We follow industry standards on information security management to safeguard
sensitive information, such as financial information and any other Personal
Information entrusted to us. Our information security systems include technical
and organizational measures that apply to people, processes and information
technology systems on a risk management basis.
Please note, however, that no method of transmission over the Internet, or
method of electronic storage, is 100% secure. Therefore, we cannot guarantee
the absolute security of your Personal Information.
Residents of the European Economic Area (“EEA”)
If you are located in the EEA, your personal information is processed by
Shopify’s Irish affiliate, Shopify International Ltd. As part of our service,
we may transfer your Personal Information to other regions, including to Canada
and the United States. In order to ensure that your information is protected
when transferred out of the EEA, Shopify relies on adequacy mechanisms such as
the EU-U.S. Privacy Shield (described in more detail below), as well as
inter-company agreements between our various affiliates that may process your
information on behalf of Shopify International Ltd.
If you are located in the EEA, you have certain rights under European law with
respect to your personal data, including the right to request access to,
correct, amend, delete, port to another service provider, or object to certain
uses of your personal data. If you would like to exercise these rights, please
contact us using the email address below.
Additionally, if you are located in the EEA, we note that we are generally
processing your information in order to fulfill contracts we might have with
you (for example to provide you with the App pursuant to our Terms of Service),
or otherwise to pursue our legitimate business interests listed above, unless
we are required by law to obtain your consent for a particular processing
operation. In particular we process your personal data to pursue the legitimate
interests of improving the App so it will function better for you and other
users, improving our websites or other services, to test out features or
additional services, and to provide support services or to answer questions.
When we process personal information to pursue these legitimate interests, we
do so where we believe the nature of the processing, the information being
processed, and the technical and organisational measures employed to protect
that information can help mitigate the risks to the data subject.