Who we are
Everlist is a Shopify app published by Alessio Bussolari (Negozione), Italy. We are the data controller for the data described here, and we act as data processor on behalf of the merchant for the store data they entrust to us.
For any question about this policy you can write to hello@bussolarialessio.me.
What Everlist does
Everlist lets a Shopify merchant create gift registries — baby showers, weddings, birthdays and similar occasions. The registry owner picks products from the store catalogue, and guests open a public link and buy those gifts through the store's Shopify checkout.
Store data we access
When a merchant installs Everlist, Shopify grants us access to the following, strictly to make the app work:
- Store details: name, domain, contact email, plan, currency and language.
- Products and inventory: to let registry owners choose gifts and to keep prices and availability up to date.
- Orders: to know when a gift has been purchased and mark it as received.
- Customers: name and email only, to create or update the Shopify customer account of the person who owns a registry.
Personal data we process
Besides the store data above, Everlist stores:
- Registry owner: name and email address.
- Guests who give a gift: name, email address and the message they choose to leave.
- Technical data: application logs and error reports, needed to keep the service running and secure.
Why we process it
We process this data to provide the service the merchant asked for: creating and displaying registries, letting guests purchase gifts, notifying the people involved, and providing support.
The legal basis is the performance of our contract with the merchant, and our legitimate interest in keeping the service secure and working. We never sell personal data, and we never use it for advertising or profiling.
Where the data is stored
Data is stored on our own servers located in Germany, inside the European Union. All traffic between your browser, Shopify and our servers is encrypted with TLS.
How long we keep it
We keep the data for as long as the app stays installed on the store.
When a merchant uninstalls Everlist, Shopify sends us a shop deletion request 48 hours later, and we delete all data belonging to that store.
If a customer asks the merchant to delete their data, Shopify forwards the request to us and we anonymise that person's details so they can no longer be traced back to them. If a customer asks for a copy of their data, we provide it to the merchant, who passes it on.
Who we share it with
We only share data with the providers we need to run the service:
- Shopify — the platform hosting the store and processing payments.
- Hetzner — our hosting provider in Germany.
- CloseYourIt and BugToMe — error monitoring; personal details are obscured before being sent.
Your rights
Under the GDPR you can ask to access, correct, delete or export your data, and object to its processing. If you gave your data to a store, contact that store first: they are the ones who decide how it is used, and we act on their instructions. You can also write to us directly at hello@bussolarialessio.me and we will help.
Cookies
Inside the Shopify admin, Everlist only uses the technical cookies needed to keep you signed in. Public registry pages use a session cookie to remember the gifts a guest has selected. This website uses a single cookie to remember your language. We use no advertising or tracking cookies.
Changes to this policy
If we change this policy we will update the date at the top of this page and, when the change is significant, we will inform merchants by email.
Contact
Alessio Bussolari (Negozione) — hello@bussolarialessio.me