Shopify Orders - Personally Identifiable Information | FAQs

in April 2021, Shopify updated its data retention and privacy policies surrounding your customers' Personal Identifiable Information. Read more about Shopify's policy on App permissions and personal information.

What is Personally Identifiable Information?

Shopify defines Personally Identifiable Information (PII) as information that alone or combined can uniquely identify an individual. Apps that you install from the Shopify App Store can access different types of PII when they use information about your store, customers, orders, or other business data.

What types of PII can be accessed through the app?

There are four types of PII that an app can access:

  • Your customers' personal information, which includes contact information such as name, email address, phone number, and address. Apps that deal with orders, fulfillment, or shipping also require access to location information (such as IP address and geolocation), and user agent information (such as the browser and operating system).
  • The Shopify store owner's personal information, which includes all contact information for the store owner, including name, email address, phone number, and addresses of all locations.
  • Staff personal information, which includes all contact information for staff, including name, email address, and phone number.
  • Content provider personal information, which includes information about blog authors or commenters (including email address and IP address), and user agent information (such as the browser and operating system).

How am I notified that PII will be collected?

When the ShippingEasy app is installed, you will see the information that ShippingEasy will be able to access.

ShippingEasy will be able to access personally identifiable information about your customers, including names, email addresses, phone numbers, physical locations, geolocations, IP addresses, and browser user agents.

Shopify_PII_MRK.png

Can I revoke access to PII?

Yes. You can revoke access to data by uninstalling the app. This sends a request to ShippingEasy developers (after 48 hours) to erase all of your customers’ personal information the app collected while it was installed.

ShippingEasy will email to inform you that the data will be redacted and your ShippingEasy account is not cancelled because of this action.

If you reinstall the app, we will remove your customers' information from the redaction queue.

Comments

Add a Comment

Please sign in to leave a comment.

    Tags: