Privacy Policy

Last updated: 5 June 2026

This Privacy Policy explains how Aspen Consulting ("we", "us", "our") collects, uses, and protects data when you install and use our Shopify application (the "App"). We are committed to protecting your privacy and complying with applicable data protection laws, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Data Controller

The data controller is Aspen Consulting, registered in the United Kingdom. For any privacy-related queries, please contact us at contact@aspenconsulting.co.uk.

2. What Data We Collect

When you install the App, we collect and store:

• Your Shopify store domain and access token (for API authentication)
• Store owner name and email address
• Product catalogue data (titles, SKUs, descriptions) necessary for HS code classification
• App configuration and settings you provide

3. How We Use Your Data

We use the data we collect solely to:

• Provide and operate the App's core functionality
• Respond to support requests
• Improve the App based on usage patterns
• Comply with legal obligations

We do not sell, rent, or share your data with third parties for marketing purposes.

4. Third-Party Processors

We use the following sub-processors to operate the App:

• MongoDB Atlas — cloud database hosting (data stored in the EU)
• Railway — application hosting and deployment
• OpenAI — AI classification model provider (product data only, no personal data)
• Shopify — the platform through which the App operates

5. Data Retention

We retain your data for as long as the App is installed on your store. When you uninstall the App, we process Shopify's mandatory GDPR webhooks to delete or anonymise your data within 30 days.

6. Your Rights Under UK GDPR

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data ("right to be forgotten")
• Object to or restrict processing of your data
• Lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk

To exercise any of these rights, please contact us at contact@aspenconsulting.co.uk.

7. Security

We implement appropriate technical and organisational measures to protect your data against unauthorised access, alteration, disclosure, or destruction.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the "Last updated" date above.

9. Contact Us

If you have any questions about this Privacy Policy, please contact us at contact@aspenconsulting.co.uk.