Privacy Policy

PriceProof: Textile Label — Privacy Policy

Effective: 2026-07-13

Gyutae Oh (sole proprietor) ("we") provides the PriceProof: Textile Label Shopify app, which helps merchants display, validate, and export the fibre-composition information described by the EU Textile Regulation (Reg (EU) No 1007/2011). This policy explains what personal data we process. We are an independent data controller for the limited account data described below. We do not collect, receive, or store your customers' (consumers') personal data.

1. What we collect

• Shop identifiers & owner contact: your myshopify domain, shop owner name and email, and the OAuth access token issued by Shopify at install. Used to operate the App, bill you, and provide support.
• Product & composition data you enter: product identifiers and the fibre-composition entries (fibre names and percentages) you choose to publish, together with the validation state the App computes from them. These are commercial and product-labelling data you elect to display on your own storefront; they contain no personal data.

We request only the write_products API scope (product read and metafield read/write) needed to store and mirror your composition fields. We do not request the orders or customers API scopes and do not process consumer personal data. Compliance webhooks that Shopify requires us to register (customers/data_request, customers/redact) may deliver a payload containing a customer identifier; we do not store the body of these payloads — we acknowledge receipt only.

2. Legal bases (GDPR)

Performance of our contract with you (providing and billing the App) and our legitimate interests in operating, securing, and supporting the service.

3. Where data is stored

Our servers are located in the European Union (Frankfurt, Germany), hosted on Fly.io. Your data does not leave the EU, so no third-country transfer mechanism (adequacy decision, Standard Contractual Clauses) is needed. Product identifiers and composition fields are commercial/labelling data.

4. Retention & deletion

We retain your composition fields and product data for as long as needed to provide the service (and for the audit-evidence exports you rely on). When you uninstall, Shopify sends a shop/redact request approximately 48 hours later; we permanently delete your shop's data within 30 days of receiving it.

5. Sharing

We do not sell your data and do not use data from one merchant for the benefit of another (no cross-merchant use). Subprocessors (hosting) act on our behalf under contract; a current list is available on request.

6. Your rights

You may request access, correction, deletion, or export of your account data, or object to processing, by contacting us at nsjokt@gmail.com. You may also lodge a complaint with a supervisory authority. We respond to requests within 30 days.

7. EU representative (Art. 27 GDPR)

An EU representative under Art. 27 has not yet been appointed. When appointed, their name and contact details will be listed here. Until then, contact us directly at nsjokt@gmail.com.

8. Contact

Controller: Gyutae Oh (sole proprietor), nsjokt@gmail.com