create2STAY Privacy Policy

When you install the App, we are automatically able to access certain types of information from your Shopify account:

• Read and modify store content such as articles, blogs, comments, pages, and redirects
• Read and modify products, variants, collections, and product listings
• Read and modify inventory levels, and read your store locations
• Read and modify customer details
• Read and modify orders and transactions, including all historic orders
• Read and modify fulfillments and fulfillment orders (assigned, merchant-managed, and third-party)
• Read and modify returns
• Read and modify discounts and gift cards
• Read and modify sales channel publications
• Read store locales, and read and modify translations
• Read and modify theme templates and theme assets
• Read and modify script tags in your store's theme template files

Additionally, we collect the following types of personal information from you and/or your customers once you have installed the App. Information about you and others who may access the App on behalf of your store, such as your name, address, email address, phone number, and billing information:

• Your name
• Your address
• Your e-mail address
• Your phone number

Information about your customers who use the buy-back and trade-in features of the App, such as their name, email address, phone number, postal address, payout details, and the order, product, and trade-in history needed to value and process a buy-back. Information about individuals who visit your store, such as their IP address, web browser details, time zone, and information about the cookies installed on the particular device. We collect personal information directly from the relevant individual, through your Shopify account, or using the following technologies: "Cookies" are data files that are placed on your device or computer and often include an anonymous unique identifier. For more information about cookies, and how to disable cookies, visit http://www.allaboutcookies.org. "Log files" track actions occurring on the Site, and collect data including your IP address, browser type, Internet service provider, referring/exit pages, and date/time stamps. "Web beacons", "tags", and "pixels" are electronic files used to record information about how you browse the Site.

We use the personal information we collect from you and your customers in order to provide the Service and to operate the App. This includes valuing and processing buy-back and trade-in requests, keeping products, inventory, prices, orders, vouchers, and fulfillments synchronised between your Shopify store and the create2STAY platform, and providing support. Additionally, we use this personal information to: communicate with you; optimize or improve the App; and provide you with information or advertising relating to our products or services.

We share your Personal Information with third parties who help us provide the Service to you. We use Shopify to power your online store — you can read more about how Shopify uses your Personal Information here: https://www.shopify.com/legal/privacy. We also rely on the following categories of service providers, who process personal information on our behalf and only on our instructions: cloud hosting and infrastructure providers (including Microsoft Azure) that run the App and store its data; the create2STAY platform, which performs the buy-back, valuation, resale, and payout processing that the App connects your store to; and, where relevant to a buy-back, logistics and payout providers used to collect items from and pay out to your customers. Finally, we may also share your Personal Information to comply with applicable laws and regulations, to respond to a subpoena, search warrant or other lawful requests for information we receive, or to otherwise protect our rights. We do not sell your Personal Information or that of your customers.

As described above, we may use your Personal Information to provide you with targeted advertisements or marketing communications we believe may be of interest to you. For more information about how targeted advertising works, you can visit the Network Advertising Initiative's ("NAI") educational page at http://www.networkadvertising.org/understanding-online-advertising/how-does-it-work. You can opt out of targeted advertising by Facebook.com and Google.com through the settings those services provide. Additionally, you can opt out of some of these services by visiting the Digital Advertising Alliance's opt-out portal at http://optout.aboutads.info/.

If you are a European resident, you have the right to access the personal information we hold about you and to ask that your personal information be corrected, updated, or deleted. You also have the right to data portability, to object to or restrict our processing of your personal information, and to withdraw any consent you have given. If you would like to exercise any of these rights, please contact us through the contact information below. You also have the right to lodge a complaint with your local data protection supervisory authority; in Denmark this is Datatilsynet (https://www.datatilsynet.dk). Additionally, if you are a European resident we note that we are processing your information in order to fulfill contracts we might have with you (for example if you make an order through the Site), or otherwise to pursue our legitimate business interests listed above. Please also note that your information will be transferred outside of Europe, including Canada and the United States, in which case we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses. If you are a resident of California, you have the right to know what personal information we collect, to request its deletion, and not to be discriminated against for exercising those rights. We do not sell personal information. If you are a customer of a merchant using the App, please direct your request to the merchant whose store you shopped with in the first instance — they are the controller of that data, and we act on their instructions. We will assist them in responding to you.

When you place an order through the Site, we will maintain your Order Information for our records unless and until you ask us to delete this information, or for as long as we are required to keep it to comply with accounting, tax, and other legal obligations. The App supports Shopify's mandatory privacy webhooks. When a store owner or customer submits a data request or deletion request through Shopify (customers/data_request, customers/redact, and shop/redact), we receive it automatically and respond within 30 days. When the App is uninstalled from your store, we stop processing your store's data and delete or anonymise the personal information we hold on your behalf, except where we are required to retain it by law.

We may update this privacy policy from time to time in order to reflect, for example, changes to our practices or for other operational, legal, or regulatory reasons. The date at the top of this page shows when it was last revised.

For more information about our privacy practices, if you have questions, or if you would like to make a complaint, please contact us by e-mail at support@create2stay.com, or by mail using the details provided below: create2STAY ApS, Sletvej 50S, 8310 Tranbjerg J, Danmark Data protection enquiries can be sent to the same address, marked for the attention of our data protection contact, or by e-mail to support@create2stay.com.