App privacy policy
Version ID app-privacy-1.2-2026-10-13. The version and date of this text are shown below. Questions: support@ppftec.com; data protection: privacy@ppftec.com.
EuBinder — Privacy policy for the Shopify app
Version 1.2 of 13 October 2026 · ID app-privacy-1.2-2026-10-13
This policy explains how the EuBinder Shopify app handles personal data. The EuBinder website and beta list have a separate notice at https://eubinder.ppftec.com/privacy.
1. Who we are
PPFTEC S.R.L., Trade Register no. J2026052999008 (EUID ROONRC.J2026052999008), CUI RO55537142, registered office: Str. Patriarh Iustinian Marina 17-19B, bl. DC12, mansardă, ap. 25, Râmnicu Vâlcea, jud. Vâlcea, România. Data protection contact: privacy@ppftec.com. We have not appointed a data protection officer.
2. What the app does, and what it does not touch
EuBinder helps Shopify merchants selling into the EU see which obligations may apply to their store and prepare documents: a product-page block with manufacturer and EU responsible-person details (GPSR), packaging documents (PPWR), accessibility statements, packaging-registration reminders and a document center.
The app does not access your customers or orders. It requests only the Shopify permission write_products, which lets it read your products and write the app's product fields. It does not request access to protected customer data.
3. Data we process as controller (for running our service)
| Data | Purpose | Legal basis (GDPR) | How long |
|---|---|---|---|
| Shop ID, shop domain, plan, install date, Shopify access token (encrypted) | Provide the app and billing | Contract, Art. 6(1)(b) | Until your data is deleted after uninstall (section 7) |
| Shop e-mail and the optional notification e-mail you enter | Service and legal notices, reminders you set, the export reminder at uninstall | Contract, Art. 6(1)(b); security notices: legitimate interest, Art. 6(1)(f) | Until deletion after uninstall |
| Shopify staff user ID (a number, no name) on actions such as issuing a document | Accountability for documents and evidence (audit log) | Legitimate interest, Art. 6(1)(f) | Until deletion after uninstall |
| Billing charge IDs from Shopify Billing | Billing and our accounting | Contract, Art. 6(1)(b); legal obligation, Art. 6(1)(c) | As long as Romanian accounting law requires us to keep supporting records |
| Support e-mails you send us | Answer your request | Contract, Art. 6(1)(b) | 24 months after the request is closed |
| Support-export requester and security metadata: Shopify staff reference, installation generation, request date, preparation/download status and recovery identifiers | Verify the signed-in requester, prevent access by another person or installation, and record preparation and cleanup accountability | Legitimate interest, Art. 6(1)(f), as for the existing staff-accountability and security purposes | Requester, receipt and download-ticket metadata are cleared when cleanup is claimed after expiry, revocation or an abandoned preparation. Temporary copies expire seven days after preparation starts. A minimal cleaned-request history remains while the shop record exists and is deleted with the affected shop data after redaction (section 7). Separately, narrowly scoped upload-recovery identifiers may remain while cleanup is unresolved |
| Optional snapshot of a valid existing notification email for a confirmed support-export request | Identify the existing service contact for the requested export and verify that support correspondence uses that contact | Contract, Art. 6(1)(b), where the contact is personally the contracting merchant; for business staff contact verification and protection against misdirected disclosure: legitimate interest, Art. 6(1)(f), as for the existing staff and security purposes | The snapshot is cleared when cleanup is claimed after expiry, revocation or an abandoned preparation. It does not adopt the 24-month retention for actual support correspondence. No automatic export-ready email is enabled |
| Technical request data (IP address, browser user agent) when you use the app or someone opens a document-center link | Deliver the service, security and abuse prevention | Legitimate interest, Art. 6(1)(f) | Processed by Cloudflare to deliver and protect the service. We do not store IP addresses in our database or logs. Our own server logs contain no IP addresses and no content you entered, and are deleted after 7 days. Request limits are counted per shop, not per person |
| Records of Shopify privacy requests (topic, date, outcome — no customer data) | Show that we handled the request | Legal obligation, Art. 6(1)(c) | 3 years after the request |
You can object at any time to processing based on legitimate interest by writing to privacy@ppftec.com.
4. Data we process for you as processor
When you enter or upload business information, you decide what goes in and why. We process it on your behalf under our Data Processing Agreement (https://eubinder.ppftec.com/dpa), which forms part of our Terms. This includes:
- your business profile (legal name, address, VAT number, size bands, country of establishment) — personal data if you are a sole trader;
- names and postal or electronic addresses of manufacturers, EU responsible persons, importers and EPR authorised representatives, when these are natural persons, and the name and e-mail of the contact persons you record for them when they are companies;
- supplier names, supplier contacts and the documents you upload (which may name signatories);
- the name of the person who signs a declaration you generate;
- notes and reasons you write in the checklist;
- products, packaging data and accessibility-scan results of your public store pages.
