Wholesale B2B Pricing Privacy Policy

2. Information We Collect

2.1 Store data accessed through Shopify

When a merchant installs the App, Shopify grants the App access to specific store data through Shopify's APIs so the App can apply wholesale and B2B pricing. Depending on the features used, this may include the following:

• Store and account details (store name, domain, contact email, plan, and settings)

• Product and collection data (titles, variants, prices, and inventory)

• Customer records and customer tags are used to assign wholesale groups and pricing

• Order and pricing data needed to apply discounts and volume rules

• Storefront activity related to wholesale pricing display

The App requests only the access scopes required to deliver its features.

2.2 Wholesale registration data

If a merchant uses the App's wholesale registration form, the App processes the details that the merchant's business customers submit through that form. This may include name, email address, business name, phone number, and any other fields the merchant configures. This information is collected on the merchant's behalf and stored so the merchant can review and approve wholesale accounts.

2.3 Information you provide to us directly

When you contact us, request a demo, book a consultation, register an account, sign up for our blog, or submit a form on the Site, we collect the details you provide, such as your name, username, email address, phone number, store URL, and message.

2.4 Website usage data

Like most website operators, we collect non-personally identifying information of the sort that web browsers and servers typically make available, such as browser type, device type, language preference, referring site, and the date and time of each visitor request, along with the pages viewed. We use cookies and similar technologies for this (see Section 11).

We also collect potentially personally identifying information such as Internet Protocol (IP) addresses for logged-in users and for users leaving comments on our blog. We disclose logged-in user and commenter IP addresses only under the same circumstances in which we use and disclose personally identifying information, as described in Section 5.

2.5 Transaction and payment data

Those who engage in transactions with CartCoders, by purchasing our services or products, are asked to provide the additional personal and financial information required to process those transactions. We collect such information only insofar as it is necessary or appropriate to fulfill the purpose of the interaction. Payment card details are handled by our payment processors and are not stored on our servers.

4. Legal Bases for Processing (EEA and UK)

Where the GDPR or UK GDPR applies, we rely on the following legal bases: performance of a contract (to provide the App and services); legitimate interests (to operate, secure, and improve our products); consent (for optional cookies and marketing, where required); and legal obligation (to meet regulatory duties). For store and customer data processed on a merchant's behalf, the merchant determines the legal basis as data controller.

6. Aggregated Statistics

We may collect and compile statistics about the behaviour of visitors to the Site and users of the App. We may release this information in the aggregate, display it publicly, or provide it to others, for example by publishing a report on usage trends. Aggregated Statistics never include personally identifying information.

8. Data Retention and Deletion

We keep store and customer data only for as long as the App is installed and as needed to provide its features, plus any period required by law.

When a merchant uninstalls the App, we delete or de-identify the merchant's store data within [INSERT PERIOD, for example, 30 to 90 days], unless a longer period is required by law.

We comply with Shopify's mandatory data webhooks: customers/data_request (we return the stored data for a specified customer), customers/redact (we delete a specified customer's data), and shop/redact (we delete the shop's data after uninstall).

Data submitted through the Site is kept for as long as needed to respond to your inquiry and for our legitimate business records.

10. International Data Transfers

We may process and store information in countries other than your own, including [INSERT COUNTRIES OR REGIONS]. Where required, we put appropriate safeguards in place for international transfers, such as standard contractual clauses.

12. Your Rights

Depending on your location, you may have the right to access, correct, delete, or restrict the use of your personal information, to object to certain processing, to data portability, and to withdraw consent. To exercise these rights for data we control, contact us using Section 16.

If your request concerns data held by a merchant's store (for example, a shopper's account with a store using the App), please contact that merchant directly, as they control that data. We will assist the merchant as their processor.

California residents. You may request disclosure of the categories and specific pieces of personal information we collect, request deletion, and are entitled not to receive discriminatory treatment for exercising these rights. We do not sell personal information.

14. Affiliate Disclosure

The Site uses affiliate links and may earn a commission from certain links. This does not affect your purchases or the price you may pay.

16. Changes to This Policy

Although most changes are likely to be minor, we may update this Privacy Policy from time to time at our sole discretion. We will post the updated version on this page and revise the "Last updated" date, and we encourage you to check this page regularly. Significant changes may be communicated through the App or by email. Your continued use of the App or Site after an update means you accept the revised policy.