Privacy Policy (for Merchant’s Customers)
This Privacy Policy (for Merchant's Customers), referred to as the "Policy," is an integral part of our Terms of Service (for Merchant's Customers). It outlines the personal information we collect and the policies and procedures we implement for the protection of your personal information as a customer ("You" or "Merchant's Customer") using our web application (the "Service") on behalf of the merchant with whom you engage (the "Merchant").
Compliance with data protection laws, such as the General Data Protection Regulation (GDPR), is a core value for us. We are fully committed to respecting your privacy rights, implementing necessary safeguards, and handling your personal data in a transparent, secure, and responsible manner.
Our Service is intended for individuals who are 18 years of age or older. We do not knowingly collect any information or data from individuals under the age of 18, nor do we permit individuals under the age of 18 to use our Service.
We reserve the right to make changes to this Policy from time to time. Any modifications or updates to the Policy will be posted on our Service in a timely manner before they take effect. Additionally, if we have your email address on file, we will make reasonable efforts to notify you of any changes by sending you an email.
What we collect and why
After finalizing your purchase on the Merchant's website, we gather transaction information necessary for operating the Service and delivering its features and functionality. This information comprises your email address, full name, purchase amount, purchase date, the specific item you purchased, and your address.
When you interact with the Service in various capacities, such as requesting a referral link for the Merchant's store or contacting the Merchant through our Service with an inquiry, we gather interaction information. This information is essential for operating the Service and ensuring the provision of its features and functionality. It encompasses your name, email address, and any additional information you choose to provide. While it is not obligatory to share your interaction information, it is important to note that opting out of providing this information may result in our inability to fulfill your requested Service features and functionalities on behalf of the Merchant, and the Merchant may be unable to respond to your inquiry.
During your usage of the Service, we collect statistical and analytic information on behalf of the Merchant, aligning with their preferences. This data is crucial for security and monitoring purposes, as well as enabling the Merchant to gain insights into how their customers interact with the Service and their store. It allows the Merchant to personalize their offerings, develop their business, and enhance the overall customer experience. The collected information includes metadata such as details about your computer or mobile device, operating system, and browser. Additionally, we gather analytic information regarding your use of the Service and/or the Merchant's website, encompassing the IP address used to access the Service, the date and time of access, browser type, language preferences, links clicked, and actions performed while utilizing the Service.
When you choose to receive promotional email communications from the Merchant, such as requests to submit product reviews or notifications about other responses, your information is processed accordingly. This allows the Merchant to send you relevant promotional content based on the legal basis chosen, which could be consent or legitimate interest. The information processed for these communications includes your name and email address. If you decide to opt out of receiving promotional email communications from the Merchant, you have the freedom to do so at any time by utilizing the "Unsubscribe" link provided in the footer of our emails or by reaching out to our support service at support@webcontrive.com.
Personal Information Collection Methods and Sources
We gather personal information from various sources, which may include:
Shopify Integration: When you install and utilize the Service through the Shopify app store, we receive information directly from Shopify.
Direct Interaction: Personal information provided by you through our Service contact forms and email communications.
Device and Analytics: Collection of personal information through your device, including third-party cookies, analytics tools, and our internal event tracking system.
While you are not under a legal obligation to provide us or the Merchant with your personal information, please note that failure to do so may prevent us from effectively handling or responding to your inquiry, as well as fulfilling your request to access or use the Service functionalities.
Personal Information Disclosure
Except for the situations indicated below or if you give us your express, informed consent, we won't disclose your information to third parties.
Your personal information will be disclosed to our service providers, who will only use it as required to help us run our company and the Service internally and not for their own marketing initiatives.
Here is a list of the service providers we work with:
- Digital Ocean
- CloudFlare Inc.
- Helpscout
- Sendinblue
- Mailerlite
In the event of a violation of the law, we may be required to share your information with competent authorities. This includes situations where we need to respond to, handle, and mitigate suspected violations of law in connection with our business. Such sharing may involve communication with competent authorities, legal counsels, and advisors who are involved in the legal process.
