Information we collect
When a merchant installs the app, and when their customers use the withdrawal form, we access the following data through the Shopify API:
| Data type | Why we collect it |
|---|---|
| Shop information | Store name, domain, and contact email — used for account setup and support |
| Order details | Order number, line items, totals, fulfillment status — used to verify withdrawal eligibility |
| Customer information | Name, email, shipping address, country and language — used to identify the requester, show the request to the merchant, and send emails |
| Product information | Used to display item details within a withdrawal request |
| Location data | Fulfillment locations — used to put refunded items back into stock at the right location |
| Withdrawal details | The items selected, and the reason the customer gives (if any) — used so the merchant can review the request |
| Merchant notes and tags | Notes and order tags that the merchant's staff add to a request |
| Email settings | The sender email, reply-to address and domain a merchant sets up — used to send emails from the merchant's own address |
| Form activity | When the withdrawal form is viewed, opened and submitted, with a random ID for each visit — used to show the merchant the history of a request |
| Support and feature requests | Name, email and message when a merchant contacts us or sends a feature request |
| Plan details | The merchant's plan and subscription from Shopify — used to show the right plan |
How we use this information
- To let merchants receive, review, approve or reject, and process withdrawal requests.
- To create returns, issue refunds, hold or release fulfillment, cancel orders, and add order tags, when the merchant chooses to.
- To send emails about requests through Brevo, such as confirmations and decisions.
- To record when the withdrawal form is viewed, opened, and submitted, so the merchant can see the request history.
- To provide support, answer feature requests, and keep the app secure and reliable.
Data retention
- Withdrawal requests are kept while the app is installed, until the merchant deletes them.
- When a merchant uninstalls the app, we delete their login sessions right away. We delete all other shop data when Shopify sends its deletion request, 48 hours after uninstall.
- Copies of emails and alerts may stay with Brevo and Slack for the time those services keep them.
GDPR & Shopify compliance
In line with Shopify's mandatory compliance requirements, we handle these requests:
Shopify sends us the request, and we send the merchant the data we hold within 30 days.
We remove the customer's name, email, address, reason and notes from their withdrawal requests automatically.
We delete all of the shop's data when Shopify sends the request, 48 hours after uninstall.
To exercise any of these rights directly, contact support@withdrawaleasy.com.
Who is responsible for your data
The merchant is the data controller. Meet Ecom Solution is the data processor, acting on the merchant's instructions.
Meet Ecom Solution is the controller.
Contact
Meet Ecom Solution[full legal address]
support@withdrawaleasy.com
Data Processing Addendum (for merchants)
This addendum applies when a merchant installs Meet: EU withdrawal and Meet Ecom Solution ("we") processes personal data of the merchant's customers on the merchant's behalf. By installing the app, the merchant agrees to this addendum.
Roles
The merchant is the data controller. We are the data processor. We process this data only to provide the app, following the merchant's instructions.
What we process
Customer name, email, shipping address, country, language, order details, the withdrawal reason, and notes the merchant adds, as described in this policy.
Our commitments
- We process the data only to provide the app and for no other purpose.
- We keep the data confidential and limit staff access to people who need it.
- We use encryption in transit and at rest, and access controls.
- We use the sub-processors listed in this policy (Shopify, Fly.io, MongoDB Atlas, Brevo, Slack) under data protection terms. We tell merchants about changes to this list by updating this page.
- We help the merchant answer requests from customers to access, correct, or delete their data.
- We tell the merchant without undue delay, and within 72 hours, if we find a personal data breach that affects their data.
- When the merchant uninstalls the app, we delete the shop's data when Shopify sends its deletion request, 48 hours after uninstall.
- On request, we give the merchant the information needed to show we follow this addendum.
Contact: support@withdrawaleasy.com
Data security
We use industry-standard technical and organizational measures — including encrypted connections (HTTPS/TLS) and access controls — to protect the data we process.
Only team members who need access to customer data can open it, using accounts with strong passwords and two-step sign-in. If we find a personal data breach, we tell affected merchants without undue delay and within 72 hours.
Your rights
Depending on your location, you may have the right to access, correct, export, or delete your personal data.
To make a request, contact the merchant's store directly, or reach us at support@withdrawaleasy.com.
Changes to this policy
We may update this policy from time to time. Changes will appear on this page with a new "Last updated" date.
Questions about your data?
Email us and we'll help with access, correction, export or deletion requests.