Privacy Policy

Introduction

RetailerBoost, a 30m.com company (referred to as "RetailerBoost," "we," "us," or "our"), provides performance-based Google Shopping Ads services to merchants who operate online stores. Merchants may integrate through our Shopify app, directly using our JavaScript tracking tags, or through their existing affiliate network. This privacy notice describes how information is collected, used, and shared when you sign up for or use these services.

Controller for Personal Data

Under data protection laws such as the UK/EU GDPR, a "controller" is a person or organization who alone or jointly determines the purposes for which and the way any personal data is or is likely to be processed. Unless we notify you otherwise, RetailerBoost is the controller of your personal data for the purpose of our service. In other jurisdictions, the equivalent term to denote "controller" shall apply.

Types of Personal Data

Personal data or personal information means any information about an individual from which that person can be identified. It does not include data where the identity has been removed (anonymized data). Anonymized data falls outside the scope of data protection laws.

Information We Collect

We collect merchant account and contact information to provide the service, and store activity and transaction information to measure advertising performance. Merchant contact information is separate from the shopper event data described below.

Merchant identity and contact data: Names, email addresses, telephone numbers and business details provided during registration, through Shopify account and store information, or when you contact us.

Device and activity data: Visitor identifiers, IP addresses, browser user-agent information, landing and page URLs, referrers, campaign parameters, event types and timestamps. Cookies and local storage may be used to link visits and orders.

Transaction and campaign data: Order identifiers, values, currencies, product and variant identifiers, line-item counts, advertising clicks, attributed conversions and commission records.

Account and service data: Store identifiers and domains, integration authorisations, billing status, account settings, support communications and marketing preferences.

Online identifiers and event data can be personal data even when they do not contain a name or email address. We do not describe identifiable or pseudonymous activity records as anonymous.

What We Track

Direct integration: Our JavaScript tracking tags send visit and conversion information to support advertising attribution, campaign optimisation, reporting and commission calculation. This includes a visitor identifier, landing URL and referrer, campaign and click identifiers, page activity, order identifiers, order values and conversion timing. Our receiving service also records IP addresses and browser user-agent information from requests.

Shopper contact and payment fields: Our standard tracking does not require shopper names, email addresses, phone numbers, shipping or billing addresses, or payment card details. URLs and merchant-supplied metadata can nevertheless contain personal information; merchants should not place shopper contact details or other sensitive information in tracking URLs or metadata.

Affiliate integration: The merchant's affiliate network processes conversion data under its own privacy policy and the merchant's affiliate programme terms. RetailerBoost receives attribution, performance and commission data needed to operate the campaigns. Tracking and transaction identifiers may be personal data even when direct contact details are not supplied.

Shopify App Integration

The RetailerBoost Ads app installs a Shopify web pixel to measure store visits and completed checkouts. The current app uses this pixel for both storefront and checkout events; it does not install a separate theme app embed.

How the pixel works: The pixel runs in Shopify's strict sandbox, an isolated environment without access to the storefront document. It subscribes to page views, product views, cart views, checkout starts and completed checkouts, and sends selected event fields to our tracking service at s1.rbrun.com.

Visit and activity data: We receive an internal store identifier, a visitor identifier, the landing page URL including its query string, and the referring URL. Landing URLs can include Google click identifiers, UTM parameters and RetailerBoost attribution tags. Activity events include the event type and page URL, with the query string removed from those activity URLs. The receiving service records event timestamps.

Completed checkout data: We receive the order ID and order number where available, order total, currency, line-item count, product IDs and variant IDs, linked to the store and visitor identifiers. These events support attribution, reporting and commission calculation.

Visitor storage: The pixel reads or creates a visitor identifier named _rb_vid using browser local storage and cookies. This allows visits and checkout events to be linked. Local storage has no automatic expiry set by the pixel; it can remain until cleared by the browser or the visitor. This identifier is pseudonymous, not a guarantee of anonymity.

