This privacy policy governs the Checkout Links Shopify application ("App") operated by Edinson & P AB. It describes how personal information is collected, used, and shared when you install or use the App.
Company Details
- Organization: Edinson & P AB
- Location: Sweden
- Brand: Checkout Links
- Contact: hello@checkoutlinks.com
Information We Collect
Merchant Store Information
When you install the App, we access and store the following from your Shopify account:
- Store name, URL, and Shopify identifiers
- Store owner email address
- Product and collection data (for link creation)
- Order data (for analytics and attribution)
- Discount configuration data
What We Don't Collect
We do not collect personal data from your customers (end-users) beyond what is necessary for checkout link functionality. We do not process or store payment card information.
How We Use Your Information
We use the collected information to:
- Provide and maintain the Checkout Links service
- Create and manage checkout links, discounts, and promotions
- Provide analytics and attribution reporting
- Offer customer support and respond to inquiries
- Send product communications and updates
- Analyze performance and improve our service
- Ensure security and prevent fraud
Data Sharing
We partner with the following third-party services to operate the App:
- Cloudflare: Infrastructure, session storage, and content delivery
- Shopify: Billing and subscription management
- Intercom: Customer support and communication
- Sentry: Error monitoring and performance tracking
We do not sell, rent, or trade your personal information. We may share information to comply with applicable laws and regulations, respond to lawful requests, or protect our rights.
Data Security
We implement industry-standard security measures including:
- HMAC-SHA256 signed discount configurations to prevent tampering
- Encrypted data transmission (HTTPS/TLS)
- Access controls and authentication via Shopify OAuth
- Regular security reviews aligned with Shopify's development standards
Data Retention and Deletion
- App data: Deleted automatically upon app uninstallation
- Analytics data: Retained for the duration of your subscription
- Support records: Retained for up to three years after last interaction
- Legal requirements: Some data may be retained as required by law
Your Rights
You have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data
- Request data portability
- Withdraw consent where applicable
- Restrict processing (GDPR users)
GDPR Rights
If you are in the EU/EEA, you have additional rights under the General Data Protection Regulation, including the right to lodge a complaint with a supervisory authority. We process your information based on legitimate interest and contract performance.
US State Privacy Rights
Residents of California (CCPA/CPRA), Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), and Utah (UCPA) have specific privacy protections under their respective state laws.
International Data Transfers
Data may be transferred and processed in locations outside your jurisdiction, including the United States and the European Union. We implement appropriate safeguards to ensure your data remains protected during transfer.
Cookies
The App uses cookies and similar technologies to maintain session state and provide functionality. Our marketing website may use analytics cookies. By using the App, you consent to the use of cookies as described here.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes to our practices or for operational, legal, or regulatory reasons. Material changes will be communicated via email or app notification. Continued use of the App after changes constitutes acceptance.
Contact Us
For questions about this Privacy Policy, to exercise your rights, or to make a complaint, please contact us at hello@checkoutlinks.com.
Edinson & P AB
Sweden