Shopify merchant data-processing terms

Effective: 11 August 2026

These terms supplement the ClickSight Terms of Service and Privacy Policy when a merchant connects a Shopify store. By linking the app to a ClickSight workspace, the merchant instructs ClickSight to process Shopify store data solely to provide and secure the ClickSight analytics service.

Roles and instructions

The merchant is the controller or business for personal data from its store, and ClickSight acts as its processor or service provider. ClickSight will process that data only on the merchant’s documented instructions, these terms, and applicable law, and will notify the merchant if an instruction appears unlawful where permitted.

Confidentiality and security

ClickSight restricts access to authorised personnel and services subject to confidentiality obligations. It maintains appropriate technical and organisational safeguards, including encrypted transport, protected storage, access controls, tenant isolation, audit records and credential rotation.

Service providers

ClickSight may engage service providers needed for hosting, databases, communications and operations. ClickSight remains responsible for their processing under written protections appropriate to the services they perform and will provide information about material providers on request.

Rights, incidents and deletion

Taking account of the nature of the processing, ClickSight will reasonably assist the merchant with customer rights requests, security obligations and regulator enquiries. ClickSight will notify the merchant without undue delay after confirming a personal-data breach affecting its Shopify data. On termination or a valid deletion request, ClickSight deletes or de-identifies data that is no longer required, except where retention is required by law.

Contact

Data-protection enquiries: privacy@clicksight.co