About this document
This Shopify App Privacy Addendum applies to CLASI LTD, a private company limited by shares incorporated in England and Wales (Company No. [CO_NUMBER]) with registered office at 20 Wenlock Road, London, England, N1 7GU ("CLASI", "we", "us"). Questions about this document can be directed to privacy@clasi.co.uk. We review this document at least annually and on any material change to our services or applicable law.
Scope
This Addendum supplements our Privacy Notice in respect of merchants and end-customers who interact with Shopify apps developed and operated by CLASI LTD.
Data we receive from Shopify
When a merchant installs one of our apps, Shopify shares the data permitted by the OAuth scopes granted by the merchant. We process this data only to provide and improve the app's functionality as described in the app listing. We do not sell merchant data and do not share it with advertising networks.
End-customer data
If our app is used to process end-customer personal data on behalf of the merchant, the merchant is the data controller and CLASI LTD is a data processor. Our DPA at /legal/dpa applies.
Mandatory webhooks
We respond to Shopify's mandatory privacy webhooks: customers/data_request, customers/redact and shop/redact, in line with Shopify's published timelines.
Retention
App data is retained for the duration of the app installation. On uninstallation, app data is deleted within 30 days, except where retention is required by law.
Updates
We may update this document from time to time. The "last updated" date at the top reflects the most recent change. For material changes that affect your rights, we will provide reasonable notice through our website or, where appropriate, by email.
Contact
CLASI LTD 20 Wenlock Road, London, England, N1 7GU United Kingdom Email: privacy@clasi.co.uk General: hello@clasi.co.uk