1. Roles and instructions
For personal data contained in a merchant's Shopify orders, the merchant acts as controller or business, and Ecommerce Storez acts as processor or service provider. We process that data only to operate, secure, support, and maintain MadeOrder, according to the merchant's use of the app and Shopify's platform instructions.
2. Processing details
Processing covers order synchronization, display of line-item customizations, production stages and deadlines, internal notes, printing, retention cleanup, support, security, and privacy request handling. Data subjects are customers and other individuals whose information appears in Shopify order or customization data.
3. Confidentiality and security
Access is restricted to authorized systems and personnel. MadeOrder uses Shopify authentication, HTTPS, application-level encryption for sensitive stored fields, encrypted backups, data minimization, retention controls, and authenticated Shopify webhook processing.
4. Subprocessors
The merchant authorizes Shopify and the app operator's infrastructure hosting provider as subprocessors needed to deliver the service. We remain responsible for directing subprocessors to protect data used for MadeOrder.
5. Assistance and requests
MadeOrder supports Shopify's customer data-request, customer-redaction, and shop-redaction processes. We will provide reasonable assistance with data subject requests, security questions, and deletion requests relating to data processed by MadeOrder.
6. Return and deletion
Merchants can export app data while installed. Completed records are deleted according to the merchant's retention setting. Shop data is deleted following uninstall and Shopify's shop-redaction process, except where law requires limited retention.
7. Security incidents
If we confirm unauthorized access to personal data processed through MadeOrder, we will notify affected merchants without undue delay and provide information reasonably available to support their response.
8. Contact
Data-processing questions can be sent to easterstracy@gmail.com.