Shooes Privacy Policy
Last updated 29 July 2026
Top deals today
Shooes compares running-shoe prices across every retailer in Belgium, refreshed daily.
1. Who is responsible for your data
ME Technologies SRL is the data controller for the personal data described in this policy. Shooes is the commercial name of the service it operates.
ME Technologies SRL
Rue des Patriotes 6, 1000 Brussels, Belgium
Enterprise number: 1018.010.743
Email: info@shooes.io
We have not appointed a Data Protection Officer, as we are not required to. Privacy questions go to info@shooes.io.
This policy covers the Shooes website at shooes.io and the Shooes mobile applications. It does not cover the retailer sites you reach by clicking through from Shooes. Those sites are independent controllers with their own privacy policies, and you should read them.
2. What we collect
You can browse and compare prices on Shooes without an account and without telling us who you are. An account is optional, and it unlocks saving and syncing your wishlist and profile across the website and the app.
We never ask for your postal address or payment details, and we have no way to take payment from you.
Data your device sends automatically. Your IP address, the pages or screens you view, the time and date of access, referring URL, and information about your browser, operating system and device type.
Your market and display preferences. The delivery country you select, and similar interface preferences, stored on your device.
Data you give us when you create an account.
- Email address and name.
- A password, which our API stores only as a hash. We never see or store your password in readable form. This does not apply if you signed in with Google, in which case no password exists.
- An optional runner profile. Every field in it is optional, and today it can include gender and your shoe sizes. We use it only to help you find shoes that fit and are made for you. We do not use it for advertising and we do not share it.
- A record of your marketing preferences, which you set with a toggle in your account settings.
- Your saved wishlist, meaning the shoes you have chosen to keep.
Data we receive from your sign-in provider. You can sign in with Google on the website and in the app. When you do, we receive your email address and, where Google supplies it, your name. Sign in with Apple is available in the app but not yet on the website; if you use it and choose to hide your email, we receive a private relay address rather than your real one, and we use that address for everything we send you.
Back-in-stock notification requests. If you ask to be told when a shoe becomes available, we store your email address together with the product, colourway and size you asked about. You do not need an account to do this, so we may hold a notification request for someone who has no account with us.
Crash and error data. If the app or site fails, we may collect technical details of the error and what was happening when it occurred, so that we can fix it.
Data you send us. If you email us or contact us on social media, we receive your email address or handle and whatever you write.
We do not collect special category data. Nothing we ask for is intended to reveal your health, ethnicity, beliefs, sexual orientation, political opinions or any other special category of data under Article 9 GDPR, and you should not send us any.
Aggregate usage measurement. The website uses Vercel Web Analytics, a privacy-preserving tool that counts page views and visit sources in aggregate. It sets no cookies, stores nothing on your device and identifies no individual visitor - see the Cookie and Local Storage Policy, section 3.6, for the details.
3. Why we use it, and on what legal basis
| Purpose | Data used | Legal basis |
|---|---|---|
| Delivering the comparison service: showing shoes, prices and retailers for your selected market | Technical data, market and display preferences | Legitimate interests (Art. 6(1)(f)): operating the service you came for |
| Creating and running your account, syncing your wishlist and profile between the website and the app | Account data | Performance of a contract (Art. 6(1)(b)): we cannot provide the account without it |
| Personalising the shoes we show you, where you have filled in a runner profile | Optional runner profile | Performance of a contract, and consent where you chose to provide the data |
| Notifying you when a shoe you asked about becomes available | Email address, product, colourway, size | Consent (Art. 6(1)(a)), withdrawable at any time |
| Sending you account emails: confirmation, password reset, security notices | Email address | Performance of a contract |
| Sending you marketing, where you have switched it on | Email address, marketing preferences | Consent (Art. 6(1)(a)), withdrawable at any time |
| Keeping the Service secure and available, preventing abuse, scraping and fraud | Technical data, server logs | Legitimate interests: protecting our service and our users |
| Diagnosing errors and improving the Service | Crash and error data, technical data | Legitimate interests: maintaining a service we offer |
| Measuring how the website is used, in aggregate (no cookies, no device storage, no individual profiles) | Aggregated technical data | Legitimate interests: understanding whether the Service works and is used |
| Attributing click-throughs and commissions with our affiliate partners | Click and referral data | Legitimate interests: operating our commercial model |
| Complying with legal obligations and defending legal claims | Whatever is relevant | Legal obligation (Art. 6(1)(c)) and legitimate interests |
Where we rely on legitimate interests, we have weighed those interests against your rights and concluded they do not override them. You can object at any time (see section 8).