In certain circumstances, if a judicial, governmental, or regulatory authority mandates the disclosure of your information, we may be obligated to comply with such requests. This includes situations where we receive a binding request from a competent authority, and we are legally required to disclose your information.
In the event that the operation of the Service or our business undergoes a reorganization or is conducted through a different legal structure or entity, we may share your information to facilitate such changes. This includes enabling a structural shift in the operation of the Service and our business. The recipients of this information may include the target entity involved in a merger or acquisition, as well as legal counsels and advisors.
Data Retention and Security
We will retain your information for as long as necessary to operate the Service, conduct our business, and maintain interactions with you. Additionally, we may retain your personal information beyond this period to fulfill our legal obligations, resolve disputes, establish and defend legal claims, and enforce our agreements. Our general retention period is approximately 10 years, ensuring compliance with record-keeping requirements and maintaining data security.
To minimize the risks of information damage, loss, and unauthorized access or use, we have implemented security measures. However, it is important to understand that no security measure can provide absolute information security. While we make every effort to protect your personal information, we cannot guarantee that it will be entirely immune to information security risks.
Legal Basis for Processing Personal Data
Service Operation: We collect your personal information to operate the Service and provide you with its features and functionality. This includes fulfilling our obligations under the Terms of Service that we have with you and serving the legitimate interests of the Merchant in operating their e-commerce site.
Promotional Communication: We may process your personal information to send you promotional communications on behalf of the Merchant. The legal basis for this processing may be your explicit consent to receive such communications or the legitimate interests of the Merchant.
Personal Information Processing: We collect and process your personal information for security and monitoring purposes on behalf of the Merchant. This is necessary to protect the Merchant's interests and ensure the safe and secure operation of our Service.
Improve Service: We collect and process your personal information to develop and improve the Service on behalf of the Merchant. This is done to enhance the functionality and user experience of the Service, ensuring its continuous improvement and meeting the needs of the Merchant.
Submit Feedback: We process your personal information to enable you to submit a review through the Service on behalf of the Merchant. This allows us to fulfill our contractual obligations and provide you with the requested Service. Additionally, it serves our legitimate interest in facilitating the review process and enhancing the overall user experience.
Facilitate Merchants Response: We process your personal information to facilitate the Merchant's response to your inquiry or fulfill your request for a referral link. This is in line with the Merchant's legitimate interest in providing efficient customer support and promoting their business through referrals.
Merchant’s Legitimate Interest: We process your personal information on behalf of the Merchant when you provide us with feedback and reviews. This is based on the Merchant's legitimate interest in improving and growing its business, as well as responding to customer feedback and reviews.
Defending Violations and Breaches: We process your personal information in order to respond to, handle, and mitigate suspected violations of law in connection with our business. This processing is based on our legitimate interests in defending and enforcing violations and breaches that may be harmful.
Mandatory Legal Requirements: We process your personal information in order to comply with any binding requests received from a competent authority. This processing is based on our legitimate interests in complying with mandatory legal requirements.
Structural Changes Update: We may process your personal information to enable a structural change in the operation of the Service and our business. This processing is based on our legitimate interests in ensuring business continuity and facilitating organizational changes.
Data Subject Rights Under the GDPR (EU/UK)
If you are located in the EU or the UK, you have specific rights under the GDPR, including the right to access and obtain a copy of your personal information, the right to rectify any inaccuracies in your personal information, the right to withdraw your consent at any time, the right to data portability, the right to object to the processing of your personal information, the right to request the restriction of processing, and the right to request the erasure of your personal information. If you would like to exercise any of these rights, please contact the Merchant directly.
Subject to the applicable law, you also have the right to file a complaint with your local data protection authority. If you are located in the EU, you can lodge a complaint with the supervisory authority in the Member State where you reside, work, or believe the GDPR infringement occurred, as specified in Article 77 of the GDPR.
Contact Information
If you have any questions or inquiries regarding the Application, please feel free to reach out to us at support@webcontrive.com. We are committed to providing excellent customer support and will be glad to address any inquiries you may have.
