Last updated: April 2026
From your customers who submit a withdrawal we collect only what the EU Consumer Rights Directive requires us to record: customer name, email address, and order number. Optional fields (phone, items, reason) are only stored if the customer chooses to provide them. From merchants who install the app we store shop domain, OAuth access token (encrypted at rest), email, and billing status. We never collect payment card data.
To deliver EU Right-of-Withdrawal compliance: routing the customer's request to the merchant, audit-trail generation, and required regulatory reporting. We never sell or share data with third parties for marketing.
Merchant data is purged within 30 days of app uninstall. The Shopify access token is wiped immediately on uninstall via our automated trigger. Customer withdrawal records are retained for 24 months as required by EU consumer-protection law, then deleted. You can request earlier deletion via customers/redact and shop/redact Shopify webhooks.
Under the EU General Data Protection Regulation (GDPR) you have the right to access, rectify, erase, restrict, port and object to the processing of your personal data, and to lodge a complaint with your national supervisory authority. Email privacy@withdrawl.eu with your request — we respond within 30 days.
All data is encrypted in transit (TLS 1.2+) and at rest. Row-level security policies isolate every store's data. Webhooks are HMAC-verified. Sessions use httpOnly secure cookies.
privacy@withdrawl.eu — Mintagency OÜ