Privacy Policy
This policy covers this website, ApparelComplianceHub (“the website”), and the Shopify app Textile Compliance for Shopify (“the app”). It explains what data is collected, why, where it is kept and how it is deleted.
Who is responsible
The website and the app are run by Igor Kazazic, Sweden (“we”). Contact: igorkazazic1989@gmail.com.
The website
- The website has no accounts, forms, analytics or advertising cookies.
- It is hosted on Vercel, which processes technical request data such as IP address and browser type to deliver the pages and protect against abuse.
- Fonts load from Google Fonts, so your browser sends a request, including your IP address, to Google.
- If you email us, we keep your email to answer it and to handle any review you book.
The app: what it stores
When a merchant installs the app, it stores only what it needs to check the merchant’s textile product data.
| Data | Why |
|---|---|
| Store details: shop domain, store name, time zone, currency, plan and billing status | To run the app for the store and apply the plan |
| Product data from Shopify: titles, variants, SKUs, vendors, product types and descriptions | To find missing or inconsistent textile data |
| Data the merchant enters or imports: fiber content, origin, manufacturer, RN, care status, supplier details, notes, links and evidence files | To keep the merchant’s compliance records and reports |
| Order data from Shopify: order reference, dates, quantities, refunds and returns, and the destination state and country | To summarise units shipped to California |
| Staff identifier: the Shopify staff ID of the person who made a change | For the change history (who, when and why) |
| Shopify access tokens and technical logs | To connect to the store securely and keep the service running |
The app does not store customer names, email addresses, phone numbers, street addresses or payment details. Order webhooks only tell the app to sync; their contents are not stored. Payments go through Shopify Billing, and we never see card details.
Legal basis
We process store and product data to provide the service the merchant installed (contract). We keep change history and billing records because the merchant needs them and for our legitimate interest in running a reliable, accountable service. For personal data in a merchant’s records, such as staff IDs, the merchant decides what is entered and we process it on their behalf.
Where data is kept
App data is stored in a PostgreSQL database and private file storage with our cloud hosting provider. Data is encrypted in transit and the hosting provider encrypts the underlying storage at rest; see our security page. Merchants can read our data processing addendum. We do not sell data or share it with anyone except the providers needed to run the service, including Shopify, our hosting provider and Vercel. A current list of providers is available on request.
How long data is kept
- While the app is installed, data is kept so the records and history stay complete. Merchants can export all their data from the app’s Settings page at any time.
- After the app is uninstalled, Shopify sends a deletion request (shop/redact) and the store’s data is deleted. If that request never arrives, the data is deleted 30 days after uninstall.
- Requests from a store’s customers (customers/data_request and customers/redact) are answered through Shopify. Because the app stores no customer personal data, there is normally nothing to return or delete.
Your rights
You can ask for access to, correction of, deletion of or a copy of your personal data, and you can object to or ask us to restrict processing. Email us and we will answer within one month. You can also complain to the Swedish Authority for Privacy Protection (IMY) or to the data protection authority where you live.
Changes
If this policy changes, the date at the top changes.