Effective date:** 17 July 2026<\/p>\n\n\n\n
CheckoutControl (the App<\/strong>) is provided by P\u00e9ter Kiss, a self-employed sole Provider:<\/strong> P\u00e9ter Kiss, self-employed sole trader (aut\u00f3nomo) For personal information about a merchant’s buyers, the merchant generally When a merchant installs or uses the App, Shopify can provide and the App can To evaluate the merchant’s rules during a cart or checkout, CheckoutControl’s The current Function inputs do not<\/strong> request a buyer’s customer ID, name, When enabled by the merchant, the theme app block writes If a merchant contacts support, we receive the information they choose to send, The App creates limited operational logs containing events such as shop domain, We use information to:<\/p>\n\n\n\n For controller-side processing, we rely on performance of the merchant contract We do not use buyer information for advertising, data-broker activity, or CheckoutControl depends on:<\/p>\n\n\n\n Shopify’s privacy terms and Data Processing Addendum are available at We can also disclose information when required by law, to protect rights or The App is operated from Spain. Railway stores and processes the production Shopify requires App Store apps to act on valid privacy requests within 30 days, Depending on applicable law, an individual may have rights to access, correct, Buyers should normally submit requests to the Shopify merchant that operates the P\u00e9ter Kiss records each request and its deadline, verifies the requester using The current App uses Shopify OAuth, Shopify’s webhook authentication, encrypted We may update this policy when CheckoutControl, our providers, or legal Questions or privacy requests can be sent to:<\/p>\n\n\n\n P\u00e9ter Kiss, trading as 8DIGITS Digital Marketing Effective date:** 17 July 2026 CheckoutControl (the App) is provided by P\u00e9ter Kiss, a self-employed soletrader (aut\u00f3nomo) established in Spain, trading as 8DIGITS Digital Marketing(we, us, or our). This policy explains how the Appprocesses information when a Shopify merchant installs or uses CheckoutControl. 1. Who is responsible Provider: P\u00e9ter Kiss, self-employed sole trader (aut\u00f3nomo)Registered address: […]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"nf_dc_page":"","om_disable_all_campaigns":false,"inline_featured_image":false,"footnotes":""},"class_list":["post-4490","page","type-page","status-publish","hentry"],"jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/blue.8digits.es\/es\/wp-json\/wp\/v2\/pages\/4490","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blue.8digits.es\/es\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/blue.8digits.es\/es\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/blue.8digits.es\/es\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blue.8digits.es\/es\/wp-json\/wp\/v2\/comments?post=4490"}],"version-history":[{"count":3,"href":"https:\/\/blue.8digits.es\/es\/wp-json\/wp\/v2\/pages\/4490\/revisions"}],"predecessor-version":[{"id":4502,"href":"https:\/\/blue.8digits.es\/es\/wp-json\/wp\/v2\/pages\/4490\/revisions\/4502"}],"wp:attachment":[{"href":"https:\/\/blue.8digits.es\/es\/wp-json\/wp\/v2\/media?parent=4490"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
trader (aut\u00f3nomo) established in Spain, trading as 8DIGITS Digital Marketing
(we<\/strong>, us<\/strong>o our<\/strong>). This policy explains how the App
processes information when a Shopify merchant installs or uses CheckoutControl.<\/p>\n\n\n\n1. Who is responsible<\/h2>\n\n\n\n
Registered address:<\/strong> Calle Las Huertas 15, Frigiliana, 27988 M\u00e1laga, Spain
Registration and tax number:<\/strong> ESZ0486396C
Privacy contact:<\/strong> support@8digits.es
DPO or representative:<\/strong> A separate Data Protection Officer or EU\/UK
representative has not been appointed because the owner determined that one is
not required for the current processing. P\u00e9ter Kiss remains the privacy contact.<\/p>\n\n\n\n
decides why CheckoutControl is used and should be the buyer’s first contact.
We act as an independent controller for merchant account details, support
correspondence, security logs, billing records, and our own legal compliance.
When CheckoutControl processes merchant buyer data solely to provide the App
under the merchant’s instructions, we act as the merchant’s processor or
service provider. Shopify executes the Functions described below, and the
current App does not persist their buyer\/cart input in its application database.<\/p>\n\n\n\n2. Information CheckoutControl processes<\/h2>\n\n\n\n
Merchant and app-user information<\/h3>\n\n\n\n
store:<\/p>\n\n\n\n\n
myshopify.com<\/code> domain and installation timestamps.<\/li>\n\n\n\n
session expiry information, and authentication state.<\/li>\n\n\n\n
first and last name, email address, locale, account-owner or collaborator
status, and email-verification status.<\/li>\n\n\n\n
conditions, and payment, delivery, or COD-fee actions.<\/li>\n\n\n\n
names or handles, Shopify Function owner IDs, and the supporting fee-variant
ID.<\/li>\n\n\n\n
type, amount, label, and supporting Shopify product-variant ID.<\/li>\n<\/ul>\n\n\n\nBuyer and cart information processed by Shopify Functions<\/h3>\n\n\n\n
Shopify Functions can transiently process the minimum fields needed for the
configured rules:<\/p>\n\n\n\n\n
membership, variant weight and weight unit, and cart amounts and currency.<\/li>\n\n\n\n
merchant. Shopify returns tag-membership results; CheckoutControl does not
request the customer’s tag list.<\/li>\n\n\n\n_cod_selected<\/code>, which records whether the buyer selected
the cart-page COD option.<\/li>\n<\/ul>\n\n\n\n
email address, phone number, or order history. CheckoutControl does not persist
the Function’s buyer\/cart input in its application database. Shopify executes
the Functions and applies their returned payment, delivery, or cart-transform
operations.<\/p>\n\n\n\nCart-page selector<\/h3>\n\n\n\n
_cod_selected<\/code> as a
Shopify cart attribute through Shopify’s cart API. The App’s current source does
not add advertising, marketing, or behavioral-analytics trackers to the
storefront. Shopify and the merchant’s theme or other apps may independently
use cookies or similar technologies under their own policies.<\/p>\n\n\n\nSupport and operational information<\/h3>\n\n\n\n
such as contact details, store domain, screenshots, and troubleshooting details.
