Cookify helps Shopify merchants display a cookie consent banner, manage consent-related settings, and provide visitors with clearer information about cookies and tracking technologies used on the merchant’s store.
This Privacy Policy applies to information processed through the App. It does not replace the merchant’s own privacy policy or cookie policy. Each merchant is responsible for ensuring that their store’s privacy, cookie, and consent practices comply with applicable laws.
1. Information we collect
Merchant and store information
We may collect information provided by Shopify or by the merchant, including:
- Store name
- Shopify store domain
- Merchant email address
- Store locale, country, or currency settings
- App installation status
- App configuration settings
- Subscription or billing status, where applicable
App configuration data
We may collect information related to how the merchant configures the App, including:
- Cookie banner text
- Consent banner design settings
- Selected consent options
- Display preferences
- Language settings
- Region-specific settings
- Activation or deactivation status
Technical information
We may collect limited technical information necessary to provide, secure, and improve the App, including:
- IP address
- Browser type
- Device type
- Operating system
- Log data
- Error reports
- Usage events related to App performance
Store visitor information
The App is designed to avoid collecting unnecessary personal information from store visitors.
Depending on the merchant’s configuration and the technical implementation of the App, we may process limited information related to visitor consent choices, such as:
- Consent status
- Consent category preferences
- Timestamp of consent
- Anonymous or pseudonymous consent identifier
- Region or country-level information, where needed for compliance settings
Where possible, consent information is stored locally in the visitor’s browser. If consent records are stored on our systems, we store only the information necessary to provide the App’s functionality.
We do not intentionally collect sensitive personal information through the App.
2. How we use information
We use the information described above to:
- Provide and operate the App
- Display and manage cookie consent banners
- Save merchant preferences and App settings
- Help merchants manage consent-related workflows
- Maintain App security and prevent abuse
- Troubleshoot technical issues
- Improve App performance and reliability
- Communicate with merchants about support, updates, or service-related matters
- Manage billing, subscriptions, or account status, where applicable
- Comply with legal obligations and Shopify requirements
We do not use merchant or store visitor data for unrelated advertising purposes.
3. Legal bases for processing
Where the General Data Protection Regulation, UK GDPR, or similar laws apply, we rely on one or more of the following legal bases:
- Performance of a contract: to provide the App and related services to merchants.
- Legitimate interests: to secure, maintain, improve, and troubleshoot the App.
- Consent: where required for certain processing activities.
- Legal obligation: where processing is necessary to comply with applicable laws or regulatory requirements.
GDPR Article 13 requires privacy notices to explain items such as the controller’s identity, purposes of processing, legal bases, recipients, retention periods, and data rights.
4. Our role under privacy laws
For merchant store data and App configuration data, we generally act as a service provider or processor on behalf of the merchant.
For information we collect directly for our own business purposes, such as support communications, billing administration, security logs, or analytics related to the App’s performance, we may act as an independent controller.
Merchants remain responsible for determining how cookies, tracking technologies, and consent tools are used on their own stores.
5. Sharing of information
We do not sell personal information.
We may share information only where necessary with:
- Shopify, as required to provide the App through the Shopify platform
- Hosting and infrastructure providers
- Database and storage providers
- Payment and billing providers, where applicable
- Analytics or error-monitoring providers used to maintain App reliability
- Professional advisors, such as legal or accounting providers
- Authorities, if required by law
We require service providers to process information only as necessary to provide services to us and to protect it appropriately.
6. Shopify data and protected customer data
The App is designed to request only the Shopify permissions needed to provide its functionality.
We do not request access to protected customer data unless it is strictly necessary for the App’s features. Shopify defines protected customer data as data that directly relates to a customer or prospective customer, and certain fields such as name, address, email, and phone require specific access approval.
If the App’s permissions change in the future, we will update this Privacy Policy accordingly.
7. Cookies and tracking technologies
The App may use cookies, local storage, or similar technologies to remember visitor consent choices and ensure the cookie banner works correctly.
These technologies may be used to:
- Store consent preferences
- Prevent the banner from showing repeatedly after a choice has been made
- Apply consent choices across pages
- Support region-specific consent settings
- Maintain App functionality and security
Merchants are responsible for disclosing the cookies and tracking technologies used on their own store, including those used by third-party apps, analytics tools, advertising platforms, and Shopify itself.
Shopify provides a Customer Privacy API that apps and merchants can use to check consent status and respond to customer privacy choices.
8. Data retention
We retain information only for as long as necessary to provide the App, comply with legal obligations, resolve disputes, enforce agreements, and maintain security.
When a merchant uninstalls the App, we will delete or anonymize personal information associated with the store within a reasonable period, unless we are required to retain it for legal, billing, security, or legitimate business purposes.
Consent records, where stored, are retained only for as long as reasonably necessary to provide consent management functionality and support compliance needs.
9. Data security
We use reasonable technical and organizational measures to protect information against unauthorized access, loss, misuse, alteration, or disclosure.
However, no method of transmission or storage is completely secure. We cannot guarantee absolute security, but we work to protect information using appropriate safeguards.
10. International data transfers
We may process and store information in countries other than the country where the merchant or store visitor is located.
Where required by applicable law, we use appropriate safeguards for international data transfers, such as contractual protections or other legally recognized mechanisms.
11. Merchant responsibilities
Merchants using the App are responsible for:
- Ensuring their store complies with applicable privacy and cookie laws
- Providing accurate privacy and cookie notices to visitors
- Configuring the App correctly for their business and target markets
- Disclosing third-party tools, cookies, pixels, analytics, and advertising technologies used on their store
- Honoring visitor privacy choices where required by law
- Seeking legal advice where necessary
The App is a technical tool and does not guarantee legal compliance by itself.
12. Rights of individuals
Depending on applicable law, merchants, customers, and store visitors may have rights regarding their personal information, including the right to:
- Access personal information
- Correct inaccurate information
- Request deletion of information
- Restrict or object to processing
- Withdraw consent
- Request data portability
- Opt out of certain data sharing or sale, where applicable
- Lodge a complaint with a data protection authority
Requests related to a merchant’s store visitors should generally be directed to the merchant that operates the store.
Requests related to information we process directly can be sent to us using the contact details below.
13. Children’s privacy
The App is not intended for use by children, and we do not knowingly collect personal information from children.
14. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in the App, legal requirements, or our data practices.
When we make material changes, we will update the “Last updated” date above and may notify merchants through the App, email, or another appropriate method.
15. Contact us
For questions about this Privacy Policy or our privacy practices, contact us at:
Company name: ShopOpsy
Email: hi@shopopsy.com
Website: https://www.shopopsy.com/