1. Data Controller
Olive Trees Agency
Olivier Verhaegen
BE0778450338
Antwerp, Belgium
Email: contact@olivetrees-agency.be
2. Data We Collect
When you install the App, we receive and store the following data through the Shopify API:
We do not collect or store: customer names, customer email addresses, billing addresses, payment details, or any other customer personally identifiable information (PII).
3. How We Use Data
- Discount rules and tiers — stored in our database to apply your configured discounts at Shopify checkout via Shopify Functions.
- Theme schedules — stored to publish themes at the date and time you configure.
- Usage statistics — aggregated from order totals to show you how your discounts are performing. Only discount amounts and order totals are stored, not customer identities.
- Shop owner email — used only to send failure notification emails for the Theme Scheduler when SMTP is configured. You can override this in the App's Settings page.
- Session / access token — stored server-side to authenticate outbound Shopify API requests. Never exposed to the browser.
4. Data Retention
All data is retained for as long as the App remains installed on your store.
When you uninstall the App, all data associated with your shop is permanently and automatically deleted from our database within seconds of the uninstall event, including:
- Discount rules, tiers, and versions
- Theme schedules
- Usage statistics
- Activity log entries
- Notification settings
- Shopify session tokens
5. Data Storage and Security
Your data is stored on a virtual private server hosted by OVH in Frankfurt, Germany (EU). The server is secured with:
- Encrypted connections (HTTPS/TLS) for all traffic
- Database accessible only within the private server network
- Access restricted to authorised personnel
6. Sub-processors
7. Data Transfers
Your store domain and associated app data are stored within the EU (Germany). Outbound emails for failure notifications are processed via SMTP2GO, which may route messages through servers outside the EU. No customer PII is included in these emails — they contain only shop domain, theme name, and error details.
8. Your Rights (GDPR)
As a merchant or data subject covered by EU/EEA law, you have the right to:
- Access — request a copy of the data we hold about your store
- Erasure — request deletion of your data (or simply uninstall the App, which triggers automatic deletion)
- Rectification — request correction of inaccurate data
- Portability — request your data in a machine-readable format
- Objection — object to certain processing
To exercise any of these rights, contact us at contact@olivetrees-agency.be. We will respond within 30 days.
9. Shopify's Role
The App operates within Shopify's platform. Shopify's own Privacy Policy governs how Shopify handles merchant and customer data on their infrastructure. We act as a data processor on your behalf for data retrieved via the Shopify Admin API, and as an independent data controller for operational data we store (usage statistics, schedules, settings).
10. Cookies
The App does not use cookies or tracking pixels on storefronts. The App is embedded in the Shopify admin and uses Shopify's session token mechanism — no third-party cookies are set.
11. Changes to This Policy
We may update this policy to reflect changes in the App's functionality or legal requirements. The "Last updated" date at the top of this page will reflect the most recent revision. Continued use of the App after changes constitutes acceptance of the updated policy.
12. Contact
For privacy-related questions or requests:
Olive Trees Agency
Olivier Verhaegen
BE0778450338
Antwerp, Belgium
contact@olivetrees-agency.be