Privacy policy

Who we are

Discount Recovery ("we", "us") provides a Shopify app that helps merchants track failed discount code attempts and recover sales at checkout. This policy explains what data the app collects, how it is used and stored, and the choices and rights available to merchants and their customers ("buyers").

In data protection terms, the merchant is the data controller for their store's customer data, and Discount Recovery acts as a data processor, processing buyer data solely to provide the service to the merchant.

Data we collect

Merchant and store data

• Store identifiers provided by Shopify on install (shop domain, shop ID, store name and contact details)
• App configuration you set (recovery rules, backup code choice, offer messaging)
• Subscription and billing status (billing itself is handled entirely by Shopify - we never see payment details)

Buyer checkout event data

The app's web pixel observes discount code activity at checkout and records, per attempt:

• The discount code entered, whether it was valid, and the failure reason if not
• Cart value, currency, and cart context at the time of the attempt
• A checkout token used to correlate the failed attempt, any recovery offer, and the eventual order
• An anonymous identifier for the checkout session
• Where the buyer is an identified customer (for example, logged in): their Shopify customer ID and email address, used to link discount behaviour to their customer record

What we do not collect

• No payment or card details - payment is handled entirely by Shopify's checkout
• No passwords or account credentials
• No browsing or behavioural tracking beyond discount code events at checkout - the pixel only reacts to discount-related checkout events

How we use data

We process data exclusively to provide the service the merchant installed:

• Analytics - computing revenue at risk, failed attempt counts, code popularity, failure reasons, and the recovery funnel shown in the merchant's dashboard
• Recovery offers - deciding, per the merchant's rules, whether to present a backup discount offer for a specific checkout, and applying it when the buyer accepts
• Attribution - matching recovered orders to applied offers by checkout token so merchants can measure ROI
• Customer segments - where a buyer is an identified customer, syncing discount-behaviour metafields and tags to the merchant's own Shopify customer records for use in Shopify Segments and Flow
• Support - responding to merchant support requests

We do not sell data, share it with advertisers, use it to profile buyers across stores, or use it for any purpose beyond operating the app for the merchant.

Where data is stored and how it's secured

• Application data is stored on Gadget, the managed cloud platform the app is built on, in a dedicated PostgreSQL database.
• Data is encrypted in transit (TLS) and at rest.
• Access is restricted to the app itself and to authorised personnel for support and maintenance; every query is scoped to the individual store, so one merchant's data is never visible to another.
• Our sub-processors are Shopify (platform, webhooks, billing) and Gadget (application hosting and database).

How we respect privacy choices

• The tracking pixel runs inside Shopify's sandboxed web pixel environment - it cannot read arbitrary page content and only receives the checkout events Shopify exposes to it.
• Pixel behaviour is governed by the store's Shopify customer privacy and consent settings. Where a merchant has configured consent collection (for example for visitors in the EU/UK), Shopify controls activation of the pixel in line with the buyer's choices.
• Buyers who check out as guests are tracked only under an anonymous session identifier; identity is linked only when Shopify identifies the customer (such as a logged-in checkout).
• The recovery offer is a native checkout element controlled by the merchant. It shows no third-party content and appears only after a buyer's own discount attempt fails.

How GDPR requests are handled

Discount Recovery implements all three of Shopify's mandatory privacy webhooks. Requests made by a buyer to a merchant (or by a merchant leaving the platform) flow to us automatically through Shopify, and are handled as follows:

Data access requests (customers/data_request)

When a buyer asks a merchant for a copy of their data, Shopify notifies us. We compile the discount-activity data we hold for that customer - attempted codes, timestamps, cart values, and recovery offer history - and provide it to the merchant so they can fulfil the buyer's request within the statutory timeframe.

Customer erasure (customers/redact)

When a buyer requests erasure, we automatically and permanently sever their identity from all analytics data we hold for that store:

• Customer links, customer IDs, email addresses, and pending identity data are removed from customer statistics records
• Customer references and anonymous session identifiers are removed from discount event and funnel records, including events linked through the same anonymous sessions

Aggregate, non-identifying counters (for example, a store's total failed-attempt counts) are retained for merchant analytics, as they contain no personal data after redaction.

Store data erasure (shop/redact)

48 hours after a merchant uninstalls the app, Shopify sends a shop redaction request. We then permanently delete all discount analytics data for that store - customer statistics, funnel events, cart records, and discount events. After uninstall there is no lawful basis to retain this data, so it is purged rather than archived.

Data retention

• While the app is installed - discount event and analytics data is retained so merchants can report on trends over time.
• After a customer erasure request - identity linkage is removed immediately and permanently, as described above.
• After uninstall - all store analytics data is permanently deleted when Shopify's shop redaction request arrives (48 hours after uninstall).

Your rights

Depending on your location (including under the GDPR and UK GDPR), you may have the right to access, correct, delete, restrict, or object to the processing of your personal data, and the right to data portability. Buyers can exercise these rights through the merchant they shopped with; merchants can exercise them by contacting us. You also have the right to lodge a complaint with your local supervisory authority.

Changes to this policy

If we make material changes to this policy, we will update the date at the top of this page and, where appropriate, notify merchants through the app or by email.

Contact