Privacy Policy

Last updated: May 28, 2026

Data Controller

Black Lion SRLS
Email: provided in the Shopify App Store listing
Contact: via Shopify Partner Dashboard

What Data We Collect

This app collects only the minimum data required to function:

• Shop domain (e.g., mystore.myshopify.com) — to identify your store and associate its configuration.
• UET Tag ID — the Microsoft Advertising tracking ID you provide. Stored encrypted at rest.
• OAuth session tokens — temporary credentials to authenticate with the Shopify Admin API on your behalf. Stored in your app's private database.

What Data We Do NOT Collect

• Customer personal data (names, emails, addresses, phone numbers)
• Order content or line-item details
• Browsing behavior or session recordings
• Payment or credit card information

Customer event data (page views, product views, add-to-cart, purchases) is sentdirectly from your storefront to Microsoft Advertising via the UET tracking pixel. This data never passes through or is stored on our servers.

Data Processing & Legal Basis

We process your store domain and UET Tag ID under the legal basis ofcontractual necessity — this data is required to provide the Bing UET Conversion Tracking service you subscribed to.

Data Sharing & Third Parties

We do not sell, rent, or share your personal data with third parties. The only data transfer is the customer event stream sent directly from your storefront to Microsoft Advertising via the UET pixel (governed byMicrosoft's privacy policy).

Data Retention

Your configuration data is retained for as long as the app is installed. Upon uninstallation, all associated data is deleted from our database immediately via the app/uninstalled webhook.

Your Rights (GDPR)

As a data subject in the European Economic Area, you have the right to:

• Access — request a copy of the data we hold about your store.
• Rectification — correct inaccurate data.
• Erasure — request deletion of your data (uninstalling the app triggers automatic deletion).
• Data portability — request your data in a machine-readable format.

To exercise these rights, contact us at the email address in the App Store listing. We will respond within 30 days.

Compliance Webhooks

This app registers the following Shopify compliance webhooks to fulfill GDPR/CCPA obligations:

• customers/data_request — logged and acknowledged.
• customers/redact — logged and acknowledged.
• shop/redact — triggers deletion of all store data.

Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated revision date. Continued use of the app after changes constitutes acceptance of the updated policy.

Contact

For privacy inquiries or data requests:

• Email: via Shopify Partner Dashboard contact information
• Response time: within 30 days