Privacy policy
Last updated: [date]
Allotment is a Shopify app operated by [Company name, company number, registered address] (“we”, “us”). It helps brands manage staff clothing allowances, approvals and staff discounts. This page explains what information the app handles when a brand installs it, and why.
Who controls the data
The brand that installs Allotment is the controller of its staff’s and customers’ personal data. We act as a processor on the brand’s behalf.
What we handle and why
| Data | Whose | Why |
|---|---|---|
| Shop name, domain and settings | The brand | To run the app for that store |
| Name and email of admin users who open the app | The brand’s team | To record who logged or approved a take, and to manage roles |
| Name, email and Shopify customer ID of customers marked as staff | Staff | To track each person’s allowance and discount |
| Name and email of friends & family added by the brand | Staff’s contacts | To apply the friends & family discount |
| Orders placed by those people (items, prices, discounts, payment type) | As above | To record takes, purchases, salary deductions and balances |
| Product titles, prices, costs, tags and store locations | The brand | To value takes and apply the brand’s rules |
We never collect payment card details. Shopify sends us basic details of each new order so we can check whether the buyer is a staff member or friend & family; orders from anyone else are ignored and not stored.
Where it’s stored
In a database hosted by Render in Frankfurt, Germany (EU). Small pieces of allowance and discount information are also stored on the staff member’s customer record in the brand’s own Shopify store, so the discount can apply at checkout and staff can see their own balance.
Who we share it with
Shopify (the platform the app runs on, and billing) and Render (our hosting provider). We don’t sell personal data or use it for advertising.
How long we keep it
For as long as the brand uses the app. After a brand uninstalls, Shopify asks us to delete the store’s data and we do. When a brand asks Shopify to erase a person’s data, we delete that person’s records.
Your rights
If you’re a member of staff or a friend & family customer, contact the brand to see, correct or delete your data — we’ll help them respond. Brands can contact us at support@getallotment.com.
Security
Data is sent over HTTPS, access within the app is limited by role, and report download links expire after 15 minutes.
Changes
We’ll update this page and the date above if anything changes.