Privacy policy

Last updated: 11 October 2026

This policy explains how Elektraset, s.r.o. ("we") handles personal data in the Shopify app PriceLater Wholesale ("the app"). The merchant who installs the app is the controller of their customers' data; we process it on the merchant's behalf as a processor, only to provide the app.

Data we process

• Merchant data: the shop domain, the shop name, currency and contact email, the app settings, and the access token that Shopify gives the app.
• Wholesale customer data: for the customers that the merchant enables for wholesale: the Shopify customer ID, name, email address and the invoicing terms.
• Order data: the order requests (products, quantities, delivery date and notes), the final quantities and prices, the Shopify order IDs and names, the invoices, and the payments that the merchant records (amount, date, method, reference).
• Email log: recipient, subject, time and delivery status of the emails that the app sends (order confirmations, invoices, reminders, overdue notices).

We do not collect payment card data. The app does not track storefront visitors and sets no tracking or advertising cookies.

How we use the data

Only to provide the app's functions: show the order form, create orders in the merchant's Shopify store, create and email invoices, keep the customer balance, send reminders, and show the balance to the customer in their account. We do not sell data and we do not use it for advertising or for training models.

Where the data is stored and who receives it

• Shopify (the merchant's store), through the Shopify Admin API.
• Our application server and its database, hosted in the European Union.
• An email delivery provider (SMTP), which receives the recipient address and the content of the emails that the app sends.

Retention and deletion

We keep the data while the app is installed. When the merchant uninstalls the app, Shopify sends us a shop deletion request (shop/redact) 48 hours later and we delete all data of the shop. When Shopify sends a customer deletion request (customers/redact), we delete that customer's records. Customer data requests (customers/data_request) are answered through the merchant: the merchant sees and exports all data of a customer in the app.

Security

All traffic is encrypted with HTTPS. Requests from Shopify are verified (session tokens, HMAC signatures of webhooks and of the app proxy). Invoice links contain a long random token.

Your rights

Under the GDPR and similar laws you can ask for access to, correction of, or deletion of your personal data. Customers of a store should contact the store first; we help the merchant to answer. You can also contact us at help@elektraset.com, and you may complain to a data protection authority.

Contact

Elektraset, s.r.o., help@elektraset.com, https://elektraset.com/