Privacy Policy

Product Stock Notifications — Last updated: April 2026

This Privacy Policy describes how Product Stock Notifications (the "App", "we", "us", or "our") collects, uses, and handles personal data when you use our Shopify application. The App enables customers of Shopify merchants to sign up for email notifications when an out-of-stock product becomes available again.

1. Who We Are

Product Stock Notifications is a Shopify application developed and operated as a service for Shopify merchants. The merchant who installs the App is the data controller for their customers' personal data. We act as a data processor on the merchant's behalf.

2. Data We Collect

We collect and store the following personal data:

• Customer email address — provided voluntarily by the customer when signing up for a back-in-stock notification on a merchant's storefront.
• Product and variant identifiers — the Shopify product ID and variant ID for the item the customer wants to be notified about.
• Shop domain — the Shopify store domain, used to associate subscriptions with the correct merchant.
• Timestamp — the date and time the subscription was created and, if applicable, when the notification email was sent.

We do not collect names, phone numbers, payment information, browsing behaviour, or any other personal data beyond what is listed above.

3. How We Use the Data

The data collected is used exclusively to:

• Send a one-time email notification to the customer when the subscribed product or variant is back in stock.
• Allow the merchant to view and manage their subscribers through the App's admin interface.
• Comply with GDPR data subject requests submitted via Shopify.

We do not use the data for marketing, profiling, analytics, or any purpose beyond fulfilling the notification service.

4. Legal Basis for Processing

Personal data is processed on the basis of consent — the customer explicitly submits their email address to receive a specific notification. Customers may withdraw their consent at any time by contacting the merchant.

5. Data Storage and Security

Subscriber data is stored in a secured database on a private server. Access to the database is restricted to the App's own processes. We do not share, sell, or rent personal data to any third party.

Email notifications are sent using an SMTP email service configured by the merchant. The merchant is responsible for the security and privacy practices of their chosen email provider.

6. Data Retention

Subscriber records are retained until one of the following occurs:

• The notification email has been sent and the merchant manually deletes the record.
• The customer requests deletion (see Section 8).
• The merchant uninstalls the App, triggering deletion of all associated data.

7. Sharing of Data

We do not sell or share personal data with third parties except as strictly necessary to operate the service (e.g., routing an email through the merchant's configured SMTP provider). We do not use advertising networks, analytics services, or tracking pixels.

8. Your Rights (GDPR)

If you are located in the European Economic Area, you have the following rights regarding your personal data:

• Right of access — you may request a copy of the data we hold about you.
• Right to erasure — you may request that your data be deleted at any time.
• Right to object — you may object to the processing of your data.
• Right to withdraw consent — you may withdraw your consent at any time without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, please contact the merchant whose store you used to sign up, or contact us directly using the details in Section 10. We will respond within 30 days.

9. Cookies

The App itself does not set cookies on the customer-facing storefront. The merchant's Shopify theme may set its own cookies independently of this App.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted at this URL with an updated "Last updated" date. Continued use of the App after changes constitutes acceptance of the revised policy.