Privacy policy
Last updated: 13 October 2026
B2B Catalog Guard ("the app") is a Shopify app published by Elektraset, s.r.o. ("we", "us"). This policy explains which data the app processes when a merchant installs it, why, and for how long. Contact: help@elektraset.com.
Who is responsible
For data about the merchant's store and its staff, we are the controller. For data about the merchant's business customers (wholesale applicants and company contacts), the merchant is the controller and we process it on the merchant's behalf, only to provide the app.
Data the app processes
| Data | Source | Purpose |
|---|---|---|
| Store domain, store name, currency, Shopify plan type | Shopify Admin API | Install, plan limits, the non-Plus catalog limit |
| B2B markets, catalogs, price list adjustments, company and company location names, IDs and countries | Shopify Admin API | Assignment rules, review queue, visibility audit |
| Products tagged as B2B-only: title, tags, publication state, SEO-hidden flag, prices for audit contexts | Shopify Admin API | Visibility audit, B2B-first launches |
| Wholesale applications sent through the storefront form: business name, contact name, email, phone, country, business type, tax or licence number, message | The applicant, on the merchant's storefront | Review queue; on approval, the app creates the company, location and contact in the merchant's Shopify store |
| Audit log of the app's changes (what changed, when, before and after) | The app | Rollback and accountability |
| App subscription state (plan, price, status) | Shopify Billing API | Plan limits and aggregated revenue reporting |
The app does not read orders, payment details or customer accounts of retail shoppers. It does not use cookies or tracking on the storefront and adds no script to the theme.
Sharing
We do not sell data and do not share it with third parties, except: Shopify (the app runs on Shopify's APIs), and our hosting provider that runs the app server and its database. We may disclose data when the law requires it.
Aggregated statistics
We count, per calendar month, how many stores installed the app, reached a first result, used it again and pay for a plan. These counts contain no store names, domains or personal data. Development and test stores are excluded.
Retention
- Store data and the audit log are kept while the app is installed.
- When a store uninstalls the app, Shopify sends a shop data erasure request 48 hours later; we then delete the store's rules, applications, audit runs, audit log, launches and imported B2B data.
- When Shopify forwards a customer erasure request, we remove the applicant's personal details from the store's applications.
- Billing records without personal data are kept for accounting.
Security
Data is sent over HTTPS only. Access to the Shopify Admin API uses Shopify's OAuth tokens, stored on our server and never shown in the app. Requests from Shopify (webhooks, storefront form) are verified with Shopify's signatures.
Your rights
Applicants and other individuals can ask the merchant to access, correct or delete their data; merchants can contact us for any request at help@elektraset.com. Under the GDPR you also have the right to complain to a data protection authority (in Slovakia: Úrad na ochranu osobných údajov SR).
Changes
We publish changes to this policy on this page with a new date.
Elektraset, s.r.o. · help@elektraset.com · https://elektraset.com/