Introduction
This Privacy Policy explains how GL6 (“we”, “our”, or “us”) collects, uses, and protects information when merchants install and use the EU Withdrawal Button Shopify app (“the App”).
The App is designed to help Shopify merchants comply with EU consumer withdrawal regulations by displaying and managing withdrawal request functionality on their Shopify stores.
By installing or using the App, you agree to the practices described in this Privacy Policy.
Information We Collect
When you install the App, we may access and process certain Shopify store information, including:
- Store name and store URL
- Shopify store ID
- Merchant contact information
- Theme-related information required for app functionality
- App configuration and settings
- Withdrawal request data submitted through the App
- Technical usage and diagnostic logs
We only access data that is necessary for the operation and functionality of the App.
The App does not intentionally collect unnecessary personal customer data.
How We Use Information
We use collected information to:
- Provide and operate the App
- Display and manage withdrawal request functionality
- Store merchant configuration settings
- Process and manage withdrawal requests
- Improve app performance and reliability
- Monitor errors and technical issues
- Provide customer support
- Comply with legal obligations
Shopify Data and Permissions
The App uses Shopify APIs to securely access only the permissions required for app functionality.
Authentication is handled through Shopify’s OAuth system.
We do not sell merchant or customer data to third parties.
Data Retention
We retain data only for as long as necessary to provide the App and comply with legal obligations.
If the App is uninstalled, associated store data may be deleted within a reasonable period unless retention is required for legal, security, or fraud prevention purposes.
Resolved withdrawal requests may be periodically deleted as part of our data minimisation practices.
GDPR and Privacy Rights
Where applicable, we support Shopify privacy and GDPR-related webhook requests, including:
- Customer data requests
- Customer data deletion requests
- Shop data deletion requests
Merchants may contact us regarding privacy-related matters at any time.
Third-Party Services
We may use trusted third-party service providers to operate the App, including services for:
- Cloud hosting
- Database storage
- Error monitoring
- Analytics
- Email communication
These providers may process limited data solely for providing their respective services.
Security
We take reasonable technical and organisational measures to protect information against unauthorised access, misuse, or disclosure.
However, no internet-based service can guarantee absolute security.
Changes to This Policy
We may update this Privacy Policy from time to time.
Updated versions will be posted on this page with a revised “Last updated” date.
Contact
If you have questions about this Privacy Policy or privacy-related requests, please contact:
GL6
Email: hello@gl6.com
Website: https://gl6.com