Details about our privacy policies
that you should be aware of
General privacy policy
When we collect merchant or customers information
We collect your information when you install our app, your customers information—when they sign up at your store. We only retain collected information for as long as necessary to provide you with your requested service. What data we store, we will protect within commercially acceptable means to prevent loss and theft, as well as unauthorised access, disclosure, copying, use or modification.
Personal information we collect
When you install Froonze apps, we are automatically able to access certain types of information from your Shopify account:
- Your stores settings data
- The details of your customers saved addresses and order history
- Your stores order history
We only ask for personal information when we truly need it to provide a service to you. We collect it by fair and lawful means, with your knowledge and consent.
How we use your personal information
We use the personal information collected from you and your customers in order to operate the Froonze apps. Additionally, we use your email to communicate with you by sending updates and important information relevant to the service that we provide to you.
Use of cookies
We do not use cookies, and we do not track your activity while you are using our app.
Third-party disclosure
We do not trade, sell, or transfer to outside parties your Personally Identifiable Information. This does not include hosting partners and other services who assist us in operating our app, conducting our business, or serving our users, as long as those parties agree to keep this information confidential.
We may share your Personally Identifiable Information to comply with applicable laws and regulations, to respond to a subpoena, search warrant or other lawful request for information we receive, or to otherwise protect our rights.
However, non-personally identifiable visitor information may be provided to other parties for marketing, advertising, or other uses.
Note to EU residents
As a European Union resident, you have the right to access personal information we hold about you and to ask that your personal information be corrected, updated, or deleted. If you want to exercise this right, please contact us at support@froonze.com.
Additionally, if you are a European Union resident we note that we are processing your information in order to fulfill contracts we might have with you, or otherwise to pursue our legitimate business interests listed above.
Additionally, please note that your information will be transferred outside of Europe, including to Canada and the United States.
EU data protection regulation (GDPR)
The General Data Protection Regulation (GDPR) exists to protect personal data and digital privacy, and Froonze complies with this legislation to make sure the rights of merchants and their customers are guaranteed when it comes to personal information.
What GDPR is
The General Data Protection Regulation (GDPR) is a legal framework approved in 2016 that updates and unifies data privacy laws across the European Union (EU), setting guidelines for the collection and processing of personal information from European citizens whether or not they live in Europe. GDPR aims to give consumers control over their own personal data and ensure the rights the legislation grants them by holding companies responsible for the way they handle and treat this information.
Froonze role in regard of merchant data
Merchants are the administrators of the stores that install and use our application. When you install our app we access and store information from your Shopify account profile to identify and communicate with you (name, email, phone) and from the account settings that are relevant to install and run the application (shop domains, plan, country, language, currency, product and customers count).
Since this data is synced with the platform Shopify, the tools to access, correct and update this information are those provided by Shopify in their Store Settings. Whenever necessary, the deletion of this information in our database can also be processed in 72 hours through direct request to our support channel at support@froonze.com once the application is uninstalled.
Froonze role in regard of customer data
Customers are all those individuals with active accounts in the store and it is to them that the GDPR legislation is mainly aimed. For the purposes of GDPR, the Merchant is the Controller of the customers’ data, which means that is the Merchant that collects customers’ data and chooses how it is handled, while Froonze acts as Processor by following instructions to process this personal data on behalf of the Controller. The Merchant, as the Controller, is able to manage this data (including all that our app processes) from the Shopify Admin dashboard, and is obliged to fulfill the personal data rights (DSR) of customers that are European citizens.
As a Processor we help the Merchant to fulfill your customers’ data rights precisely by making available to them in our Customer Portal different panels where customers can review and edit their profile information, access the details of their orders or information provided by other applications through integrations, or contact the shop.
As Processors, we access customers’ information once they sign up at your site, and store some of it only in order to operate our main features: a Customer Portal where content is adapted to each of the customers, profile and addresses edit panels, and customer-level registration tools. Accordingly, the information we store is basically that corresponding to a part of the customers’ profiles (email, name, phone number, country, date of birth, gender, total spent, orders count, subscription status and customer tags) while other customer information like order details, addresses or metafield values remain stored uniquely in Shopify, and is only accessed punctually via API to be presented on the Customer Portal.
We only retain customer information on our servers for as long as necessary to provide the Merchant with a service, and we only request access to that information that is strictly needed. If an individual, either directly or through the Merchant, wants his/her personal information to be deleted from our database, this action can be processed in 72 hours through direct request to our support channel at support@froonze.com.
Cookies and third-party tracking
We do not use cookies and we do not track your activity while you are using our app or your customers’ while they’re browsing the site. We do not trade, sell, or transfer to outside parties Personally Identifiable Information for marketing, advertising, or other uses. We may share your Personally Identifiable Information to comply with applicable laws and regulations, to respond to a subpoena, search warrant or other lawful request for information we receive, or to otherwise protect our rights.
International servers
We store both stores and customer data on Heroku, production servers located in the US, running on Amazon Web Service (AWS). Heroku’s physical infrastructure is hosted and managed within Amazon’s secure data centers and utilizes the Amazon Web Service (AWS) technology where data is encrypted at all times. Amazon conducts recurring assessments to ensure compliance with industry standards. In particular, their data center operations have been accredited under:
- ISO 27001
- SOC 1 and SOC 2 / SSAE 16 / ISAE 3402 (previously SAS 70 Type II)
- PCI Level 1
- FISMA Moderate
- Sarbanes-Oxley (SOX)
Integrations
If you integrate the Froonze app with other apps, the personal data of you and your customers will be processed by these apps.
Miscellaneous
Contact us
If you have questions or complaints regarding our privacy policy, please contact us at support@froonze.com.
Changes to the privacy policy
We may update our Privacy Policy from time to time.
We will notify you of any changes by posting the new Privacy Policy on this page. We will let you know via email and/or a prominent notice on our service, prior to the change becoming effective and update the "effective date" at the bottom of this Privacy Policy.
You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.
Effective date
This policy is effective as of 10 October 2021.