Last updated: June 19, 2026

Privacy Policy

This policy explains how Florian ALBORA ("WithdrawKit", "we", "us") collects, uses, and protects personal data in accordance with the EU General Data Protection Regulation (GDPR).

1. Data Controller

The data controller is:

Florian ALBORA
1 rue Claude Nougaro
31180 Lapeyrouse-Fossat
France
SIRET: 84252786300018

2. Data We Collect

2.1 Merchant Data (App Users)

• Shopify store URL and shop name
• Merchant email address (from Shopify OAuth)
• App configuration settings
• Billing information (processed by Shopify — we do not store payment data)

2.2 End-Customer Data

• Name and email address (submitted during the withdrawal process)
• Order number and withdrawal date/time
• IP address (for fraud prevention and audit compliance)

2.3 Usage Data

• App interaction logs (anonymised)
• Error reports and performance metrics

3. Legal Basis for Processing

• Contract performance (Art. 6(1)(b) GDPR): processing necessary to provide the withdrawal service.
• Legal obligation (Art. 6(1)(c) GDPR): maintaining audit records as required by EU Directive 2023/2673.
• Legitimate interests (Art. 6(1)(f) GDPR): fraud prevention, security, and service improvement.

4. Data Storage & Transfers

All personal data is stored on servers located within the European Union ([DATA CENTER LOCATION, e.g., Frankfurt, Germany]). We do not transfer data outside the EEA without appropriate safeguards.

5. Third-Party Processors

• Shopify Inc. — e-commerce platform, payment processing
• [EMAIL PROVIDER] — transactional email delivery
• [HOSTING PROVIDER] — infrastructure (EU-based)

6. Data Retention

• Withdrawal audit records: retained for [X] years (as required by applicable law)
• Merchant account data: retained for the duration of the subscription + 30 days after cancellation
• Usage logs: anonymised after 90 days

7. Your Rights

Under GDPR, you have the right to: access, rectification, erasure, restriction of processing, data portability, and objection. To exercise these rights, use the contact channel published on the Shopify App Store listing or inside the WithdrawKit app. You may also lodge a complaint with your national data protection authority.

8. Cookies

This website uses cookies. See our Cookie Policy for details.

9. Changes to This Policy

We may update this policy. Material changes will be notified via email or in-app notice at least 30 days before taking effect.

10. Contact

Privacy questions: use the contact channel published on the Shopify App Store listing or inside the WithdrawKit app.