Routine Builder privacy policy

Who operates Routine Builder

Reece Buttigieg operates Routine Builder under the NexGrowthApps brand in the United Kingdom. For privacy questions, email support@nexgrowthapps.com.

When we handle shopper data for a merchant, we act as the merchant’s processor. The merchant decides how it uses customer data. We act as the controller for our own support correspondence and service administration.

Information we use

• Shopify store and staff information. Shopify provides a store identifier, installation credentials and, where needed, a staff account identifier and account role. We use these to connect the app, check permissions and save walkthrough progress for the signed-in staff member.
• Offer settings. We use product and variant references, saved pairings, discount rules and preview settings to display matching products and apply eligible savings through Shopify.
• Cart and order information. When a shopper adds matching products, the app can attach a random offer reference to the cart items and record the selected variants and quantities. For Results, Shopify provides order references, item quantities, amounts, currencies and paid, refunded or cancelled status. Results works without buyer names, contact details or addresses.
• Privacy requests and support. Shopify may send customer contact information with a privacy request. The app uses the shop and order references to handle it. If you email us, we receive your email address, message and any information you include.
• Service logs. We use limited technical and error logs to diagnose problems and keep the app working securely.

Shopify handles checkout, payments and app billing. Routine Builder does not receive payment card details, set advertising cookies, or use shopper information for cross-store advertising. We do not sell personal data.

Why we use this information

We process shopper information on the merchant’s instructions to display offers, apply discounts and report add-on sales, refunds and cancellations. Where we act as controller, we use information to provide the app under our agreement with the merchant, to support users and keep the service secure in our legitimate interests, and to meet legal obligations such as handling applicable privacy requests.

Where information is processed

Shopify provides the store, checkout and app platform. The Routine Builder service and its active database run on DigitalOcean in London, United Kingdom. GoDaddy and Microsoft 365 provide our support email. These providers may process information in other countries. Where UK data protection law requires a transfer safeguard, applicable safeguards can include an adequacy decision or approved contractual protections. Contact us for details about a particular transfer.

How long we keep information

We keep hosted setup and reporting data while the app is installed and needs the information to provide those features. When Shopify sends a verified uninstall or store deletion notification, Routine Builder removes the store’s records from its active database. Product settings and discounts saved in Shopify may remain in the merchant’s store. Merchants can manage them in Shopify.

When we receive a verified request to erase shopper data, the app removes the corresponding reporting records. While the app is installed, it may keep the order reference needed to prevent the erased data from being imported again. We retain support messages and technical logs for as long as needed to resolve the relevant issue, operate the service securely or meet an applicable legal obligation.

Your privacy choices and rights

If you shopped at a store that uses Routine Builder, contact that store to request access to, correction of or deletion of your information. We help merchants respond to these requests. For information we control, email support@nexgrowthapps.com.

Depending on the law that applies, you may also be able to ask us to restrict processing, object to it, or request a copy of your data in a portable format. In the UK you can raise a concern with the Information Commissioner’s Office.

Updates to this policy

We’ll update this page and its effective date when our data practices change.