Privacy Policy — Best Before: Expiry Tracking

Effective date: 13 June 2026

This Privacy Policy explains how the Best Before: Expiry Tracking app ("the App", "we", "us"), operated by Kazook Apps, MB, handles data when a Shopify merchant ("you", "the merchant") installs and uses it. It covers data about you, your store, and your customers.

1. Who we are

The App is provided by Kazook Apps, MB. For any privacy question, data request, or complaint, contact us at info@kazookapps.com. For data processed on behalf of merchants, we act as a data processor and the merchant is the data controller.

2. What the App does

The App helps you track product expiration ("best before") dates and manage inventory in batches. When you sell, cancel, or refund an order, the App deducts the right quantity from the oldest batch first (FIFO) and keeps your Shopify inventory and expiration metafields in sync.

3. What data we process

We deliberately process the minimum data needed to provide this service.

From your store (via the Shopify Admin API and webhooks):

• Product and product variant IDs, titles, SKUs, and inventory quantities
• Inventory location IDs
• Order, refund, and inventory-level events — specifically the order ID and the product/variant IDs and quantities on each line item

That we store in our database:

• Your store's myshopify.com domain and the Shopify access token issued to the App
• Your tracking configuration: which products you track, batch records (batch codes, quantities, expiration dates), and app settings
• An activity log of inventory changes, which records the order ID as a reference together with batch codes and quantities
• If you enable email notifications, the email address you provide for receiving them, plus your notification preferences

What we do NOT process or store:

• We do not collect or store customer names, customer email addresses, phone numbers, shipping or billing addresses, or payment information.
• The only personal data the App handles is (a) the order ID used as an internal reference, and (b) the merchant's own notification email address if you choose to provide one.

4. Why we process it (purpose)

We use this data solely to provide the App's functionality: tracking expiration dates, deducting inventory by batch when orders are placed, cancelled, or refunded, keeping Shopify inventory and expiration metafields in sync, and — only if you opt in — sending you notification emails about upcoming expirations and inventory mismatches. We do not use your data for advertising, profiling, or any unrelated purpose, and we do not sell or rent data to anyone.

5. Legal basis (GDPR)

Where the GDPR applies, we process data on the basis of performance of a contract (providing the service you installed) and our and your legitimate interests in accurate inventory management. Notification emails are sent only with your consent, given when you enable them in the App's settings.

6. How data is stored and secured

Data is stored in a database on a private server controlled by Kazook Apps, MB. We protect it with:

• Encryption in transit — all communication with Shopify and your browser uses HTTPS/TLS.
• Webhook authentication — every incoming webhook is verified with an HMAC signature before it is processed.
• Access controls — access to the server and database is restricted to authorized personnel.

7. How long we keep data

• Tracking data, batches, and settings are kept while the App is installed.
• Activity logs are automatically deleted after 365 days.
• Processed-webhook records (kept only to avoid double-processing) are automatically deleted after a short retention window.
• When you uninstall the App, your store session and access token are deleted. Remaining store data is deleted on request and, in any case, is no longer accessed.

To request deletion of your data after uninstalling, email info@kazookapps.com.

8. Sharing and sub-processors

We do not sell or share your data. We rely on the following service providers to run the App:

• Shopify — the platform the App integrates with, source of the store and order data described above.
• Our hosting provider — operates the server where the App and its database run.
• Our email provider (SMTP) — used only to deliver notification emails you have opted into.

These providers process data only to operate the App and are not permitted to use it for their own purposes.

9. International transfers

Data is processed on servers located in the European Union. Where any transfer outside the EU/EEA occurs through a service provider, it is covered by an appropriate safeguard such as the EU Standard Contractual Clauses.

10. Your rights

Depending on your jurisdiction (including under the GDPR), you may have the right to access, correct, delete, or export your personal data, to restrict or object to processing, and to withdraw consent at any time. To exercise any of these rights, contact info@kazookapps.com. You also have the right to lodge a complaint with your local data protection authority.

11. Customer data requests

Because the App does not store your customers' personal data, we have no customer personal data to retrieve or erase in response to Shopify's customers/data_request, customers/redact, or shop/redact requests. We honor these requests by confirming that no such data is held and by deleting the store's own records as described in Section 7.

12. Children's data

The App is a business tool for merchants and is not directed at children. We do not knowingly process data of anyone under 16.

13. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by a new effective date at the top, and where appropriate we will notify you within the App.

14. Contact

Kazook Apps, MB
Email: info@kazookapps.com