Merchant Data Protection Agreement
Effective date:** 4 September 2026
This Merchant Data Protection Agreement (the “Agreement”) forms part of the agreement between FiDevStudio (“FiDevStudio”, “we”, “us”) and the Shopify merchant using Restock Radar (the “Merchant”, “you”). It governs FiDevStudio’s processing of personal data submitted through the Restock Radar app.
1. Roles and instructions
The Merchant remains the data controller for customer and visitor data submitted through its store. FiDevStudio processes that data only to provide, secure, and support Restock Radar, in accordance with the Merchant’s documented instructions and the app configuration. FiDevStudio will not sell the data or use it for advertising or unrelated profiling.
2. Data processed and minimisation
Restock Radar processes the email address a visitor provides for a restock notification, product and variant context, consent and subscription status, notification delivery events, and limited technical metadata needed for abuse prevention and reliability. The app does not intentionally collect customer names, postal addresses, payment data, or phone numbers for this feature.
3. Confidentiality and security
FiDevStudio requires authorised personnel to keep personal data confidential and limits access to what is necessary to operate and support the service. Protected email values and integration credentials are encrypted at rest, traffic is protected with HTTPS/TLS, and privacy-safe access records are retained for security review. Hetzner Cloud backups are enabled and stored encrypted by the provider.
4. Subprocessors and locations
FiDevStudio may use infrastructure and service providers listed in its current privacy notice, including Hetzner for hosting and the configured email delivery provider. FiDevStudio remains responsible for selecting processors that provide appropriate safeguards and will update the privacy notice when subprocessors materially change.
5. Retention and deletion
Personal data is retained only while needed to provide the notification service and is automatically purged according to the app’s retention policy (currently 365 days), unless a longer period is required by law. FiDevStudio will assist with deletion, correction, or access requests and will process Shopify redaction and app-uninstall requests.
6. Security incidents
FiDevStudio maintains an incident-response process. We will notify the Merchant without undue delay after confirming a personal-data breach affecting the Merchant’s data and will provide the information reasonably available to support the Merchant’s legal obligations.
7. Merchant responsibilities
The Merchant must provide appropriate notices, obtain any consent required by applicable law, configure the app lawfully, and respond to customer requests. The Merchant must not submit data that the app does not need for its stated functionality.
8. Contact
Questions or requests about this Agreement or personal data may be sent using the contact details in FiDevStudio’s privacy notice at https://fidevstudio.com/privacy.
By installing or using Restock Radar, the Merchant acknowledges this Agreement and authorises the processing described above.