Last Updated: May 1st, 2025
Introduction
Yassine Malti (“we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Shopify application (“Application”).
Please read this Privacy Policy carefully. By installing, accessing, or using our Application, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with our policies and practices, please do not use our Application.
Information We Collect
Information Provided by Shopify
When you install our Application, Shopify provides us with certain information necessary to provide our services. This information includes:
- Your Shopify store URL/domain
- Access credentials (API tokens) to perform necessary operations
- Merchant email address
- Store name and basic store information
- Merchant account information required for billing
Information You Provide to Us
We may collect information that you voluntarily provide when using our Application, including:
- Account information when you create an account
- Configuration settings for the Application
- Communications with us via email, chat, or other methods
- Survey responses, feedback, or testimonials you provide
- Billing and payment information
Information We Collect Automatically
When you use our Application, we may automatically collect certain information, including:
- Usage information such as features used, actions taken, and timestamps
- Performance data about how our Application functions with your store
- Log data including IP addresses, browser type, pages viewed, and time spent
- Device information including device type, operating system, and browser
- Cookies and similar tracking technologies
Store Data
To provide our core functionality, we process:
- Store information and settings
- Product information (titles, descriptions, collections, tags, etc.)
- Order information (as required by the Application’s functionality)
- Customer information (as required by the Application’s functionality)
- Content and data that you create or modify through the Application
How We Use Your Information
We use the information we collect for the following purposes:
Provide and Maintain the Application
- Deliver our core services and functionality
- Process and fulfill your requests within the Application
- Authenticate your access and maintain your account
- Monitor and improve Application performance and features
Business Operations
- Process payments and maintain billing records
- Communicate with you about your account or the Application
- Provide customer support and respond to inquiries
- Send important notices and updates about the Application
Improvement and Analysis
- Understand how users interact with our Application
- Identify trends and usage patterns
- Develop new features and improve existing functionality
- Test and troubleshoot problems within the Application
Marketing and Promotions
- Send promotional communications about new features or offerings
- Provide personalized content and recommendations
- Conduct surveys and collect feedback
- Measure the effectiveness of our marketing efforts
Legal Obligations
- Comply with applicable laws and regulations
- Enforce our Terms of Service
- Protect our legal rights, privacy, safety, or property
- Prevent, detect, and investigate potential illegal activities
Legal Basis for Processing (For EEA, UK, and Similar Jurisdictions)
If you are located in the European Economic Area (EEA), United Kingdom, or similar jurisdictions, we rely on the following legal bases to process your personal information:
- Performance of Contract: Processing necessary to provide the services you request.
- Legitimate Interests: Processing that serves our legitimate business interests, such as improving our Application, marketing our services, and preventing fraud.
- Legal Obligation: Processing necessary to comply with applicable laws.
- Consent: Processing based on your specific consent, such as for marketing communications.
You have the right to withdraw your consent at any time, where we rely on consent to process your information.
Data Retention
We retain your information for as long as necessary to provide the Application and fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. The criteria used to determine our retention periods include:
- The length of time we have an ongoing relationship with you
- Whether there is a legal obligation to which we are subject
- Whether retention is advisable in light of our legal position
When we no longer need to use your information, we will either securely delete it or anonymize it so that it can no longer be associated with you.
Data Sharing and Disclosure
We may share your information in the following circumstances:
Service Providers
We may share your information with third-party service providers who perform services on our behalf, such as:
- Cloud hosting and data storage providers
- Payment processors
- Customer support services
- Analytics providers
- Marketing and email service providers
These service providers are contractually obligated to use your information only to provide services to us and in accordance with this Privacy Policy.
Business Transfers
If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of our assets, your information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our Application of any change in ownership or uses of your information.
Legal Requirements
We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency). We may also disclose your information to:
- Enforce our Terms of Service and other agreements
- Protect and defend our rights or property
- Prevent or investigate possible wrongdoing in connection with the Application
- Protect the personal safety of users of the Application or the public
With Your Consent
We may share your information with third parties when you explicitly consent to such sharing.
Aggregated or De-identified Data
We may share aggregated or de-identified information, which cannot reasonably be used to identify you, with third parties for research, marketing, analytics and other purposes.
