GDPR Buster “the App” provides simplified personal data access, modify and delete requests “the Service” to merchants who use Shopify to power their stores. This Privacy Policy describes how personal information is collected, used, and shared when you install or use the App in connection with your Shopify-supported store.

Personal Information the App Collects

When you install the App, we are automatically able to access certain types of information from your Shopify account:

View Shopify account data

In order to provide the Service we store the access token obtained from Shopify during the app installation process.

View orders, View customers

These permissions allows us to provide personal data access requests to customers.

Manage your Online Store

This permission allows us to insert script to your theme and to create 3 pages in your Online Store for providing personal data request forms to customers.

Additionally, we collect the following types of personal information from you once you have installed the App:

• The store owner’s email address

• The store’s myshopify domain

We collect personal information directly from the relevant individual, through your Shopify account who uses the App request forms:

• customer’s email address

• date/time stamps on the particular device

• the customer comment for personal data modification requests

How Do We Use Your Personal Information?

We use the personal information we collect from you and your customers in order to provide the Service and to operate the App.

Additionally, we use this personal information to: Communicate with you; Optimize or improve the App; and Provide you with information or advertising relating to our products or services.

Sharing Your Personal Information

Finally, we may also share your Personal Information to comply with applicable laws and regulations, to respond to a subpoena, search warrant or other lawful request for information we receive, or to otherwise protect our rights.

Your Rights

If you are a European resident, you have the right to access personal information we hold about you and to ask that your personal information be corrected, updated, or deleted. If you would like to exercise this right, please contact us through the contact information below.

Additionally, if you are a European resident we note that we are processing your information in order to fulfill contracts we might have with you (for example if you make an order through the Site), or otherwise to pursue our legitimate business interests listed above. Additionally, please note that your information will be transferred outside of Europe, including to Canada and the United States.

Data Retention

When you place an order through the Site, we will maintain your Order Information for our records unless and until you ask us to delete this information.

Changes

We may update this privacy policy from time to time in order to reflect, for example, changes to our practices or for other operational, legal or regulatory reasons.

Contact Us

For more information about our privacy practices, if you have questions, or if you would like to make a complaint, please feel free to contact us by sending us an email.