Privacy Policy

Last Updated: August 28, 2025

This Privacy Policy describes how GiftLoop ("we," "us," or "our") collects, uses, and protects information when you use our automated reminder service for Shopify stores.

1. Data Collection

Information We Collect

We collect the following information only when customers voluntarily provide it through our post-purchase reminder widget:

• Contact Information: Email addresses and/or phone numbers
• Purchase Data: Order details, purchase date, and product information
• Preference Data: Reminder timing preferences and communication method choices
• Technical Data: Timestamp of opt-in, IP address for compliance records

How We Collect Information

Information is collected exclusively through:

• Post-purchase opt-in widgets on Shopify thank-you pages
• Explicit customer action (typing contact information and clicking "Set Reminder")
• No pre-filled forms or pre-checked boxes
• Clear disclosure of message frequency and content

2. Consent and Opt-In

Express Consent Required

All data collection requires express consent in compliance with TCPA regulations:

• Customers must actively enter their contact information
• Clear disclosure of message frequency (1-2 messages per occasion)
• Explicit agreement to receive annual reminders

Consent Records

We maintain detailed records of consent including:

• Date and time of opt-in
• IP address for verification
• Specific consent language presented
• Contact method chosen (email, SMS, or both)

3. Data Usage

How We Use Your Information

We use collected information solely for:

• Reminder Services: Sending annual purchase reminders
• Service Delivery: Processing and scheduling reminders
• Compliance: Maintaining opt-in records and honoring opt-outs
• Customer Support: Responding to inquiries and technical issues

Message Content

Reminder messages contain only:

• Store name and reminder purpose
• Days until anniversary date
• Optional discount code (if enabled by merchant)
• Clear opt-out instructions

4. Data Sharing

No Marketing Data Sharing

Limited Sharing for Service Delivery

We only share data with:

• Email Service Providers: SendGrid for email delivery
• SMS Service Providers: Twilio for text message delivery
• Shopify: As required for app functionality
• Legal Requirements: If required by law or legal process

All service providers are bound by strict data protection agreements and compliance requirements.

5. Opt-Out and Data Control

Easy Opt-Out Options

Customers can opt-out at any time through:

• SMS: Reply "STOP" to any text message
• Email: Click unsubscribe link in any email
• Phone: Call 410-940-8604
• Email Support: Contact [email protected]

Opt-Out Processing

When you opt-out:

• Requests are processed immediately and automatically
• No further messages will be sent
• Your contact information is added to our suppression list
• Data is retained only for compliance purposes

6. Data Security

We protect your information through:

• Encryption: All data transmission uses SSL/TLS encryption
• Access Controls: Limited access to customer data
• Secure Infrastructure: Enterprise-grade hosting and database security
• Compliance Monitoring: Regular security audits and updates

7. Data Processing

We process customer data on behalf of Shopify merchants who use our service. Merchants are responsible for obtaining appropriate consent from their customers and ensuring compliance with applicable privacy laws.

8. Contact Information

For questions about this Privacy Policy or our data practices, contact:

9. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date. Continued use of our service after changes constitutes acceptance of the updated policy.