Privacy Policy for Dahlquist E-handelskonsultation AB Apps

This Privacy Policy describes how Dahlquist E-handelskonsultation AB (“we”, “us”, or “our”) collects, uses, stores, and shares information when merchants use one or more of our Shopify apps, services, websites, or related tools (collectively, the “Services”).

This Privacy Policy is intended to apply generally across our Shopify apps and related services, which may vary in functionality, category, and use case.

1. Information We Collect

Depending on the specific app or service being used, we may collect the following categories of information:

a. Information from Shopify

When a merchant installs or uses one of our Shopify apps, we may receive certain information from Shopify through its APIs, subject to the permissions granted to the app. This may include:

• shop name and shop URL
• merchant contact information
• store settings and configuration
• product data
• collection data
• inventory data
• order data
• fulfillment data
• customer data
• theme or storefront-related information
• app usage and installation details
• other data necessary for the app’s functionality

We only request access to information that is reasonably necessary to provide and improve the relevant app or service. Shopify’s requirements for protected customer data are based on data minimization and approval for the minimum data needed.

b. Information Provided Directly by Merchants

We may collect information that merchants provide directly to us, such as:

• name
• email address
• phone number
• company information
• billing details
• support requests
• onboarding information
• app settings and preferences
• any other information voluntarily submitted to us

c. Customer Information

If required for an app’s functionality, we may process information relating to a merchant’s customers, such as:

• shipping or billing information
• order history
• transaction-related details
• customer support data
• other data necessary for the service requested by the merchant

Some customer-related data may qualify as protected customer data under Shopify’s rules and may require specific approval and safeguards.

d. Technical and Usage Information

We may automatically collect technical and usage-related information, including:

• IP address
• browser type
• device type
• operating system
• referring URLs
• timestamps
• log files
• crash reports
• session and interaction data
• app diagnostics and performance data

2. How We Use Information

We may use information we collect to:

• provide, operate, maintain, and support our apps and services
• authenticate merchants and connect apps to Shopify stores
• enable app features and requested functionality
• personalize or configure the user experience
• process data on behalf of merchants
• communicate with merchants about updates, service messages, billing, and support
• troubleshoot issues and debug errors
• improve app performance, reliability, and usability
• monitor security and prevent fraud, abuse, or misuse
• comply with legal obligations
• enforce our agreements and protect our rights

3. Legal Bases for Processing

Where applicable under laws such as the GDPR, we rely on one or more of the following legal bases:

• performance of a contract
• compliance with legal obligations
• legitimate interests in operating, securing, and improving our services
• consent, where required by law

4. How We Share Information

We do not sell personal information.

We may share information with:

• cloud hosting providers
• infrastructure providers
• analytics providers
• customer support platforms
• monitoring and logging vendors
• payment, invoicing, or accounting providers
• subcontractors and service providers assisting us in operating the Services
• legal, regulatory, or governmental authorities when required by law
• successors or acquirers in connection with a merger, acquisition, financing, or sale of assets

We require third-party service providers acting on our behalf to process information only for authorized purposes and with appropriate protections.

5. Data Retention

We retain information only for as long as necessary to:

• provide the Services
• fulfill contractual obligations
• comply with legal requirements
• resolve disputes
• maintain security, backups, and business records
• enforce agreements

When information is no longer needed, we delete, anonymize, or securely dispose of it within a reasonable period.

If a merchant uninstalls one of our apps, we may delete or anonymize associated data unless retention is required for legal, security, accounting, fraud-prevention, or legitimate operational reasons.

6. International Data Transfers

We may process or store information in countries other than the country where the merchant or end customer is located. When personal data is transferred internationally, we take reasonable steps to ensure appropriate safeguards are in place, as required by applicable law.

If required, we rely on lawful transfer mechanisms such as contractual protections or equivalent safeguards.

7. Security

We implement reasonable administrative, technical, and organizational safeguards designed to protect information against unauthorized access, loss, misuse, alteration, or disclosure.

However, no system or method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

8. Cookies and Tracking Technologies

Our websites, dashboards, or related services may use cookies and similar technologies to:

• keep services secure and functional
• remember settings and preferences
• understand service usage
• improve performance and user experience
• analyze trends and traffic

Where required by law, we will obtain consent before using non-essential cookies or similar tracking technologies.

9. Merchant Responsibilities

Merchants are responsible for ensuring that they have the necessary rights and legal basis to collect, use, and share personal data with our apps and services.

Where we process personal data on behalf of a merchant, we may act as a processor or service provider, and the merchant may act as the controller or business, depending on the applicable law and context.

10. Privacy Rights

Depending on the applicable law, individuals may have rights to:

• access personal data
• correct inaccurate data
• delete personal data
• restrict or object to certain processing
• receive a copy of personal data in a portable format
• withdraw consent where processing is based on consent

Shopify requires public apps to provide consistent privacy rights handling for personal data regardless of where the individual is located.

To make a privacy request, contact us using the details below.

11. Children’s Data

Our Services are not directed to children, and we do not knowingly collect personal data from children.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, business operations, or legal obligations. When we do, we will post the updated version on this page and revise the “Last updated” date above.

13. Contact Information

If you have any questions, requests, or concerns about this Privacy Policy or our data practices, please contact us at:

Dahlquist E-handelskonsultation AB
Org. no.: 559106-8357
Strömstadsvägen 48
451 50 Uddevalla, Sweden
Email: kontakt@dahlquist.se
Website: dahlquist.se

14. DQ B2B Pricing

DQ B2B Pricing is our Shopify app that shows logged-in business customers their own prices in a Shopify store and applies the same prices at checkout. Where this section is more specific than the general sections above, this section applies. For the data below, the merchant who installs the app is the controller and we process it on the merchant’s behalf.

What the app stores

• The store’s domain and the access token Shopify issues when the app is installed.
• The app settings: the address, user name and file paths of the merchant’s ERP export (FTP), the FTP password and an optional Slack webhook address (both stored encrypted), the name of the customer metafield that holds the ERP customer number, and the checkout message.
• Pricing data imported from the merchant’s ERP export: article numbers, price lists, product groups, special price lists and rules, and each business customer’s ERP customer number with the price list and discount that apply to it.
• A record of which product variants and customers the app has written pricing data to, by their Shopify ID, so unchanged prices are not written again.
• Reports of each import (counts, and error messages when an import fails).

The app does not read or store customers’ names, email addresses, phone numbers or postal addresses, and it does not store order or payment information.

What the app writes to the store

Pricing data as app-owned metafields on product variants and customers, and an automatic discount that applies each logged-in customer’s price at checkout. The storefront block reads these metafields in the theme. The app sets no cookies and does no tracking in the storefront.

Where the data is processed

On our server in Stockholm, Sweden (UpCloud), and in Shopify. If the merchant adds a Slack webhook, import reports are posted to the merchant’s Slack workspace.

How long the data is kept

Until the merchant uninstalls the app. On uninstall the app deletes its access to the store and stops the import. When Shopify sends the shop data deletion request (48 hours after uninstall), the app deletes everything it stores for the store. When Shopify sends a customer data deletion request, the app deletes its record of that customer.

Contact

Questions and requests about the app: support@dahlquist.se. Merchants exercise their customers’ data rights through Shopify, which forwards the requests to the app.