Network information and excluded fields: The pixel selects individual event fields rather than forwarding the complete Shopify event. It does not select shopper names, email addresses, phone numbers, shipping or billing addresses, customer profile fields or payment details. However, our receiving service records the IP address and browser user-agent information associated with visit and conversion requests. Full landing URLs and referrers may also contain personal information if it is present in those URLs.

Customer privacy settings: The current pixel configuration does not require Shopify analytics, marketing or preferences consent categories before it runs, and its sale-of-data setting is disabled. It may therefore run before a visitor accepts a consent banner. This configuration does not establish that the data is anonymous or exempt from applicable consent requirements. Merchants must assess the use of this tracking for their customers and applicable laws; contact us about privacy controls or uninstall the app to disable its pixel.

Shopify permissions: The app requests read_customer_events to subscribe to customer events, read_pixels to inspect the app's pixel configuration, and write_pixels to install and manage it. It does not request read_themes, read_customers, read_orders or product and inventory API scopes. Checkout events still provide the order and product identifiers described above.

Merchant account and connected services: We also process Shopify store and account information, including store IDs, domains, contact email, plan information, authorisation tokens and billing records, to set up and operate the app. If you connect Google, we use the authorised Merchant Center connection to link advertising and monitor account and feed health. The Shopify permission list does not describe these separately authorised Google services.

How store data is used: We use store activity and conversion data to attribute orders, report results, calculate commission, optimise the merchant's campaigns and assess whether to continue funding them. Pausing advertising does not disable the installed pixel; event collection can continue while the app remains installed, including to assess whether campaigns should resume. We share relevant attribution and conversion information with Google to operate and optimise advertising. We do not sell merchant or shopper data.

Shopify billing: You approve usage-based billing at an agreed commission rate and a capped amount for the billing period. Attributed commission charges appear on your Shopify invoice. The cap limits commission charges; it is not an advertising budget paid in advance.

Uninstalling and retained records: Shopify deactivates the app pixel when the app is uninstalled. Our uninstall process marks the installation inactive, clears active billing references and requests that advertising be paused. Uninstalling does not automatically erase previously collected visits, conversions, merchant account information or historical billing records, or clear identifiers already stored in a visitor's browser. Separately installed tracking tags or other integrations must be removed separately.

Privacy requests: The app receives Shopify's three privacy compliance webhooks: customers/data_request, customers/redact and shop/redact. The uninstall notification is handled separately. Shopify normally sends shop/redact 48 hours after uninstall; this is a notification schedule, not a promise that all data has been deleted by then. The current automated handling clears certain Shopify identifiers and access credentials but retains historical analytics and merchant records. Customer data and deletion requests may require manual handling; contact [email protected] so we can locate relevant records and address your request under applicable law.

Store eligibility: Production onboarding requires a custom domain, with an exception for development stores used for testing. Basic Shopify store information is processed to perform this eligibility check even if onboarding cannot be completed.

We Do Not Sell Your Data

RetailerBoost does not sell, rent, license, trade, or otherwise disclose for value any Merchant data to any third party. This includes store data, order data, product and pricing data, customer data, and campaign performance data. We have not done this and we will not do this.

We also do not pool, aggregate, repackage, or resell Merchant data as market research, benchmarking, competitive intelligence, mailing lists, or any other data product, and we do not disclose one Merchant's data to another Merchant.

Data we receive from a Merchant's store is used only to run and optimize that Merchant's own Google Shopping Ads campaigns, to attribute orders and calculate commission, to provide that Merchant with reporting and support, and to meet our legal, tax, and accounting obligations.

We share data only with the providers needed to deliver the service, namely Google for ad serving, Stripe or Shopify for billing depending on your billing method, the Merchant's own affiliate network where Affiliate Integration is used, and our hosting and infrastructure providers. Those providers may use the data only to provide their service to us and are not permitted to sell it. We may also disclose data where we are required to by law or by a regulator.

You can request deletion of your data at any time by emailing [email protected]. We will delete or irreversibly anonymize it within 30 days, other than records we are required to keep for legal, tax, or accounting purposes. Removing tracking tags or uninstalling the Shopify app stops future collection through that integration; other active integrations must be disconnected separately. Previously collected data is subject to our retention and deletion practices.

