Privacy policy

This policy applies to merchants who install MilestonePay on their Shopify store, to their customers who buy preorders, and to visitors to this website.

1. Who we are

MilestonePay is a Shopify app made and operated by Tiny Tiger Studio ("we", "us"). You can contact us about anything in this policy at hello@tinytiger.studio.

A merchant chooses to use MilestonePay for their store and controls their customers' information. When we process information about a store's customers, we do it on the merchant's behalf and under their instructions, as their service provider (processor). We decide how to use the limited information we need to run our own service, such as store accounts, billing, security and support.

2. Information we process

About stores and their staff

• Store details: the store's Shopify domain and ID, whether the app is installed, the permissions granted to it and the app's settings.
• Staff activity: when staff use the app in Shopify admin, Shopify sends us a signed session token. We use it to confirm the request, and we record the staff account's Shopify ID against changes to product assignments. We don't receive staff passwords.
• Preorder setup: payment plans, product and variant assignments, estimated shipping dates, customer notes, preorder limits and their change history.
• Billing: the store's MilestonePay plan and how many preorder orders it has taken, through Shopify's app billing.
• Support: anything you send us by email.

About a store's customers

• Order details for orders that contain a MilestonePay preorder: items, prices, discounts, taxes, the payment schedule, amounts paid, outstanding and refunded, and fulfillment status.
• Preorder terms and requests: the terms the customer agreed to at checkout, shipping date changes and the customer's response to them, and cancellation requests.
• Identity and contact details, such as the Shopify customer ID, name and email address, only where needed to show customers their own orders and to send order messages the merchant has turned on.
• Payment status: whether a deposit, balance or refund succeeded, is pending or failed.

We never receive or store card numbers or other payment credentials. Shopify and the store's payment provider handle payments, including the saved payment method used for a later balance.

Analytics for store reports

To produce each store's reports, we keep a record of every preorder purchase: the order reference and date, products and variants, plan, quantities, prices, discounts, taxes and currency. These records don't include customer names, contact details or addresses.

Visitors to this website

This website uses no cookies, analytics or tracking scripts. Cloudflare, which hosts it, processes standard request information such as IP address and browser type to deliver pages and protect against abuse.

3. How we use it

We use this information to:

• show agreed preorder terms on the storefront, at checkout and in customer accounts;
• keep plans and assignments up to date;
• collect remaining balances the customer agreed to at checkout, and carry out cancellations and refunds the store or customer asks for;
• send order messages the store has turned on, such as payment reminders, failed-payment notices and shipping updates;
• produce reports for the store;
• bill for the app through Shopify;
• provide support, keep the service secure and investigate problems; and
• meet our legal obligations.

We don't sell personal information, share it for cross-context behavioural advertising, or use it to build profiles of customers.

Where UK or EU data protection law applies to information we use for our own purposes, we rely on performing our agreement with the merchant, on our legitimate interests in running and securing the service, and on legal obligations. Where we act for a merchant, the merchant is responsible for having a lawful basis for its customers' information.

4. Where it's kept and who processes it

MilestonePay doesn't run its own customer or order database. Information is kept with these providers:

• Shopify

  Stores the app's operational data inside the merchant's store: payment plans and their history, assignments, each order's preorder terms, shipping changes, cancellation records and app settings. Shopify also holds the store's orders, customers and payment records, and processes payments, refunds and saved payment methods.

• Fóir

  Runs the app's background work, such as handling Shopify notifications, scheduled checks, balance collection and cancellations, and keeps our store registry and the analytics records described above. It receives only the identifiers and order facts each task needs, and doesn't store customer names, contact details or addresses.

• Cloudflare

  Hosts the app's request handlers, the code that serves the app in Shopify admin, on the storefront and in customer accounts, and hosts this website. Requests pass through Cloudflare's network, and Cloudflare keeps operational logs for a limited time.

• Email delivery provider, only if turned on

  App email is off unless the merchant turns it on. If they do, our email provider receives each recipient's email address and the message so it can deliver it. A merchant can send messages through Shopify Flow instead, in which case the message goes to that store's own Flow workflows, which the merchant controls.

We'll update this list when our providers change.

5. International transfers

Our providers operate internationally, so information may be processed in countries other than the one you live in. Where data protection law requires it, these transfers rely on recognised safeguards, such as standard contractual clauses or an adequacy decision.

6. How long we keep it

While the app is installed

We keep the information described above for as long as the store uses MilestonePay, so that existing preorders can be serviced and reported on, unless a deletion request described below applies sooner.

When a store uninstalls

• We mark the store as uninstalled and stop all background work for it straight away.
• The app's data inside the merchant's Shopify store is deleted by Shopify on its own schedule. Shopify starts deleting it as soon as the app is uninstalled, and deletes MilestonePay's preorder plans 48 hours after uninstall.
• When Shopify then sends its shop redaction request, we delete the store's registry entry and its analytics records.
• The store's orders, customers and payment records belong to the store and stay in Shopify under the merchant's control.

When a customer's data is erased

When a store asks Shopify to erase a customer's data, Shopify forwards the request to us. We then remove that customer's identifying details from the app's records on their orders, including their copy of the preorder terms, cancellation details, shipping change proposals, responses and order messages, and we delete their analytics records. We keep a record, without identifying details, that an order was cancelled, so it can't be cancelled or refunded twice.

Other records

• Operational logs are kept for a limited period for security and troubleshooting, then deleted.
• Email delivery records, if app email is on, are kept by the email provider under its own retention settings.
• Support emails are kept for as long as we need them to help you and keep a record of the issue.

We don't keep our own backup copies of store or customer data outside Shopify and Fóir. Our providers may keep backups under their own policies. Shopify and payment providers keep their own order and transaction records under their own policies, which these steps don't change.

7. Your rights and requests

Depending on where you live, you may have the right to access, correct or delete your personal information, to restrict or object to how it's used, to receive a copy of it, and to complain to a data protection authority.

Customers of a store

If you bought a preorder from a store that uses MilestonePay, contact that store first. The store controls your order information, and most of what MilestonePay holds about your preorder is stored on your order in the store's Shopify admin. The store can ask Shopify to send us a data request or an erasure request, which we act on as described above.

You can also email hello@tinytiger.studio. We'll work with the store to respond, and may need to confirm with the store that the request is yours.

Merchants

Email hello@tinytiger.studio to ask for a copy of, a correction to or deletion of your store's information. We'll check that the request comes from your store before acting on it. Uninstalling the app starts deletion as described in How long we keep it; see also what happens when you uninstall.

8. Security

We verify every request from Shopify, including signed notifications and staff session tokens, before acting on it. The app asks Shopify only for the access it needs, all traffic uses HTTPS, and secret keys are kept out of our source code and away from the browser. If a security incident affects personal information, we'll tell affected merchants as the law requires.

9. Changes to this policy

We'll post any changes on this page and update the date at the top. If a change materially affects how we handle merchants' or customers' information, we'll also let merchants know through the app or by email.

10. Contact

For questions or requests about privacy, email hello@tinytiger.studio. MilestonePay is operated by Tiny Tiger Studio.