Privacy policy

Last updated: 14 June 2026

Who we are

This policy explains how Elarix Dev Ltd (“we”, “us”) handles personal data across this website and the apps we build and operate, including our Shopify apps. Elarix Dev Ltd is registered in England and Wales, number 17267063, with its registered office at Unit 3, Twenty4 Secure Storage, Leeds, LS12 4HP, United Kingdom. Our website is elarixdev.com. For any question about this policy or how your data is handled, contact info@elarixdev.com.

Scope

This policy covers our website and our apps generally. Each app collects only the data it needs to do its job, so the exact data involved depends on which app you use. Where an app’s listing or settings describe anything more specific, that description applies alongside this policy.

Our role

When you install one of our apps on your store, you are the data controller for your customers’ personal data and we act as a data processor on your behalf and on your instructions. For visitors to this website, and for operational data about merchants and their use of our apps, we act as a controller.

What we collect

From visitors to this website we collect what you choose to send us, such as your name, email address and message when you contact us, along with basic technical data needed to serve the site.

From merchants who install our apps we hold the store domain, the app settings and configuration, contact details and a record of the plan in use.

Through our apps we process the data each app needs to function. Depending on the app this can include a customer’s name, email address, store identifiers and content they submit. Some apps process special-category data under UK GDPR, such as information about a person’s health or disability, but only where the app’s purpose requires it and only to deliver that function, for example an app that records a customer’s eligibility for a tax relief on disability grounds.

How we use it and our legal basis

We use this data to provide and operate the website and the apps, to deliver the specific function each app performs, to support our users and to meet our legal obligations. For merchants our lawful basis is the performance of our contract with them. Where an app processes a customer’s data, the merchant relies on the customer’s own provision of it and their consent, and we process it under the merchant’s instructions. Special-category data is processed only on the basis of the customer’s explicit provision of it for the stated purpose.

Who we share it with

We do not sell personal data and we do not share it for advertising. We use a small number of trusted providers to run our services, each processing data only as needed and depending on the app. They fall into these categories:

• Shopify, the platform our Shopify apps run on.
• Application hosting, such as Railway and Fly.io.
• Databases, such as MongoDB and Neon.
• File storage, such as Cloudflare R2.
• Email delivery, such as SendGrid and Resend.
• AI processing, such as Anthropic, for apps with assistant features.

We otherwise share data only with the merchant whose store collected it, and where we are required to by law.

International transfers

Some providers may process data outside the UK. Where they do, the transfer is covered by appropriate safeguards such as the UK International Data Transfer Agreement or equivalent terms.

How long we keep it

We keep personal data while it is needed for the purpose it was collected and while the relevant app or account is in use. Merchants can erase customer data they control from within the relevant app, and erasure also runs automatically when Shopify sends a redaction request. We delete or anonymise data when it is no longer needed, subject to any legal retention obligations that apply to us or to the merchant.

Security

Data is encrypted in transit. Files such as generated documents are held in private storage reachable only through short-lived links. Access to systems is restricted and credentials are rotated.

Your rights

Depending on your role you have rights over your personal data, including access, correction, erasure, restriction and objection. You can also complain to the Information Commissioner’s Office. If you are a customer of a merchant who uses one of our apps, the merchant is the controller of your data, so please direct requests to them in the first instance, and we will assist them in meeting the request.

Cookies

This website uses only the cookies needed to run it. Our embedded apps use only the cookies and tokens needed to authenticate the merchant within Shopify. We do not use advertising or cross-site tracking cookies.

Children

Our website and apps are tools for businesses and are not directed at children.

Changes

We may update this policy and will change the date above when we do. Material changes will be communicated through the website or the relevant app.

Contact

Elarix Dev Ltd, Unit 3, Twenty4 Secure Storage, Leeds, LS12 4HP, United Kingdom. Email: info@elarixdev.com.