Privacy policy
This policy explains how Restock ("the app"), published by LÚMÉA Apps ("we"), collects, uses and protects information when a merchant installs the app on a Shopify store, and when that store's customers use the app's "Notify me" button.
1. Information we access
When a merchant installs the app, Shopify gives it access to the following store data, which the app reads to work:
- Products and variants: titles, SKUs, barcodes, prices, unit costs, vendors, images and stock levels.
- Locations: names and identifiers, to receive deliveries at the right place.
- Orders: dates, quantities and the products sold, to calculate sales speed. The app does not use customer names, addresses or payment details from orders.
- Basic shop details: store name, address domain and currency.
2. Information we store
- Settings the merchant enters: supplier delivery times, countries, minimum orders, pack sizes and the stock goal.
- Purchase orders and deliveries created in the app.
- Daily stock levels of each product, to report real stock-outs.
- For "Notify me": the email address a shopper enters, the product they asked about and the date. Nothing else is collected from shoppers.
- The access token Shopify issues to the app for the store.
3. How we use information
- To calculate restock suggestions, purchase orders and reports for the merchant who installed the app.
- To show the merchant which customers are waiting for a product, so the merchant can tell them it is back in stock.
- To provide support when the merchant contacts us.
We do not sell personal information, use it for advertising, or share it with third parties, except the service providers listed below.
4. Changes to the store
The app only changes the store when the merchant confirms it: it adds received stock and saves new unit costs entered by the merchant when receiving a delivery.
5. Service providers
- Hetzner Online GmbH (Germany): hosting of the app and its database in the European Union.
- Shopify: the platform the app runs on; Shopify's own privacy policy applies to data held by Shopify.
6. Data retention and deletion
- Data is kept while the app is installed.
- When the merchant uninstalls the app, all data stored for that store is deleted after Shopify's deletion request (within 48 hours of uninstalling).
- When a store's customer asks the store to delete their data, the app deletes that customer's "Notify me" sign-ups automatically.
- Customers can also ask us directly at contact@lúméa.com to delete their email from a store's waiting list.
7. Security
Data is sent over encrypted connections (HTTPS), stored on a server with restricted access, and backed up daily. Access to store data is limited to what the app needs to work.
8. Your rights
Depending on where you live (for example under the GDPR in the European Union), you may have the right to access, correct or delete your personal data, and to object to its use. Merchants and shoppers can exercise these rights by writing to contact@lúméa.com. Shoppers can also contact the store where they signed up.
9. Changes to this policy
We may update this policy as the app evolves. The date at the top shows the latest version.
10. Contact
Questions about privacy: contact@lúméa.com.