Privacy Policy - Framefox Connect

1. Introduction

Framefox Ltd ("we", "our", "us") operates Framefox Connect, a Shopify app that integrates your store with Framefox's professional custom framing and printing fulfilment services. This Privacy Policy explains how we handle personal information in accordance with the Privacy Act 2020 (NZ) and Privacy Act 1988 (Cth), as well as Shopify's Protected Customer Data requirements.

By installing or using the Framefox Connect app, you (the "merchant") agree to the collection and use of information in accordance with this policy.

2. What Information We Collect

a. Merchant Information

When you install the app, we collect information required to create and manage your account, such as:

Contact name and email address
Shopify store name and URL
Business name, address, and billing details
App configuration and usage data (e.g. number of synced products, submitted orders)

b. Customer Information (Protected Customer Data)

To process and fulfil orders, the app may access certain customer details from your Shopify store, including:

Customer name and contact information (email, phone, shipping/billing address)
Order details, product variants, and fulfilment preferences

We only access the minimum personal data necessary to provide our service, in line with Shopify's Protected Customer Data requirements.

3. How We Use Information

We use merchant and customer data to:

Sync products and order information between Shopify and Framefox's fulfilment system
Produce and ship custom framed prints to customers on your behalf
Provide order tracking, production status, and notifications back to Shopify
Maintain and improve the app's functionality and support
Communicate updates, invoices, or service notices to merchants

We do not sell, rent, or use customer data for marketing purposes.

4. Data Storage and Retention

All data is stored securely on servers located in Australia and/or New Zealand.
We retain personal information only for as long as required to provide the service or comply with legal and tax obligations.
Merchant account data is retained until you uninstall the app or request deletion.
Customer order data is retained for 2 years to allow reprints, warranty support, or dispute resolution.
Upon request or app uninstallation, we will delete or anonymise personal data unless retention is required by law.

5. Data Security

We take reasonable steps to protect information from unauthorised access, use, or disclosure. Our security measures include:

Encrypted data transmission (TLS/SSL) and storage
Access controls and staff authentication
Encrypted backups and audit logging
Segregation of production and test environments
Incident response processes for data breaches

If a data breach is likely to cause serious harm, we will promptly notify affected merchants and, where required, the NZ Privacy Commissioner and/or the Office of the Australian Information Commissioner (OAIC).

6. Data Disclosure

We may disclose personal information to:

Our fulfilment and logistics partners (for production and delivery)
Payment and accounting providers (for billing)
IT infrastructure or data-hosting partners located in Australia or New Zealand

All third parties must handle data in compliance with applicable privacy laws and only for the purpose of providing contracted services.

We do not transfer data outside Australia or New Zealand unless comparable privacy protections are in place.

7. Your Responsibilities as a Merchant

As a Shopify merchant, you are the data controller for your customers' information. You must ensure your store's privacy policy discloses that customer data may be shared with Framefox Connect for fulfilment purposes.

You must also comply with any applicable privacy obligations in your own jurisdiction (e.g. obtaining consent where required).

8. Access, Correction, and Deletion Rights

You and your customers have the right to request access to, correction of, or deletion of personal information held by us.

Requests can be made by contacting us (see Section 11). We will respond within a reasonable timeframe in accordance with privacy law requirements.

9. Cookies and Analytics

Framefox Connect does not use cookies for tracking customers.

We may use anonymised analytics within the merchant interface to improve performance and reliability of the app.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be posted within the app and on our website, with the revision date clearly stated.

Material changes will be communicated via email or app notification.

11. Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact:

Framefox Ltd

https://www.framefox.co/pages/contact