This policy explains how Shopimods ("we", "us") handles personal data when you use the Shopimods app for Shopify, the dashboard at app.shopimods.com, and this website.
Shopimods is operated by LOGIC WAVE TECHNOLOGIES LTD, a company registered in England and Wales, of 91 Ecton Park Road, Northampton, England, NN3 5LF. If you have questions, email info@shopimods.com.
Who is responsible for the data
- Merchant account data (your name, email and login details): we are the controller.
- Your customers' data contained in your Shopify orders: the merchant is the controller and Shopimods acts as a processor, handling it only to provide the service on the merchant's instructions. Buyers who want to exercise their privacy rights should contact the store they bought from.
Data we collect
When you install the app and create an account
- Your name and email address, taken from your Shopify store owner details or entered by you.
- Your password, stored only as a secure hash.
- Your organization name, and the names and addresses (
.myshopify.comdomains) of the stores you connect. - An access token issued by Shopify that lets the app read your orders and fulfil them. It is never shown in the app or sent to your browser.
From your Shopify store
To sync and fulfil orders, we receive your store's orders from Shopify, which include:
- Order details: order number, line items (SKU, name, quantity, price), totals, currency, payment and fulfillment status, notes.
- Customer details on the order: name, email address, phone number, shipping and billing address.
We don't access your product catalogue, customer list or payment information.
Data you add in Shopimods
- Stock records and the CSV or Excel files you upload to import them.
- Order action settings: webhook URLs and authentication values, and your GSIT portal address and API key.
Generated while you use the service
- Logs of each order action (what was sent where and the response), alerts, tracking numbers returned by GSIT.
- Technical logs such as IP addresses and request times, kept for security and troubleshooting.
How we use data
- To provide the service: import orders, send them to the destinations you configure, update tracking and fulfillment in Shopify, and manage your stock.
- To run your account: sign-in, password resets and service emails (for example, your account setup link).
- To keep the service secure, prevent abuse and fix problems.
- To provide support when you contact us.
We don't sell personal data, use it for advertising, or use your customers' data for any purpose other than providing the service to you.
Our legal bases are performing our contract with you, our legitimate interest in running a secure and reliable service, and complying with legal obligations.
Who we share data with
- Shopify, to read and fulfil your orders.
- Destinations you choose: when you set up an order action, orders, including customer delivery details, are sent to GSIT or to the webhook address you enter. You are responsible for those destinations.
- Our service providers, under contract and only to run Shopimods: Amazon Web Services (hosting, database, file storage, message queues and email delivery).
- Authorities, where we are legally required to.
Where data is stored
Shopimods runs on Amazon Web Services in the United Kingdom (London region). Where a provider processes data outside the UK or European Economic Area, we rely on appropriate safeguards such as the UK International Data Transfer Addendum or Standard Contractual Clauses.
How long we keep data
- We keep account and store data while the app is installed and your account is active.
- When you uninstall the app, we stop accessing your store immediately. Shopify then sends us a request to delete your store's data, and we delete your store's orders, order logs and connection details in response.
- When Shopify sends us a request on behalf of one of your customers to delete or provide their data, we act on it within 30 days.
- You can ask us to delete your account at any time by emailing us.
- Technical logs are kept for a limited period for security, then deleted.
Security
Data is encrypted in transit (HTTPS). Access to systems is restricted, store access tokens are never exposed to browsers, notifications from Shopify are verified, and each organization's order and stock data is kept separate from every other organization's.
Your rights
Depending on where you live, including under the UK GDPR and EU GDPR, you can ask to access, correct, delete or export your personal data, object to or restrict how we use it, and withdraw consent where we rely on it. Email info@shopimods.com; we reply within one month. You can also complain to your data protection authority; in the UK that is the Information Commissioner's Office (ico.org.uk).
Cookies
This website doesn't use tracking or advertising cookies. The Shopimods dashboard uses a strictly necessary cookie to keep you signed in.
Children
Shopimods is a business service and isn't intended for children.
Changes to this policy
We'll update this page when our practices change and revise the effective date above. For significant changes we'll let merchants know by email or in the app.
Contact
LOGIC WAVE TECHNOLOGIES LTD, 91 Ecton Park Road, Northampton, England, NN3 5LF
Email info@shopimods.com with any privacy question or request.