Safely Privacy Policy

Safely stores the company details merchants enter and the store data it needs to run; it does not store data about your customers. This policy explains what Safely (“we”, “us”) collects when a merchant installs the Safely app from the Shopify App Store, how we use it, and the choices you have.

Safely is operated by Integriff. For the information merchants store in Safely, the merchant is the controller and we act as their processor. For the merchant account details we collect to run the service, we are the controller.

We collect only what Safely needs to show product safety information on your store and to run your account.

Company details can include personal data when a company is a sole trader or the contact is a named person. Only enter what you are required to show to customers.

Safely does not access, collect or store personal data about your customers. It has no access to orders or customer records, and the storefront blocks do not set cookies, track visitors or send data to our servers. The blocks read product safety information that Safely publishes to your store, so your storefront never calls the app.

We use the information above only to provide and support Safely. We do not sell it, use it for advertising, or use it to train AI models.

• Run the app: save your companies, apply vendor rules, and publish product safety information to your store so the theme blocks can show it.
• Readiness checks: count which products have company details and whether the Safely blocks are on in your theme.
• Plans: read your active plan from Shopify to apply plan limits. Shopify handles all billing; we never see payment details.
• Support and service messages: reply when you contact us, and tell you about changes that affect your store.
• Security: keep the app secure and prevent misuse.

Under the GDPR, we rely on performing our contract with you (running the app you installed) and on our legitimate interest in keeping it secure. For company details, we process them on your instructions as your processor.

We keep your data while Safely is installed and erase all of it once Shopify asks us to, 48 hours after you uninstall.

• While installed: you can edit or delete any company, rule or document link at any time, and export your companies as CSV.
• When you uninstall: we mark the store as uninstalled and stop using the access token. If you reinstall within 48 hours, your data is still there.
• 48 hours after uninstall: Shopify sends a shop data erasure request, and we delete your store record, companies, product assignments, rules and check confirmations.
• Customer data requests: Shopify forwards customer data and erasure requests to us. Because Safely holds no customer data, there is nothing to return or delete.
• Product safety information on your store: Safely publishes this information to app-owned fields on your products in Shopify. Shopify controls those fields after uninstall, and the theme blocks stop showing once the app is removed.

You can ask us to access, correct, export or delete your information, to restrict or object to its use, or to complain to your data protection authority. Contact us and we will reply within 30 days. If a person whose details appear in your company records contacts us, we will pass the request to you, as their controller.

Data travels over HTTPS and is stored with our hosting provider. Access is limited to the people who run Safely, and each store can only reach its own data. If data leaves the European Economic Area, we use Standard Contractual Clauses or another lawful transfer mechanism.

We will post any change to this policy on this page and update the date above. If a change affects how we use your data, we will tell you in the app or by email first.

Integriff. For privacy questions or requests, contact us through our website.