Privacy Policy

Last Updated: March 14, 2025

1. Introduction

Red Whale Limited ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use any of our Shopify applications ("Apps"). This policy applies to all Apps developed and maintained by Red Whale Limited.

Please read this Privacy Policy carefully. By installing or using our Apps, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

We collect information that is necessary to provide our services and improve your experience with our Apps:

• Store Information: When you install our Apps, we collect basic store information such as shop name, domain, email address, and API access token.
• Customer Data: Depending on the functionality of the specific App, we may collect customer information such as email addresses, phone numbers, and order details as necessary to provide our services.
• Usage Data: We collect information about how you interact with our Apps, including features used, actions taken, and performance metrics.
• Technical Data: We may collect information about the devices and systems you use to access our Apps, such as IP address, browser type, and operating system.

3. How We Use Your Information

We use the collected information for various purposes, including but not limited to:

• Providing, maintaining, and improving our Apps
• Processing transactions and fulfilling requests
• Sending administrative information, including updates and security alerts
• Responding to customer service inquiries and support requests
• Analyzing usage patterns to enhance user experience
• Detecting, preventing, and addressing technical issues

4. Data Retention and Deletion

We retain personal data only for as long as necessary to provide the services you have requested and for legitimate business purposes such as maintaining the performance of our Apps, making data-driven business decisions, and complying with legal obligations.

In accordance with Shopify's mandatory compliance requirements, we respond to the following data requests:

• Data Access Requests (customers/data_request): When a customer requests access to their personal data, we will provide all relevant data to the store owner within 30 days of receiving the request.
• Customer Data Deletion (customers/redact): When a store owner requests deletion of customer data, we will remove all personal data associated with the specified customer within 30 days of receiving the request.
• Shop Data Deletion (shop/redact): When a store uninstalls our App, we will delete all store data within 30 days, except where retention is required by law.

5. Data Sharing and Disclosure

We do not sell your personal information. We may share information in the following circumstances:

• Service Providers: We may share information with third-party vendors and service providers that perform services on our behalf.
• Business Transfers: If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.
• Legal Requirements: We may disclose information if required to do so by law or in response to valid requests by public authorities.
• With Your Consent: We may share information with third parties when we have your consent to do so.

6. Data Security

We implement appropriate technical and organizational measures to protect the security of your personal information. However, please understand that no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

7. Your Rights

Depending on your location, you may have certain rights regarding your personal information:

• The right to access personal information we hold about you
• The right to request correction of inaccurate information
• The right to request deletion of your information
• The right to restrict or object to processing
• The right to data portability
• The right to withdraw consent

To exercise these rights, please contact us using the information provided in the "Contact Us" section below.

8. International Data Transfers

Your information may be transferred to and processed in countries other than the country in which you reside. These countries may have data protection laws that are different from the laws of your country. We take appropriate measures to ensure that your personal information receives an adequate level of protection in the countries in which we process it.

9. Children's Privacy

Our Apps are not intended for use by children under the age of 16. We do not knowingly collect personally identifiable information from children under 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact us so that we can take appropriate action.

10. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date at the top. You are advised to review this Privacy Policy periodically for any changes.

11. Compliance with Laws

We are committed to complying with applicable data protection laws, including but not limited to the General Data Protection Regulation (GDPR), California Privacy Rights Act (CPRA), and other relevant laws and regulations.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

Red Whale Limited
Email: info@pexo.co.nz