We do not carry out automated decision-making that produces legal or similarly significant effects on you, and we do not build advertising profiles about you.
4. Who we share it with
We do not sell your personal data. We share it only with:
- Microsoft Azure, which hosts our API, our database and our transactional email service.
- Vercel, which hosts and serves the website and processes our aggregate, privacy-preserving site analytics.
- Google and Apple, if you choose to sign in with them, and in relation to app distribution and crash reporting. Sign in with Apple is currently app-only.
- Affiliate networks and their retailer clients, who receive click and referral data so that a purchase can be attributed to Shooes. These include AWIN, CJ, Impact, ShareASale, Rakuten Advertising, Adtraction, Belboon, Effinity, NetAffiliation and Partnerize. Once you leave Shooes, these networks and the retailer act as independent controllers under their own privacy policies.
- Professional advisers, such as accountants and lawyers, where necessary.
- Public authorities, courts and regulators, where we are legally required to disclose, or where disclosure is needed to establish, exercise or defend legal claims.
- An acquirer, if our business or its assets are sold, merged or reorganised. Your data would transfer with the business and remain protected on terms at least equivalent to this policy, and we will tell you if this changes who controls your data.
Our service providers act on our instructions under written data processing agreements and may not use your data for their own purposes.
5. Where your data is
Our own infrastructure is entirely within the European Economic Area. Our database, our API and our transactional email service all run in Microsoft Azure's France Central region. Automated database backups stay in that region, with geo-redundant backup disabled. Transactional email is pinned to France. No personal data held in our own systems leaves the EEA.
Two exceptions sit outside that boundary:
- Website hosting. Vercel operates a global network, and serving the site may involve infrastructure outside the EEA.
- Affiliate networks. Several are established outside the EEA. They receive click and referral data on their own domains after you leave Shooes.
For these, we rely on an adequacy decision of the European Commission, on the EU-US Data Privacy Framework where the recipient is certified, or on the European Commission's Standard Contractual Clauses with any additional safeguards the transfer requires. You can ask us for details of the safeguards applying to a specific transfer.
6. How long we keep it
| Data | Retention |
|---|---|
| Account data | Until you delete your account. We are introducing an inactivity rule: after 24 months without a sign-in on the website or the app, we will email you a warning and delete the account 30 days later unless you sign in. That rule is not yet automated; until it is, accounts are deleted on request |
| Saved wishlist and runner profile | Deleted with the account |
| Back-in-stock notification requests | Deleted once we have notified you, or 6 months after the request if the shoe has not become available, whichever comes first. That rule is not yet automated; you can ask us to delete a request at any time |
| Marketing suppression record | Kept indefinitely as a hashed email address, so that we do not add you back to marketing after you have opted out |
| Server and security logs | Up to 12 months |
| Crash and error reports | Up to 12 months |
| Preferences stored on your device | Until you clear them |
| Correspondence with us | For as long as your query is open, and up to 3 years afterwards |
| Records we must keep by law, including accounting records | For the period required by law, generally 7 years in Belgium for accounting records |
| Data relevant to a legal claim | Until the claim and any appeal period is finally resolved |
| Automated database backups | 7 days, after which they expire on the normal cycle |
When we delete your account, the live record goes immediately. Any copy remaining in an automated backup expires within 7 days. We do not restore backups selectively to remove individual records, and no data from an expired backup is returned to live use.
