Privacy policy

The merchant determines program rules and the legal basis and acts as controller. PIKASTORE s.r.o. operates Loyalty x Qualify as processor under the DPA incorporated into the Terms.

We process customer Shopify IDs, names, emails, language, optional birthday day/month, consent, opt-outs, points, necessary order amounts/items, tiers, rewards and referrals. Uses are limited to program operation, import matching, communication, reporting and requests. Referral checks use matching IDs or email HMACs; the app does not retain or request addresses or phones. Webhook payloads are minimized before storage.

Hosting is provided by netcup GmbH in Germany. Resend is the default email provider; merchants may configure their own SMTP. Optional Klaviyo receives email identity and loyalty events. Shopify receives necessary IDs and discount information; optional sync sends points, tier and birthday day/month. Encrypted offsite backups are designated for Google Drive. The DPA describes subprocessors and transfers.

We do not sell personal data, use it for advertising or make automated decisions with legal or similarly significant effects. Points, tiers and abuse checks follow program rules and merchants can address objections. Opt-out blocks loyalty emails and Klaviyo; smart campaigns require marketing consent and monthly summaries need a separate opt-in. Not all other loyalty messages require newsletter consent; merchants must establish the appropriate legal basis.

Referral links persist in the browser for 30 days; notification preferences and frequency are stored locally. We record the first click on a signed program link. Optional open tracking via a pixel is off by default. These metrics do not retain IP addresses or user agents.

Program records remain for the service lifetime. Security specifies timed retention for imports, emails, logs and backups. Uninstall stops the program; shop/redact deletes shop data. customers/redact removes identifying details while preserving point amounts. Backups and external providers require separate erasure procedures rather than immediate webhook deletion.

For access, correction, erasure, restriction, portability, objection or withdrawal of consent, contact the merchant; we assist with verified requests. You may complain to the competent supervisory authority. App and privacy contact: info@pikastore.cz.

PIKASTORE s.r.o. · IČO 19693311 · Rybná 716/24, 110 00 Praha 1 · info@pikastore.cz