Do not send access tokens, passwords, payment-card data, or unnecessary buyer
information.<\/p>\n\n\n\n
webhook topic, Function registration or configuration status, payload size, and
error details. Compliance-webhook payload bodies and their customer or order
identifiers are not intentionally logged by the current source.<\/p>\n\n\n\n3. How information is used<\/h2>\n\n\n\n
\n
and service reliability.<\/li>\n\n\n\n
where Article 6(1)(b) GDPR applies; our legitimate interests under Article
6(1)(f) in operating, securing, supporting, debugging, preventing abuse, and
improving the App’s reliability; and Article 6(1)(c) legal obligations for tax,
accounting, regulatory, privacy, and lawful-request compliance. Where a future
optional purpose requires consent, we will request it before that processing.
The current source has no advertising or behavioral-analytics purpose.<\/p>\n\n\n\n
independent profiling. We do not sell or share personal information as those
terms are defined by the California Consumer Privacy Act.<\/p>\n\n\n\n4. Service providers and disclosures<\/h2>\n\n\n\n
\n
cart storage, Functions execution, and checkout processing.<\/li>\n\n\n\n
database hosting.<\/li>\n<\/ul>\n\n\n\n
https:\/\/www.shopify.com\/legal\/privacy and https:\/\/www.shopify.com\/legal\/dpa.
Railway’s privacy policy, terms, and Data Processing Addendum are available at
https:\/\/railway.com\/legal\/privacy, https:\/\/railway.com\/legal\/terms, and
https:\/\/railway.com\/legal\/dpa. The current source uses no other runtime
subprocessors.<\/p>\n\n\n\n
security, in connection with a business transaction, or with the merchant’s
instructions. We require service providers to process information only for the
agreed services and subject to appropriate safeguards.<\/p>\n\n\n\n5. International transfers and hosting location<\/h2>\n\n\n\n
application and PostgreSQL database in the EU. Shopify and Railway may process
information in other locations as described in their applicable terms and
DPAs. Where required, international transfers are protected through applicable
adequacy mechanisms, standard contractual clauses, or other lawful safeguards.<\/p>\n\n\n\n6. Retention and deletion<\/h2>\n\n\n\n
\n
needed to provide the App.<\/li>\n\n\n\n
rows when it receives a valid uninstall or shop\/redact<\/code> event.<\/li>\n\n\n\n
Function inputs described above.<\/li>\n\n\n\n
aged out within 90 days after uninstall or a valid deletion request.<\/li>\n\n\n\n
or defend legal claims, or to prevent fraud or abuse.<\/li>\n<\/ul>\n\n\n\n
subject to lawful retention exceptions.<\/p>\n\n\n\n7. Privacy requests and choices<\/h2>\n\n\n\n
delete, restrict, object to, or receive a portable copy of personal information,
and to complain to a data-protection authority.<\/p>\n\n\n\n
store. Merchants and other individuals can contact support@8digits.es. We may need
to verify the request and coordinate with the relevant merchant and Shopify.
The App is subscribed to Shopify’s mandatory customers\/data_request<\/code>,customers\/redact<\/code>y shop\/redact<\/code> compliance webhooks.<\/p>\n\n\n\n
the least additional information reasonably necessary, identifies the relevant
merchant and responsible party, coordinates with the merchant and Shopify,
searches applicable app, session, support, and operational records, and carries
out the applicable access, correction, export, restriction, or deletion. We
respond within 30 days unless applicable law permits an extension. Backups age
out under the retention schedule above, and a minimal response record is kept
under the support-record schedule.<\/p>\n\n\n\n8. Security<\/h2>\n\n\n\n
HTTPS connections, restricted OAuth scopes, and access-controlled production
services. Railway provides encryption at rest, managed backups, access controls,
access reviews, incident-response procedures, and secret-rotation controls for
the production application and PostgreSQL database. No internet service is
completely secure.<\/p>\n\n\n\n9. Changes to this policy<\/h2>\n\n\n\n
requirements change. We will post the revised policy at
https:\/\/8digits.es\/checkoutcontrol-privacy-policy\/ and update the effective
date. Where required, we will provide additional notice.<\/p>\n\n\n\n10. Contact<\/h2>\n\n\n\n
Calle Las Huertas 15, Frigiliana, 27988 M\u00e1laga, Spain
support@8digits.es<\/p>","protected":false},"excerpt":{"rendered":"