7. Children
Shooes is intended for people aged 16 or over and is not directed at children. We are adding a confirmation at signup that you are 16 or over. We do not verify age, and we do not ask for your date of birth. If you believe a child has provided us with personal data, contact info@shooes.io and we will delete it.
8. Your rights
Under the GDPR you have the right to:
- Access the personal data we hold about you, and receive a copy of it.
- Rectify data that is inaccurate or incomplete. If you have an account, you can correct most of it yourself in your account settings.
- Erase your data where one of the grounds in Article 17 applies.
- Restrict our processing in the circumstances set out in Article 18.
- Object to processing based on our legitimate interests, on grounds relating to your particular situation. You can object to direct marketing at any time, with no reason needed, and we will stop.
- Portability: receive the data you provided to us in a structured, commonly used, machine-readable format, and have it transmitted to another controller where technically feasible.
- Withdraw consent at any time where processing is based on it. This does not affect processing already carried out.
To exercise any of these rights, email info@shooes.io. We respond within one month, extendable by two further months for complex requests, in which case we will tell you. Exercising your rights is free unless a request is manifestly unfounded or excessive.
Getting a copy of your data. We do not currently offer a self-serve download. Email us and we will send you your data manually within the one-month deadline. The data we hold for an account is your email address, your name, your runner profile, your marketing preferences and the product references on your wishlist.
Deleting your account. We do not currently offer a delete button in the app or on the website. Email info@shooes.io from the address on the account and we will delete it. Deletion removes your email address, name, password hash, runner profile, marketing preference records, saved wishlist and any back-in-stock notification requests held against your email address. We keep only a hashed record of your email address so that we do not add you back to marketing, and anything we genuinely need for an active legal claim. We will introduce a self-serve deletion flow, and when we do it will confirm your identity by asking for your password, or by asking you to sign in again with Google or Apple.
Cancelling a notification request. Every back-in-stock email contains a cancel link. You can also email info@shooes.io.
Unsubscribing from marketing. Turn the toggle off in your account settings, use the unsubscribe link in any marketing email, or email info@shooes.io.
We will not discriminate against you for exercising your rights.
9. Complaints
If you think we have handled your data unlawfully, please tell us first at info@shooes.io so that we can put it right.
You also have the right to lodge a complaint with a supervisory authority, in the EU member state of your residence, place of work or the place of the alleged infringement. Our lead authority is:
Autorité de protection des données / Gegevensbeschermingsautoriteit
Rue de la Presse 35 / Drukpersstraat 35, 1000 Brussels, Belgium
+32 (0)2 274 48 00
contact@apd-gba.be
autoriteprotectiondonnees.be
10. Security
We use appropriate technical and organisational measures to protect personal data against loss, misuse and unauthorised access, disclosure, alteration or destruction. These include encryption in transit, storing passwords only as hashes, restricting access to those who need it, and keeping personal data within a single European region.
No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If a personal data breach occurs, we will notify the supervisory authority and, where required, affected individuals, in accordance with Articles 33 and 34 GDPR.
11. Cookies and local storage
Shooes stores a small amount of information on your device, mostly in local storage rather than in cookies. Full details, including what each item does and how long it lasts, are in our Cookie and Local Storage Policy.
Some browsers offer a "Do Not Track" signal. There is no common standard for how services should respond to it, and we do not currently act on it.
12. Changes to this policy
We may update this policy to reflect changes to the Service, our practices or the law. We will publish the updated version here and change the date at the top. Where a change materially affects how we use your data, we will give you notice and, where the law requires it, ask for your consent.
13. Contact
ME Technologies SRL, Rue des Patriotes 6, 1000 Brussels, Belgium
info@shooes.io