1. Introduction
Welcome to Edition ("we," "our," or "us"). We develop and provide the "Edition - Material Usage" app (the "App") for Shopify merchants. The App tracks the packaging used on your orders and produces the reports you need for packaging producer responsibility (EPR). This Privacy Policy explains what information the App handles, why, and how long we keep it, in connection with your use of the App and our services (collectively, the "Services").
By using our Services, you agree to the collection and use of information in accordance with this policy.
2. Information We Collect
We only collect what the App needs to calculate your packaging and produce your reports. Importantly:
We DO NOT collect your customers' names, email addresses, phone numbers, physical addresses or payment details.
We DO NOT use analytics, tracking cookies or advertising tools of any kind.
The information we collect is limited to:
Store Information (Provided by Shopify)
Store Details: Your store domain, store contact email and time zone. This is required for the App to connect to your store and to report on the correct days.
Access Credentials: The credentials Shopify issues so the App can connect to your store. These are stored encrypted.
Plan Information: Your current plan and billing period. Payments are handled entirely by Shopify, and we never see or store payment details.
Order Information (Provided by Shopify)
For each order placed in your store, the App stores the order ID, order number, date, total amount and currency. For each line item, it stores the product and variant IDs, product title, product type, vendor, tags, quantity and weight, together with the packaging amounts the App calculates from these.
Order IDs can be linked to a customer inside Shopify. For that reason we treat order records as personal data and handle them as described in sections 4 and 9.
Product and Inventory Information (Provided by Shopify)
Packaging Values: The packaging values you set on your product variants. The App reads these from a product metafield, and creates that metafield in your store when you add a material in the App.
Inventory Quantities: Used to build the packaging in stock report.
Information You Enter in the App
App Configuration Data: Your materials, material fractions, shipping packaging rules and exclusion rules.
Manual Usage Entries: Packaging you add by hand, including the note you write for each entry. Please do not enter personal information about individuals in these notes.
Report Recipients: The email addresses you choose to send reports to, and a history of the reports you have requested.
Technical Logs
Our servers keep technical logs to run and secure the Services. They can include your store domain and error details. These logs are kept for short periods only.
3. How We Use Your Information
We use the information we collect for the following purposes:
To provide, operate, and maintain the App and our Services.
To authenticate your access to the App.
To calculate the packaging used on your orders and produce your reports.
To email the reports you request to the addresses you choose.
To apply the order allowance of your plan.
To respond to support requests.
To meet our legal obligations, including handling data requests passed on by Shopify.
4. Our Role and Legal Basis for Processing (For EEA Users)
For order information, you (the merchant) are the data controller and we act as your data processor. We process order information only to provide the Services to you.
For merchants in the European Economic Area (EEA), our legal basis for collecting and using the information described above is:
Performance of a Contract: The processing is necessary to provide the App and fulfill our contractual obligations to you.
Legal Obligation: The processing is necessary to handle data protection requests and meet other legal requirements.
Legitimate Interests: The processing is necessary to keep the Services secure and reliable, for example through technical logs.
When one of your customers asks for their data, Shopify passes the request to us. We then email you a file with everything the App holds for that customer's orders, so you can answer them. When Shopify asks us to delete a customer's data, we permanently delete the order records concerned.
5. Data Sharing and Disclosure
We do not sell, trade, or rent your information to third parties. We may share information only in the following limited circumstances:
Service Providers: We engage trusted third-party companies (Data Processors) to perform essential services on our behalf, such as hosting and email delivery. These providers are contractually obligated to handle your data securely and only for the purposes we specify.
Legal Compliance: We may disclose information if required to do so by law or in response to valid legal requests (e.g., court orders, subpoenas).
Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change in ownership or control.
List of Our Key Data Processors:
Shopify Inc. (Canada) – Platform provider
DigitalOcean (Frankfurt, Germany) – Application hosting
Neon (Frankfurt, Germany) – Database hosting
Redis Ltd. (Frankfurt, Germany) – Background job processing
Resend (United States) – Email delivery for reports
We ensure all Data Processors comply with stringent data protection obligations.
6. Data Security
We implement reasonable administrative, technical, and physical safeguards designed to protect the information we collect. Access credentials are encrypted at rest, and all data is sent over encrypted connections. However, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.
7. International Data Transfers
Your data is stored in the European Union (Frankfurt, Germany). Some of our Data Processors are based outside the EU: Shopify in Canada and Resend in the United States. Where information is transferred outside the EEA, we ensure such transfers are governed by appropriate safeguards, such as an adequacy decision or Standard Contractual Clauses approved by the European Commission, to protect your data in accordance with this policy and applicable law.
8. Your Rights
Depending on your location, you may have certain rights regarding your information, such as the right to access, correct, or delete the personal data we hold. You can review and update most of your data directly within the App.
To exercise any other rights, please contact us at help@edition.dk. We will respond to your request in accordance with applicable law.
9. Data Retention
While the App Is Installed: We keep your data for as long as it is needed to provide the Services, so your reporting history stays available.
When You Uninstall the App: Your store is marked as inactive, and your data is kept for about 48 hours in case you reinstall. Shopify then sends us a deletion request, and we permanently delete all of your store's data, including settings, materials, rules, order records and reports.
Customer Deletion Requests: When Shopify asks us to delete a customer's data, we delete the order records concerned. Daily packaging totals that contain no order or customer identifiers are kept, because you need them for your reporting.
Backups: Data deleted from our systems may remain in encrypted backups until they expire on our providers' regular backup cycle.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last Updated" date. Your continued use of the App after any change constitutes your acceptance of the updated policy.
11. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us at:
Edition
Email: help@edition.dk
Website: https://edition.dk
For EEA Residents: You have the right to lodge a complaint with a supervisory authority in your country of residence. In Denmark, this is Datatilsynet.