Privacy Policy

Introduction

Catwalk Dropship ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our dropshipping platform and Shopify application.

Information We Collect

Account Information

When you install the Shopify app, apply as a supplier, or receive portal access, we may collect:

• Email address
• Name and company name
• Phone number (optional)
• Business address

Shopify Store Data

When you connect your Shopify store, we access:

• Store name and domain
• Product information (for syncing imported products)
• Order information (for fulfillment purposes)
• Customer shipping addresses (for order fulfillment only)

Payment Information

App subscription billing is handled by Shopify Billing. Merchant payments for product and shipping order costs are handled by Stripe. We do not store your full credit card details. Stripe's privacy policy applies to card payment data.

Supplier Applications and Accounts

When a supplier applies to join or uses the supplier portal, we collect:

• Business identity, company, VAT, and contact details
• Catalogue website, product categories, and catalogue size
• Information about single-unit fulfilment, dispatch, and white-label shipping
• Supplier products, inventory, assigned orders, and tracking updates

Supplier Referrals and Payouts

When Supplier Direct or supplier payouts are used, we collect:

• Referral code visits, attribution dates, and the referred Shopify store domain
• Supplier-to-retailer relationship and qualification status
• Stripe connected account identifiers, onboarding status, and outstanding requirement status
• Transfer, payout, fee, refund, dispute, and reversal records

Stripe collects identity, business, bank account, and verification information directly. We do not store suppliers' full bank account details.

Prospective Supplier Business Contacts

We may collect limited business contact information about wholesalers, manufacturers, and other potential suppliers from public business sources. This may include:

• Business name, website, product category, and country
• Public role-based business email addresses and telephone numbers
• Public contact names and job roles where relevant to a supplier relationship
• The source and date on which the information was checked
• Our contact history, replies, and do-not-contact status

Sources may include the business's own website or catalogue, Companies House, public trade directories, search results, and information the business provides directly.

How We Use Your Information

We use the collected information to:

• Provide and maintain our dropshipping services
• Sync products to your Shopify store
• Process and fulfill orders
• Send order status updates and notifications
• Process Shopify Billing subscriptions for app access
• Process product and shipping order-cost payments
• Assess supplier applications and operate supplier portal access
• Introduce our supplier programme to relevant established businesses
• Respond to supplier interest and manage supplier onboarding conversations
• Route paid order items to the correct supplier for dispatch
• Attribute qualified Supplier Direct retailer relationships
• Calculate supplier commissions and reconcile transfers, payouts, refunds, and disputes
• Provide customer support
• Improve our services

Lawful Basis for Business Outreach

Where permitted, we rely on our legitimate interests to identify and contact relevant businesses about a potential supplier relationship. We limit initial outreach to information that is relevant to the person's business role, use public business sources, explain why we are contacting the business, and provide a clear way to object. Where consent is required by applicable electronic marketing law, we will obtain consent before sending marketing email.

You have an absolute right to object to the use of your personal data for direct marketing. Tell us at any time by replying to the message or emailing privacy@catwalkdropship.com. We will stop the outreach and retain only the minimum suppression record needed to prevent future contact.

Data Sharing

We do not sell your personal information. We may share data with:

• Shipping carriers - to fulfill and deliver orders
• Payment processors - to process product and shipping order-cost transactions (Stripe)
• Stripe Connect - to verify suppliers, maintain connected accounts, and transfer supplier funds
• Shopify - for app authentication, product sync, order fulfillment, and app billing
• Approved suppliers - to fulfil only the paid order items assigned to them, including the delivery details needed for dispatch
• Service providers - who assist in operating our platform (hosting, email)
• Business communication providers - to deliver, secure, and manage supplier correspondence

Data Security

We implement industry-standard security measures to protect your data:

• All data is transmitted over HTTPS/TLS encryption
• Shopify access tokens are encrypted at rest using AES-256
• We use secure, SOC 2 compliant hosting providers
• Access to customer data is restricted and logged

Data Retention

We retain your data for as long as your account is active or as needed to provide services. Order data is retained for 7 years for legal and accounting purposes. Supplier application data is retained only as long as needed to assess the application, maintain appropriate business records, and meet legal obligations. Prospective supplier contact records are reviewed regularly and removed when they are no longer needed. Do-not-contact suppression records are retained only to ensure that an objection is respected. You can request deletion of your account and associated data at any time.

Your Rights

Under GDPR and UK data protection laws, you have the right to:

• Access - Request a copy of your personal data
• Rectification - Correct inaccurate data
• Erasure - Request deletion of your data
• Portability - Receive your data in a portable format
• Object - Object to certain processing activities, including direct marketing

To exercise these rights, contact us at privacy@catwalkdropship.com

Shopify App Permissions

Our Shopify app requests the following permissions:

• read_products, write_products - To import and sync products to your store
• read_orders - To receive and process customer orders
• write_fulfillments - To update order fulfillment status and tracking
• read_inventory - To check stock availability

Cookies

We use first-party cookies for authentication, session management, Shopify installation security, and Supplier Direct referral attribution. Referral attribution cookies expire after 30 days and are used only to connect a supplier's referral with a qualifying retailer's Shopify store. We do not use third-party advertising cookies.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or through our platform.

Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at:

• Email: privacy@catwalkdropship.com
• Operator: Ctrl Alt Del Limited, trading as Catwalk Dropship
• Company number: 12444061
• Registered office: 28 Franklin Road, Headington, Oxford, OX3 7RZ, United Kingdom