Privacy Policy

Version 1.0 - 2 Januari 2026

This Privacy Policy describes how PureLabs (a trading name of KrachtOnline) collects, uses, and shares personal data when you install or use our Shopify application(s) (the "App") in connection with your Shopify store (the "Service").

  1. Personal Information We Collect

We may collect:

  • Store and contact information: shop domain (store URL), store name, and the contact email linked to the installation.

  • Technical logs: IP address, timestamps, request identifiers, error reports, and basic device or browser details needed to operate and secure the Service.

  • Inventory related data: product and variant identifiers and inventory levels provided by Shopify via APIs and webhooks.

We do not intentionally collect or store personal data of your customers. We do not receive customer names, email addresses, or addresses through the App.

Cookies and tracking: we do not use tracking cookies or analytics tools for advertising at this time. The App may use strictly necessary technical storage to authenticate inside the Shopify admin.

  1. How We Use Your Personal Information

We use personal data to:

  • Provide and operate the Service (including processing inventory updates).

  • Provide support, troubleshoot issues, and maintain security and abuse prevention.

  • Comply with legal obligations and enforce our Terms.

Legal bases (GDPR): contract performance (providing the Service), legitimate interests (security, fraud prevention, service improvement), and legal obligation (where applicable).

  1. Sharing Your Personal Information

We share personal data only as needed to operate the Service:

  • Shopify: APIs and webhooks for integration, authentication, and Shopify Billing.

  • Infrastructure provider: DigitalOcean (primary infrastructure in the Netherlands, EU).

  • Legal requirements and advisors: where required by law or to protect rights and security.

We do not sell your personal data and we do not share it for third-party marketing.

International transfers: we aim to store App data in the EU. Shopify may process data in other regions as an independent platform provider.

  1. Your Rights and Choices

You may have rights under applicable data protection laws, such as access, correction, deletion, and portability, and the right to object or restrict processing. Contact us to exercise these rights.

Data processing and DPA: for store data processed to provide the Service, we generally act as a processor and you act as controller. For our own support and security logs, we may act as controller. You can request a Data Processing Agreement (DPA) via email.

  1. Data Retention

We keep personal data only as long as needed to provide the Service.

After uninstall, Shopify triggers mandatory erasure webhooks (such as shop/redact). We delete the store data linked to the installation after receiving those requests, typically within 48 hours from the uninstall and redaction flow.

  1. Security

We use reasonable measures to protect personal data (encryption in transit, access controls, and monitoring). No method is completely secure.

  1. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will post the updated version and change the Last Updated date. If changes are material, we may notify you through the App or by email.

  1. Contact Us

For privacy questions or requests:

PureLabs (trading name of KrachtOnline)
Chamber of Commerce (KvK): 60514612
Establishment number: 000029703875
De Hooght 58, 3353CP Papendrecht, The Netherlands
Email: support@purelabs.app