Privacy policy
Send Reorder is a Shopify app that helps wholesale merchants draft and send replenishment orders to existing trade accounts. We process the minimum data required to do that job.
Who this covers
Merchants who install the app or use this site, and the trade buyers those merchants contact through the product. If you are a buyer and received an email from a supplier, that supplier is the controller of your customer relationship. We act as their processor for the send.
What we collect
- Merchant account details: shop domain, Shopify session, work email if provided by Shopify.
- From Shopify, when a merchant installs the app: companies, locations, last paid orders, line items, and — where needed to send a draft invoice — buyer name and email on the company location.
- Our own records of a send: shop, location id, draft id, buyer email, and whether the send was manual, run-now, or auto.
- A short-lived token so the buyer can adjust quantities before paying the Shopify invoice.
- Site mail: whatever you write to hello@sendreorder.com.
We do not collect payment card details from buyers. Checkout stays on Shopify. We do not track storefront browsing to decide who to nudge. We do not use customer data to train models or to advertise.
Why
- Provide the product: quiet-account lists, draft invoices, adjust-mix links, optional daily auto-send.
- Bill the merchant through Shopify when a paid plan is live.
- Security, abuse prevention, and legal obligation, including Shopify compliance webhooks.
Legal bases (UK GDPR): contract with the merchant; legitimate interests in running and securing the service; legal obligation. Merchant instructions govern buyer data processed on their behalf.
Retention
Merchant and shop data last for the life of the install plus a short wind-down for billing and disputes. When a shop uninstalls, or we receive a Shopify shop/redact or customers/redact webhook, we delete the named rows. Adjust-mix tokens expire and are then unused.
Processors
- Shopify — auth, Admin API, draft invoices, invoice email.
- Fly.io — app hosting (London).
- Prisma Postgres — sessions, shop settings, reorder tokens, send logs.
We do not sell personal data. Invoice mail is sent by Shopify on the merchant’s behalf.
Transfers and rights
If data leaves the UK/EEA it will be under an approved mechanism. You may request access, correction, deletion, or restriction via hello@sendreorder.com. You may complain to the ICO.