Sample data. This is a demonstration Trust Center for a fictional business, published to show what a Rowpa Trust Center looks like. Build yours

Trust Center

YourStore

Published 2 July 2026 · ecommerce

Data processing overview

Processing activities documented

2 July 2026

Last review completed

Our Record of Processing Activities (ROPA) is maintained internally. This summary shows our processing scope at a glance.

Third-party services that process data on our behalf.

Name	Category	Country	Role	DPA
Google Analytics 4	analytics	US(transfer)	processor	View DPA
Hotjar	analytics	MT	processor	View DPA
Mailchimp	email_marketing	US(transfer)	processor	View DPA
Meta Pixel	advertising	IE(transfer)	joint_controller	View DPA
Shopify	ecommerce	CA(transfer)	processor	View DPA
Stripe	payments	US(transfer)	processor	View DPA
Zendesk	customer_support	US(transfer)	processor	View DPA

YourStore is a small online shop, and we keep our security proportionate and honest.

Hosting and checkout. Our store runs on Shopify, and payments are handled end to end by Stripe. We never see or store full card numbers; Stripe is PCI DSS Level 1 certified.
Access control. Two named staff have admin access to the store and support inbox, each with their own account and two-factor authentication. Access is reviewed when roles change.
Encryption. All traffic to yourstore.com is encrypted with TLS. Our vendors encrypt data at rest.
Data minimisation. We collect what an order needs: name, contact details, delivery address, and payment confirmation. Marketing data is opt-in only.
Vendor checks. Every tool we use has a data processing agreement in place, tracked in our records with its transfer mechanism. Our vendor list and their DPAs are published on this page.
Incidents. We have a written breach response plan. If an incident ever affects your data, we will notify affected customers and the ICO within the legal timescales.

*This is a demo page with sample data, published to show what a Rowpa Trust Center looks like.*