What the app sees,
and what it keeps.

Who we are

Pack Pricing by TrolleyRelay ("the app") is a Shopify app provided by TrolleyRelay (ABN 22 524 307 821), an Australian business ("we", "us"). We are not established in Europe. You can reach us at packpricing@trolleyrelay.com.

What the app can access

When you install the app, it asks Shopify for these permissions, and only these:

• Products (read and write): to show your products and variants on the Pack tiers page, and to save the pack tiers you enter as metafields on those variants, in your own store.
• Discounts (write, which includes read): to create and manage the single pack pricing discount on your store when you choose to set it up, and to show you its status.

The app does not request access to orders, customers, inventory, or payment information.

What we keep, and for how long

• No database. The app has no database. Your pack tiers and the pack pricing discount are stored in your Shopify store, where you control them.
• A sign-in session, in memory only. While you use the app, Shopify issues it an access token for your store. That token is held in the app's memory and is lost whenever the app restarts; it is never written to disk or a database.
• Operational logs. The app records operational events (such as your store's myshopify.com domain, request and webhook identifiers, and error details) so we can troubleshoot problems. Logs never contain customer information. They are kept by our hosting provider for a limited period and are not used for any other purpose.

We do not sell or share information about your shop, and we do not use it for marketing.

Your customers' information

The app does not collect, request, or store information about your customers. The pack pricing discount runs inside Shopify at checkout, as a Shopify Function, and works only from the cart's lines: which product variants are in the cart, how many, their prices, and your pack tiers. It does not receive the shopper's name, email, address, or any other identity information, and it cannot send data out of Shopify.

The pack price table on your product page is rendered by your theme from your pack tiers. It makes no requests to us or to anyone else.

Shopify privacy webhooks

The app implements Shopify's mandatory customers/data_request, customers/redact, and shop/redact webhooks. Because the app holds no customer data and no data about your shop, there is nothing to return or erase: each request is verified, recorded in our logs by topic and store domain, and acknowledged. The customer requests Shopify sends us include that customer's identifiers (such as an email address); the app reads them only to verify the request came from Shopify, and neither logs nor keeps them. A customers/data_request also notifies us internally, carrying your store domain only, so we can confirm the request and respond within the required time.

Service providers

• Fly.io: hosts the app (Sydney, Australia).
• Slack: internal notifications to our team (US-based). A notification carries a store domain and a short description of the event, never customer information.
• Cloudflare: DNS and hosting for this website.
• Shopify: your store and its data, under Shopify's own privacy policy.

Overseas disclosure

The app runs in Australia (Sydney). The only routine overseas disclosure is the internal notification described above, which goes to Slack in the United States and carries a store domain only. Cloudflare serves this website from its global network. Shopify holds your store data under its own privacy policy and hosts data globally.

If you uninstall

Uninstalling ends the app's access to your store. The app keeps no copy of your shop on our side, so there is nothing for us to delete. The pack tiers you entered are stored as metafields on your product variants, in your own store, and remain yours to keep or remove.

Data breaches

If a data breach affects information about your shop, we will notify you promptly, and the Office of the Australian Information Commissioner where required by law.

This website

This website sets no cookies and runs no third-party analytics or advertising trackers. Our hosting provider, Cloudflare, processes standard request data (such as IP address and browser type) to serve and secure the site. We do not use this data to identify visitors.

Access, correction and complaints

Privacy questions and requests: packpricing@trolleyrelay.com. We reply within two business days, as for any support email.

You can request access to, or correction of, any personal information we hold about you by emailing the address above.

Complaints: if you believe we have mishandled personal information, contact us at the address above and we will respond within 5 business days. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au).