Privacy policy

• For merchant account data (the store owner and staff who install and use Spendable), we are the controller.
• For the merchant's customers' data (gift card buyers, recipients, and customers who receive store credit), the merchant is the controller and we act as their processor. We only process that data to provide Spendable to the merchant, under the merchant's instructions and the Shopify API License and Terms of Use and our Terms of Service.

If you bought or received a gift card from a store that uses Spendable and want to exercise your privacy rights, contact that store first. You can also write to us at privacy@spendablecards.com and we will pass your request to the store and help them answer it.

From merchants

When a merchant installs Spendable, Shopify gives us access to the store's data that the app needs. We collect:

• Store information: shop domain, store name, contact email, currency, languages, plan, timezone, logo and theme colours used to brand the claim page.
• Staff details for the person who installs the app or contacts support: name and email address.
• Billing status for the Spendable plan (charged through Shopify; we never see card details).
• Settings the merchant chooses, including connected integrations such as Klaviyo.

From people who sign up for early access

When you request early access on spendablecards.com, we collect your name, email address, your store's web address, the features you're interested in, the app you use today, and the country your request came from. We do not keep your IP address. We use this only to contact you about Spendable.

From the merchant's customers

To issue and deliver gift cards and store credit, we process:

• Buyer details: name, email address, Shopify customer ID, order number and order amount, and the language used at checkout.
• Recipient details entered by the buyer: recipient name, email address, personal message, chosen design and scheduled send date.
• Gift card details: the claim code, the Shopify gift card code (stored encrypted), amount, currency, balance and expiry.
• Store credit details: Shopify customer ID, amount, currency, expiry and the reason the merchant recorded.
• Delivery events: when an email was sent, delivered, opened, bounced or a card was claimed. Opens are measured with a tracking pixel in the gift card email.
• Technical data on the claim and balance pages (spendable.gift and the store's claim page): IP address, browser type and the time of the request. We use this to block code-guessing and fraud.

We do not collect payment card details. Payments for gift cards happen in Shopify's checkout.

We do not sell personal information. We do not use customers' data for our own marketing, and we do not build advertising profiles.

We use these service providers (subprocessors) to run Spendable:

We may also disclose information if the law requires it, or to a buyer of our business if Spendable is sold, under the same protections.

Some providers process data outside the UK and EEA. Where they do, we rely on the UK International Data Transfer Addendum, the EU Standard Contractual Clauses, or the EU-US Data Privacy Framework, as applicable.

• While the app is installed: card, delivery and credit records are kept so the merchant can see history, resend cards and run the liability report.
• When a customer asks to be erased: when the merchant (through Shopify) asks us to redact a customer, we delete or irreversibly anonymise that customer's name, email, message and IP data within 30 days. We keep the card amount, currency and Shopify IDs so the merchant's financial records stay accurate.
• When a merchant uninstalls: Shopify sends us a request to delete the shop's data 48 hours after uninstall. We then delete all personal data for that shop. Gift cards themselves live in Shopify and keep working. So that people holding a card can still reach it, we keep only the claim code, the store's web address and the encrypted gift card code for up to 12 months, with no names, emails or messages, then delete them.
• Technical logs (IP addresses on the claim and balance pages): 30 days.
• Early access sign-ups: until you install Spendable or ask us to delete them, and no longer than 12 months.
• Billing records: as long as tax law requires, usually 6 to 7 years.

Depending on where you live (for example under the UK or EU GDPR, or California's CCPA/CPRA), you may have the right to access, correct, delete or export your personal information, to object to or restrict processing, and to complain to your data protection authority. Customers of a store should contact the store first, as the store controls their data. Merchants can contact us directly.

We answer Shopify's privacy requests automatically:

• Customer data request: we send the merchant the data we hold about that customer so they can pass it on.
• Customer redaction: as described above.
• Shop redaction: as described above.

Gift card codes are encrypted at rest with a separate key for each store. All traffic uses TLS. Access to production systems is limited to people who need it and protected with two-factor authentication. The claim and balance pages are rate-limited and lock out repeated wrong guesses. If we become aware of a breach affecting personal data, we will tell affected merchants without undue delay and within 72 hours where the law requires it.

Spendable is a tool for businesses. It is not directed at children, and we do not knowingly collect children's data.

We will post changes here and update the date at the top. If a change is significant, we will tell merchants in the app or by email before it takes effect.

More Checkouts Ltd (company number 15632212) 56 Julian Avenue, South Shields, NE33 2EW, United Kingdom Email: privacy@spendablecards.com