CheckoutControl
Privacy Policy
This policy explains how CheckoutControl processes merchant, app-user, support and limited checkout data.
Effective date: 17 July 202601Who is responsible
CheckoutControl is provided by Péter Kiss, trading as 8DIGITS Digital Marketing, Calle Las Huertas 15, Frigiliana, 27988 Málaga, Spain. The privacy contact is support@8digits.es. For buyer information processed through a merchant’s store, the merchant is generally the controller and 8DIGITS acts as its service provider or processor.
02Information we process
The App processes Shopify shop identity, installation and authentication data, app-user information supplied by Shopify, saved rules, settings, Function registration data and billing entitlement status.
Shopify Functions evaluate only the fields needed for configured rules. Depending on the rule, this can include cart quantities and weight, product identifiers and tags, shipping destination fields, market and customer tags. The App does not receive payment-card details.
03How information is used
We use information to authenticate the store, provide and synchronise rules, operate billing, diagnose errors, secure the service, respond to support requests and comply with legal obligations. We do not sell personal information or use it for independent advertising profiles.
04Service providers
Shopify supplies the commerce platform and app installation flow. Railway hosts the production service and database. Operational providers may process limited connection, infrastructure or communication data under their own agreements.
05International transfers
The App is operated from Spain. Service providers may process information in other countries. Where required, transfers rely on contractual or other safeguards recognised by applicable data-protection law.
06Retention and deletion
Active installation data and sessions are kept while the App is installed. The current uninstall workflow deletes active shop, rule, settings, COD-fee and session records. Application logs are retained for 90 days, database backups follow the hosting retention cycle, and support records are retained for 365 days unless law or a dispute requires longer retention.
07Your rights
Depending on your location, you may have rights to access, correct, delete, restrict, object to or receive a portable copy of personal information. Buyer requests should normally be directed to the relevant merchant. Other requests can be sent to the privacy contact above.
08Security
We use access controls, secure transport, scoped Shopify permissions, server-side secrets, validation and operational monitoring designed to protect information. No system can guarantee absolute security.
09Changes
We may update this policy as the App or applicable requirements change. The effective date on this page identifies the current version.
10Contact
Privacy questions and requests can be sent to support@8digits.es. Provider: Péter Kiss, trading as 8DIGITS Digital Marketing, Calle Las Huertas 15, Frigiliana, 27988 Málaga, Spain.
If a translation or summary differs from the applicable service terms, the legal text published for the service prevails.