You remain responsible for having a legal basis to give us this data and for informing the people concerned.
5. Your storefront and your shoppers
The product-page block shows the details you entered (for example manufacturer and responsible person) to your shoppers. The block is rendered by Shopify from data stored in your store. It sets no cookies, loads no third-party scripts and collects no shopper data. The document center serves documents you choose to share through a link; we record no shopper identity.
6. Shopify privacy requests
We answer Shopify's mandatory privacy webhooks:
customers/data_request: we hold no data about your customers; we record the request and tell you so in the app within 30 days;customers/redact: nothing to delete, because we hold no customer data; we log only the request;shop/redact(sent by Shopify 48 hours after you uninstall): we delete all data about your shop as described in section 7.
7. Uninstalling and deletion
If you uninstall EuBinder, Shopify tells us 48 hours later. We then delete your data within 30 days; backup copies expire 30 days after that. Export your documents first. If you are the PPWR manufacturer or importer of your packaging, you must keep its EU declaration of conformity (and, as manufacturer, its technical documentation) for 5 years, or 10 years for reusable packaging (PPWR Art. 15(3), 18(7)). We do not keep documents for you after deletion. Apart from the temporary cleanup journal described below, we keep only a pseudonymous record that the deletion was requested and done, without your shop's name or contact details, for 3 years (section 3). Data written into your Shopify store (product fields) stays in your store under your control.
For support exports, we create temporary archive copies with a fixed expiry seven days after preparation starts. After expiry, revocation or an abandoned preparation, cleanup clears the requester reference, notification-email snapshot, preparation receipt and download-ticket metadata, then deletes the copies and aborts recorded unfinished uploads. Cleanup failure can delay physical deletion, but does not extend download access. A minimal cleaned-request history retains the internal shop, request and attempt identifiers, installation and export dates, status and lifecycle timestamps while the shop record remains. It records preparation and cleanup accountability under the same staff/security purpose and is deleted with the affected shop data through the uninstall and redaction procedure described in this section. It contains no requester reference, notification-email snapshot, preparation receipt or download ticket. Separately, an upload recovery journal may temporarily retain the internal shop identifier, request and attempt identifiers, object key, upload identifier and deletion deadline until cleanup or operator review finishes. It contains no contact address or uploaded file contents. It is used only to complete cleanup, including after the shop's main record has been deleted.
Our backups are the database's point-in-time recovery (Cloudflare D1 Time Travel), which keeps 30 days of history. If we ever restore from it, we delete again the data of shops that had already been deleted before the service resumes.
8. Who processes the data for us, and transfers
- Cloudflare, Inc. — application servers, database (Cloudflare D1) and file storage (Cloudflare R2), both with EU jurisdiction, e-mail delivery, accessibility scans of public store pages (Browser Rendering), and network security (CDN, DDoS and bot protection).
The current list with locations and safeguards is at https://eubinder.ppftec.com/subprocessors. Cloudflare is a US company, and parts of its service can involve the United States. For Cloudflare, transfers rely on the EU-U.S. Data Privacy Framework (Commission adequacy decision of 10 July 2023), in which Cloudflare, Inc. participates (DPF List, checked on 7 October 2026), and, as a fallback, on the Standard Contractual Clauses in its data processing agreement. You can ask us for a copy of these safeguards. We do not sell personal data and do not use it for advertising.
9. Security
Encryption in transit (TLS) and at rest, an encrypted Shopify access token, tenant isolation in the application (every database query is limited to the signed-in shop), access only for the app server, file keys that cannot be guessed, revocable share links, logs without merchant-entered content, and staff access limited to PPFTEC's administrator.
10. Cookies
Inside Shopify admin the app uses Shopify session tokens to know which store is signed in. EuBinder sets no marketing or analytics cookies. Document-center pages set no cookies of their own. Cloudflare may set strictly necessary security cookies (for example __cf_bm) to protect the service from automated abuse; they are not used for tracking or advertising.
11. Your rights
You can ask for access, correction, deletion, restriction, a copy in a portable format, and object to processing based on legitimate interest, by writing to privacy@ppftec.com. We answer within one month; for complex requests we may extend this by two months and will tell you why. For data we process for a merchant, we pass your request to that merchant and help them answer it. You can complain to a data protection supervisory authority: in Romania, the Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP, www.dataprotection.ro), or the authority of the EU country where you live or work, or where you think the infringement took place.
12. Changes
If we change this policy we publish a new version with a new version number and date, and tell merchants in the app at least 30 days before a change that reduces their rights. Earlier versions are available on request.