Privacy policy

Who we are

FluXence is a Shopify app published by PREDIWORKS, 17 Rue Coysevox, 75018 Paris. For any question about this policy or your data, write to [email protected].

Our role

The merchant who installs FluXence decides to send reorder reminders to their own customers: the merchant is the data controller, and FluXence acts as a data processor on the merchant's behalf. For the merchant's own account data, FluXence is the data controller.

Data about merchants

When a store installs the app, we receive from Shopify and store: the store's domain and name, its contact email address, language, time zone and currency, its active pricing plan, and an access token that lets the app read the data listed below. We also store the settings the merchant chooses in the app.

Data about the store's customers

To compute when a product is likely to run out and to send the reminder, we read from Shopify and store: the customer's first name, email address, language and email marketing consent; and for each order of the last twelve months and each new order: its date, total amount, and the products, variants and quantities it contains.

We also record the history of each reminder: when it was scheduled and sent, whether its link was clicked, and whether an order followed. We do not collect postal addresses, phone numbers or payment information.

How the data is used

The data is used only to schedule and send reorder reminders on behalf of the merchant, to measure their results for the merchant, and to apply the limits of the merchant's plan. Reminders are sent only to customers who have consented to email marketing in Shopify and who have not unsubscribed. We do not sell data, we do not use it for advertising, and we do not use it to train models.

Links and cookies

The reorder button in a reminder passes through FluXence so that the click can be counted, then redirects to the store's cart. FluXence does not place cookies on the customer's device and does not track opens with hidden images.

Where the data is hosted and who can access it

The data is hosted in the European Union. It is processed by the following service providers, each for its own function only: Shopify (source of the data and billing), MongoDB Atlas (database hosting), our email delivery provider (sending the reminders), our server host and Cloudflare (network protection). Access is limited to the people who operate the app.

How long the data is kept

Data is kept for as long as the app is installed on the store. When the app is uninstalled, the store's data, its customers' data and its access token are deleted. Shopify's erasure requests for a customer or a store are applied automatically. Technical traces of the notifications received from Shopify are deleted after 30 days.

Your rights

Customers can unsubscribe from reminders with the link at the bottom of every email. Under the GDPR, you can ask to access, correct or erase your data, or object to its use. Customers of a store should contact that store, which will forward the request to us through Shopify; merchants can write to [email protected]. You may also lodge a complaint with your data protection authority.

Changes

If this policy changes, the new version is published on this page with its date.