Use of Contact Information for Operational Alerts

We collect your email address and phone number (if provided) to send you operational alerts and messages. These messages are essential for the continued provision of our services and may include, but are not limited to, notifications about account status, campaign performance, and other important updates necessary for maintaining your account and service continuity.

How We Use Your Contact Information:

Operational Alerts: We use your contact information to send alerts regarding the operational status of your account, such as tracking installation issues, Merchant Center compliance warnings, and other essential notifications.

Service Continuity: These messages ensure you are promptly informed of any actions required on your part to maintain uninterrupted service.

Consent and Opt-Out: By signing up for RetailerBoost, you consent to receiving these operational messages. You can adjust your communication preferences in your account settings or by replying to an email with an unsubscribe request.

How We Use Your Personal Information

RetailerBoost will only use your personal data when the law allows us to. We will use your personal data in the following circumstances:

Performance of a contract: Where we need to perform the contract we are about to enter into or have entered into with you (e.g., when you sign up for our services).

Legal obligation: Where we need to comply with a legal obligation (e.g., for accounting or legal purposes).

Legitimate interests: Where it is necessary for our legitimate interests or those of a third party and your interests and fundamental rights do not override those interests.

Consent: When you sign up for RetailerBoost, you consent to our data processing practices. Where we rely on consent, you have the right to withdraw consent at any time by removing our tracking pixel/script and closing your account.

Purposes for Processing Your Personal Data

To register you as a merchant - Using Identity and Contact data to perform our contract with you.

To respond to enquiries - Using Identity and Contact data for contract performance and our legitimate interests.

To process and deliver our services - Including managing payments, fees, and charges; collecting money owed to us. Using Identity, Contact, Financial, and Marketing data for contract performance and legitimate interests.

To manage our relationship with you - Including notifying you about changes to our terms or privacy notice, asking for reviews or surveys. Using Identity, Contact, and Marketing data for contract performance, legal compliance, and legitimate interests.

To administer and protect our business - Including troubleshooting, data analysis, testing, system maintenance, support, and reporting. Using Identity, Contact, Technical, and Device data for legitimate interests and legal compliance.

To deliver relevant content and measure effectiveness - Using Identity, Contact, Usage, Marketing, Technical, and Device data for our legitimate interests.

To use data analytics - To improve our service, marketing, and customer experience. Using Technical, Usage, and Device data for our legitimate interests.

To make recommendations - About services that may interest you. Using Identity, Contact, Technical, Usage, and Marketing data with your consent and for our legitimate interests.

Marketing Communications

RetailerBoost may send Merchants marketing communications. You have the right to object to the processing of your personal data for direct marketing purposes. You can unsubscribe from receiving marketing communications from us by using the unsubscribe methods contained in communications we send to you or by contacting us at [email protected].

Where you opt out of receiving marketing communications, this will not apply to personal data provided to us as a result of your service usage or other necessary interactions with RetailerBoost.

How We Share Your Personal Data

We may share your personal data with the following parties:

Internally: Your personal data will be used by our employees and contractors who are working on providing your services on a need-to-know basis.

Suppliers: Service providers who support our business, including IT, communication suppliers, and payment processors (such as Stripe).

Professional advisers: Lawyers, accountants, and insurers who provide consultancy, legal, insurance, and accounting services.

Law enforcement bodies and regulators: To comply with our legal requirements.

Affiliate Networks: Where a Merchant uses Affiliate Integration, limited performance and commission data may be shared between RetailerBoost and the Affiliate Network for the purposes of attribution and commission processing, as governed by the Merchant's affiliate program terms and/or the Affiliate Network's terms.

Third parties: In the context of business acquisition, transfer, or reorganization.

International Transfers

We ensure a similar degree of protection is afforded whenever we transfer personal data internationally by ensuring at least one of the following safeguards is implemented:

We will only transfer your personal information to countries that have been deemed to provide an adequate level of protection for personal information; or

We will use specific contracts approved for use in the UK/EU which give personal information the same protection it has in the UK/EU.