Data Security
We implement appropriate technical and organizational security measures to protect the security of your information. However, please be aware that no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee its absolute security.
Our security measures include:
- Encryption of sensitive data in transit and at rest
- Regular security assessments and penetration testing
- Access controls and authentication requirements
- Monitoring for suspicious activities
- Employee training on security and privacy practices
- Regular updates and patches to our systems
Your Rights and Choices
Depending on your location, you may have certain rights regarding your personal information. These may include:
For All Users
- Access and Update: You can access and update certain account information through your Application settings or by contacting us.
- Marketing Communications: You can opt out of receiving marketing communications from us by following the unsubscribe instructions included in those communications.
- Cookies: You can set your browser to refuse all or some browser cookies, or to alert you when cookies are being sent. However, some parts of the Application may become inaccessible or not function properly if you disable cookies.
For EEA, UK, and Similar Jurisdictions
If you are located in the EEA, UK, or similar jurisdictions, you may have these additional rights:
- Access: Request access to your personal information.
- Correction: Request correction of inaccurate personal information.
- Erasure: Request deletion of your personal information under certain circumstances.
- Restriction: Request restriction of processing of your personal information.
- Data Portability: Request transfer of your personal information to you or a third party.
- Objection: Object to processing of your personal information.
- Automated Decision-Making: Not be subject to automated decision-making with significant effects.
To exercise any of these rights, please contact us using the contact information provided below.
Children’s Privacy
Our Application is not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and you believe your child has provided us with personal information, please contact us. If we discover that a child under 16 has provided us with personal information, we will delete such information from our servers.
International Data Transfers
We are based in Canada, and your information may be processed and stored in Canada and other countries where our service providers maintain facilities. These countries may have data protection laws that are different from the laws of your country.
If we transfer your information outside of the EEA, UK, or similar jurisdictions, we will implement appropriate safeguards to ensure that your information remains protected in accordance with this Privacy Policy. These safeguards may include:
- EU-approved standard contractual clauses
- Binding corporate rules for transfers among our affiliates
- Other legally approved mechanisms
Shopify as a Data Processor
When you install our Application on your Shopify store, Shopify acts as a data processor for certain information. For more information about Shopify’s data processing activities, please review Shopify’s Privacy Policy.
Third-Party Services
Our Application may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party websites or services that you visit from our Application.
Changes to This Privacy Policy
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the “Last Updated” date at the top. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.
If we make material changes to this Privacy Policy, we will notify you either through the email address specified in your account or by a prominent notice on our Application.
California Privacy Rights
If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with specific rights regarding your personal information. This section describes your CCPA rights and explains how to exercise those rights.
Rights Under CCPA
- Right to Know: You have the right to request that we disclose certain information about our collection, use, disclosure, and sale of your personal information over the past 12 months.
- Right to Delete: You have the right to request that we delete personal information that we have collected from you, subject to certain exceptions.
- Right to Opt-Out: You have the right to opt-out of the sale of your personal information.
- Right to Non-Discrimination: You have the right not to be discriminated against for exercising any of your CCPA rights.
To exercise your rights under the CCPA, please contact us using the contact information provided below.
GDPR Compliance
For users in the European Economic Area (EEA), we comply with the General Data Protection Regulation (GDPR). In addition to the rights outlined above, you may also have the right to lodge a complaint with a supervisory authority if you believe our processing of your personal information violates applicable law.
Data Protection Officer
We have appointed a Data Protection Officer who is responsible for overseeing questions regarding this Privacy Policy. If you have any questions about this Privacy Policy, including any requests to exercise your legal rights, please contact our Data Protection Officer at:
Yassine Malti
(343) 262-2990
hi@yassinemalti.com
yassinemalti.com
Ottawa, Canada
Contact Us
If you have any questions or concerns about our Privacy Policy or our data practices, please contact us at:
Yassine Malti
(343) 262-2990
hi@yassinemalti.com
yassinemalti.com
Ottawa, Canada
We will respond to your inquiry as soon as reasonably possible, typically within 30 days.
By using this Application, you acknowledge that you have read and understood this Privacy Policy.