification, support and rights requests. The selected mailboxes use Microsoft 365 with GoDaddy in the service administration/sign-in chain. Microsoft and GoDaddy process the information needed to deliver, support and protect those services, with their relevant service/data-protection arrangements. Their account administration and security processing may have separate controller purposes.

If you choose the existing /merchants interest form, it saves information in private Microsoft Azure storage in the United States. That form is a separate consent-based merchant launch-news/pilot-opportunity registration, not admission or an automatic email to the pilots mailbox. Its launch notice and unsubscribe choice apply to that registration. Direct pilot applications do not themselves enrol you in that list.

We do not give your contact details to participating retailers for their own marketing. We do not publish your application, account details or private correspondence as part of a public store.

International processing and protection
The services may process information outside the UK, including the United States. We make no UK-only mailbox/storage claim. Microsoft's published enterprise data-protection terms include contractual international-transfer safeguards and a UK addendum. GoDaddy's published processing terms also provide a UK transfer framework and distinguish processing for customers from its own account purposes. The account/service evidence and scope are recorded internally; these statements do not claim a newly signed contract or a transfer of an existing account to MYONDER LTD.

You can request information about applicable safeguards and the suppliers handling your information through our privacy contact. Relevant provider information is linked below.

Retention and your choices
For new unsuccessful or withdrawn free-pilot applications, our approved policy is to remove unnecessary active application information within 90 days of the last substantive contact, unless an unresolved query or a specific documented need justifies limited retention. MYONDER LTD records review dates and completion. This is a human-operated process, not an automatic deletion timer.

Email-provider security, delivery, deleted-item recovery, any applicable archive/hold and service records have separate retention purposes and controls. Their criteria include providing the subscribed service, recovery/security, contractual or legal requirements and a specific unresolved issue. Our active application policy is not a promise that every supplier recovery copy or account log disappears on day 90. We review a request against the actual categories and explain any retained information, reason and relevant next review. No unlimited Myonder marketing archive or automatic backup purge is promised. If you object to further contact, we retain only the necessary contact/suppression reference while we continue relevant recruitment so that we can honour the objection, rather than deleting the preference and accidentally contacting you again. We use that reference to prevent contact, not to market to you.

You can request access, correction, erasure, restriction, objection or applicable portability by contacting us. Rights depend on the circumstances and basis; we explain relevant lawful limitations. You can object to legitimate-interest processing and direct marketing. We handle requests under applicable legal deadlines, separately from operational acknowledgement targets. You can complain to the Information Commissioner's Office at https://ico.org.uk/make-a-complaint/.

Before later account-backed pilot preparation, further catalogue access beyond the limited self-try request or continued hosted operation, we supply the fuller merchant privacy information and applicable content permission. Public website-link release and optional independently reviewed Mall admission remain separate from applying.

Provider information
Microsoft enterprise data-protection terms:
https://www.microsoft.com/licensing/docs/view/Microsoft-Products-and-Services-Data-Protection-Addendum-DPA
Microsoft account privacy:
https://www.microsoft.com/en-gb/privacy/privacystatement
GoDaddy Microsoft 365 service terms:
https://www.godaddy.com/en/legal/agreements/microsoft-office-terms-of-use
GoDaddy data-processing terms:
https://www.godaddy.com/en/legal/agreements/data-processing-addendum
GoDaddy account privacy:
https://www.godaddy.com/en/agreements/privacy

Return to merchant setup