Privacy and Data Processing Policy
What we process and why
Merchant data: shop domain, shop contact email, app settings, and plan. Purpose: operating the app and billing through Shopify.
Shopper data (submitted through the withdrawal form): name, email address, and order reference. Purpose: recording the Article 11a withdrawal declaration, matching it to an order in the merchant's store, notifying the merchant, and sending the shopper a timestamped acknowledgement email.
We process nothing else about shoppers. We do not sell data, use it for advertising, or build profiles. This website sets no cookies and uses no analytics.
Legal basis and roles
The merchant is the data controller for shopper data; TuxPaw is a processor acting on the merchant's instructions (see the Data Processing Addendum in our Terms). Processing is necessary to handle the withdrawal declaration the shopper initiates.
Retention and deletion
Withdrawal records are retained for the merchant's audit purposes while the app is installed. We honor all Shopify privacy webhooks: customer data requests, customer redaction (personal fields are erased; anonymised audit counts remain), and full shop redaction after uninstall.
Security
Data is encrypted in transit (TLS) and at rest. Access is limited to TuxPaw's operator, and access to personal data is logged. Backups are encrypted.
Subprocessors
Shopify (platform), Railway (application and database hosting, USA), and Resend (transactional email, USA). Each is bound by a data processing agreement incorporating EU Standard Contractual Clauses where applicable.
Security incidents
If we become aware of a personal data breach affecting merchant or shopper data, we will notify affected merchants without undue delay with the information needed for their own notification duties.
Contact
support@tuxpawlabs.com · TUXPAW LLC, Florida, USA