Cookies

Our website uses cookies to improve your browsing experience. We use Google Tag Manager, Google Analytics, and Microsoft Clarity for website analytics to help us understand how visitors use our site and to improve the user experience.

For more information about the cookies we use and how to manage them, please see our Cookie Policy.

Website Visitor Identification (retailerboost.com Only)

This section applies only to visitors browsing our marketing website at retailerboost.com. It does not apply to Merchant accounts, Merchant stores, or any data collected through our tracking tags, our Shopify app, our dashboard, or an affiliate network integration. None of the technologies described in this section run on a Merchant's store or have any access to Merchant or shopper data.

When you visit our marketing website, cookies and similar technologies may be used by our online data partners or vendors to associate that visit with other personal information they or others already hold about you, including by association with your email address. We (or service providers on our behalf) may then send communications and marketing to those email addresses. This is how we identify businesses that have shown interest in RetailerBoost so we can follow up. You may opt out of receiving this advertising by visiting https://app.retention.com/optout.

You also have the option to opt out of the collection of your personal data in compliance with GDPR. To exercise this option, please visit https://www.rb2b.com/rb2b-gdpr-opt-out.

We do not sell or otherwise disclose for value any information collected through these technologies, and we do not use them to gather information about a Merchant's store, products, orders, or shoppers.

Data Security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way, altered, or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors, and other third parties who have a business need to know.

The transmission of information via the internet is not completely secure. Although we will take reasonable measures to protect your personal data, RetailerBoost cannot guarantee the security of your information transmitted, and any transmission is at your own risk.

Data Retention

RetailerBoost will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting, or reporting requirements.

To determine the appropriate retention period for personal information, we consider the amount, nature, and sensitivity of the personal information, the potential risk of harm from unauthorized use or disclosure, the purposes for which we process your personal information, and applicable legal requirements.

RetailerBoost may anonymize your personal data so that it can no longer be associated with you for research or statistical purposes, in which case we may use this information indefinitely without further notice to you.

Data Subject Rights

Under certain circumstances, you have rights under data protection laws such as the UK/EU GDPR:

Request access to your personal data (data subject access request).

Request correction of any incomplete or inaccurate information we hold about you.

Request erasure of your personal data where there is no good reason for us continuing to process it.

Object to processing of your personal data where we are relying on legitimate interests.

Request restriction of processing your personal information in certain scenarios.

Request transfer of your personal information to you or a third party (data portability).

Withdraw consent at any time where we are relying on consent to process your personal data.

Automated decision making: We do not carry out automated decision-making.

You will not have to pay a fee to exercise any of these rights. We try to respond to all legitimate requests within one month.

California Residents (CCPA)

Under the California Consumer Privacy Act ("CCPA"), you have the right to know what personal information we collect, disclose, and/or sell.

You have the right to access what personal information has been collected about you by making a request. Once we confirm your identity, we can share the categories of personal information collected in the preceding 12 months.

You have the right to request that we delete your personal information and the right to request that your personal information be transferred to a third party.

RetailerBoost has not and will not sell your personal information.

RetailerBoost will not discriminate against you for exercising your rights under California data protection laws.

If you are a California resident and would like to submit a consumer request or learn more about how we process your personal information, please email [email protected].

Changes to Our Privacy Notice

This privacy notice may be changed from time to time in response to legal, technical, or business developments. We will take appropriate measures to inform you when we update our privacy notice. We will obtain your consent to any material privacy notice changes if and where this is required by applicable data protection laws.

Concerns and Complaints

We would appreciate the chance to deal with your concerns in the first instance. Please contact us at [email protected].

If you have unresolved concerns and you live or work in the UK or believe that a personal data breach happened in the UK, you have the right to complain at any time to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk).

If you live or work outside the UK, you may lodge a complaint with your local supervisory authority.

Contact Us

For more information about our privacy practices or to exercise your data rights, please contact us:

Email: [email protected]

Website: https://retailerboost.com