Privacy Policy

This Privacy Policy ("Policy") describes how Perfect Cart ("we", "our", "us", "the App") collects, uses, discloses, and safeguards information in connection with the Perfect Cart Shopify application and its 16 cart modules including the Free Shipping Tracker, Cart Offers, Free Gift Unlock, Special Freebie timer, Smart Cart Title Bar, Don't Miss These Deals upsells, Your Items list, Freebie / Buy X Get Y Offer, Coupons & Offers, Your Delivery (pincode checker), Your Summary, Your Gift Package (wrapping & message card), Your Return Policy display, Your Rewards (loyalty points), and Your Checkout (payment trust icons).

This Policy applies to (a) merchants who install the App on a Shopify store ("Merchants", "you"), and (b) end-customers who interact with the App's features on a Merchant's storefront ("Shoppers"). By installing or using the App, you acknowledge that you have read and understood this Policy.

Where applicable (e.g. under the EU/UK GDPR), we rely on the following legal bases: (a) performance of a contract with the Merchant to deliver the App's services; (b) legitimate interests, such as improving the App and preventing fraud; (c) consent, where a Shopper voluntarily provides information such as a gift message or pincode; and (d) legal obligation, such as retaining billing records for tax purposes.

The App's storefront embed may use cookies, local storage, or session storage to maintain cart state, remember dismissed banners, and support basic analytics. Full details are provided in our separate Cookie Policy.

Because Merchants and Shoppers may be located in different countries than our infrastructure providers, data may be transferred to and processed in countries outside your own, including countries that may have different data protection laws. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses to govern such transfers.

We retain Store Data and App configuration for as long as the App remains installed. Cart and checkout interaction data used for real-time feature calculation is generally retained only as long as operationally necessary and is not kept indefinitely. If a Merchant uninstalls Perfect Cart, configuration and Store Data are deleted from active systems within 30 days, except where retention is required for legal, tax, or dispute-resolution purposes, in which case data is retained only as long as necessary for that purpose.

We implement industry-standard safeguards including encryption of data in transit (TLS) and at rest, role-based access controls, periodic access reviews, and monitoring for unauthorized access. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security, but we work to maintain safeguards appropriate to the sensitivity of the data processed.

Depending on your jurisdiction, you (or, where applicable, a Shopper whose data is processed by the App on a Merchant's behalf) may have rights to: access the Personal Data we hold; request correction of inaccurate data; request deletion or erasure; request a portable copy of your data; restrict or object to certain processing; and withdraw consent where processing is based on consent. Requests can be submitted via our Support page. Where a request relates to a Shopper's data collected through a specific Merchant's store, we may direct the request to that Merchant, who acts as the data controller for their storefront.

California residents may have the right to know what categories of Personal Information are collected, to request deletion, to correct inaccurate information, and

to opt out of the "sale" or "sharing" of Personal Information. We do not sell Personal Information for monetary consideration. California residents may submit verifiable requests via the Support page; we will not discriminate against you for exercising these rights.

If you are located in the European Economic Area or the United Kingdom, you have the rights described in Section 12 above under the GDPR/UK GDPR, including the right to lodge a complaint with your local data protection supervisory authority if you believe your rights have been violated.

The App is intended for use by Shopify Merchants operating commercial stores and their adult Shoppers. We do not knowingly collect Personal Data from children under the age of 16. If we become aware that a child's Personal Data has been collected without appropriate consent, we will take steps to delete that information.

For Cart Data and Shopper Personal Data collected through a Merchant's storefront (e.g. gift messages, pincodes, loyalty point balances), Perfect Cart generally acts as a data processor on behalf of the Merchant, who is the data controller responsible for their storefront and customer relationships. Merchants requiring a Data Processing Agreement (DPA) may request one via the Support page.

In the event of a security incident affecting Personal Data, we will notify affected Merchants without undue delay, consistent with applicable law, and will provide reasonable detail to help Merchants meet their own notification obligations to Shoppers or regulators.

We may update this Policy periodically to reflect changes in our practices, features, or legal requirements. Material changes will be communicated via the Shopify admin notification center or the email address associated with the Merchant's account. Continued use of the App after such updates constitutes acceptance of the revised Policy.

For privacy-related questions, data requests, or to obtain a copy of our Data Processing Agreement, please reach out via our Support page or email privacy@perfectcart.app.