This Privacy Policy explains how PriceCloak ("PriceCloak", "we", "us") handles information when a merchant installs and uses the PriceCloak app on their Shopify store, and when a store visitor submits a quote request through the app. We keep the data we handle to the minimum needed to run the service.
Who is responsible for your data
For quote requests submitted by store visitors (a shopper's name, email, and message sent to a store), the merchant whose store collected the request is the data controller. PriceCloak acts as their data processor and handles that information on their behalf and under their instructions. If you are a shopper and want your data accessed or deleted, contact the store you submitted it to, or email us and we will route your request to them.
For a merchant's own account information (the data needed to install and operate the app), PriceCloak is the controller.
What we collect
From merchants
- Your Shopify store domain and the app installation details Shopify provides.
- Your notification email address, so quote alerts reach you.
- App settings and your subscription plan status.
From store visitors (via a quote request)
- The details entered in the quote form: name, email address, company (optional), quantity (optional), and message.
- The product or page the request was made from.
- The date and time of the request.
PriceCloak does not collect payment card details and does not use advertising or cross-site tracking cookies on your storefront.
How we use it
- To show quote requests in the merchant's PriceCloak admin inbox.
- To email the merchant when a new quote arrives.
- To let the merchant turn a quote into a native Shopify draft order.
- To enforce plan limits and operate, secure, and support the service.
Our lawful bases (UK GDPR / EU GDPR) are performance of a contract with the merchant and our and the merchant's legitimate interest in operating a quote-request tool.
Who we share it with (subprocessors)
We use a small set of trusted providers to run the service:
- Shopify — the platform the app runs on and the source of store and order data.
- Render — application hosting and the database, located in the European Union (Frankfurt).
- Postmark (ActiveCampaign, LLC) — sending the transactional notification emails. Postmark processes message content (which can include a quote submitter's name, email and message, and a store's price-restore file) in the United States under appropriate transfer safeguards.
We do not sell personal data and do not share it for advertising. We may disclose data if required by law.
Where data is stored and retention
Data is stored in the European Union (Frankfurt). Where a provider processes data elsewhere, it is under appropriate safeguards. We keep quote data for as long as the merchant keeps the app installed. After the app is uninstalled the store's data is retained for about 48 hours, so an accidental uninstall does not lose the merchant's hidden-price records, and is then permanently deleted when Shopify issues its store-redaction request. We also delete a store's data sooner on request. We honour Shopify's mandatory data-request and data-erasure (redaction) webhooks.
Your rights
Depending on your location, you may have the right to access, correct, delete, or restrict the processing of your personal data, and to object to processing or request portability. Shoppers should contact the store they submitted a request to; we will assist that store. Merchants and anyone else can contact us directly using the details below and we will respond.
Security
Data is encrypted in transit, access is restricted, and we follow least-privilege practices. No system is perfectly secure, but we work to protect the information we hold.
Changes to this policy
We may update this policy as the app evolves. Material changes will be reflected by updating the "Last updated" date at the top of this page.
Contact us
Questions or requests about privacy? Email support@pricecloak.com and we will get back to you.