CartKit provides marketing tools "the Service" to merchants and website owners on various platforms "the Platform". This Privacy Policy describes how personal information is collected, used, and shared when you install or use the App in connection with your Shopify or Wix powered website.

<aside> 💡 CartKit does not sell, and has not sold, consumers’ Personal Data at any time. Except as provided in "Sharing Your Personal Information", we also do not share or disclose your Personal Data.

</aside>

Personal Information the App Collects

When you install the App, we are automatically able to access certain types of information from your Site, including your name, email address, website URL.

Additionally, we collect the following types of personal information from you and/or your customers once you have installed the App: Information about individuals who visit your store, such as their IP address, web browser details, time zone, and information about the cookies installed on the particular device.

We collect personal information directly from the relevant individual, through Platform account, or using the following technologies: “Cookies” are data files that are placed on your device or computer and often include an anonymous unique identifier. For more information about cookies, and how to disable cookies, visit http://www.allaboutcookies.org. “Log files” track actions occurring on the Site, and collect data including your IP address, browser type, Internet service provider, referring/exit pages, and date/time stamps. “Web beacons,” “tags,” and “pixels” are electronic files used to record information about how you browse the Site.

How Do We Use Your Personal Information?

We use the personal information we collect from you and your customers in order to provide the Service and to operate the App. Additionally, we use this personal information to: Communicate with you; Optimize or improve the App; and Provide you with information or advertising relating to our products or services.

Sharing Your Personal Information

We do not share your personal information with third parties, other than those required to operate the application, improve the application, or run retargetting ads for our own applications. We do not sell your information to any third party advertisers or advertising networks.

We use a select number of trusted external service providers for certain technical data analysis, processing and/or storage offerings (e.g., IT and related services). These service providers are carefully selected and meet high data protection and security standards. We only share information with them that is required for the services offered and we contractually bind them to keep any information we share with them as confidential and to process Personal Data only according to our instructions. In addition to services providers, other categories of third parties may include:

• Vendors/public institutions. To the extent that this is necessary in order to make use of certain services requiring special expertise (such as legal, accounting or auditing services) we may share your personal data with vendors of such services or public institutions that offer them (e.g. courts). The legal basis of this data processing is Art. 6(1)(f) GDPR.
• Disclosures to Protect Us or Others. We may access, preserve, and disclose any information we store associated with you to external parties if we, in good faith, believe doing so is required or appropriate to: comply with law enforcement or national security requests and legal process, such as a court order or subpoena; to protect your, our or others’ rights, property, or safety; enforce our policies or contracts; collect amounts owed to us; or to assist with an investigation or prosecution of suspected or actual illegal activity; depending on the concrete issue, the legal basis for such processing may be Art. 6(1)(b), (c) or (f) GDPR.
• Disclosure in the Event of Merger, Sale, or Other Asset Transfers. If we are involved in a merger, acquisition, financing due diligence, reorganization, bankruptcy, receivership, purchase or sale of assets, or transition of service to another provider, then your information may be sold or transferred as part of such a transaction, as permitted by law and/or contract. The legal basis for such processing would be Art. 6(1)(f) GDPR as such processes are in the legitimate interest of CartKit.

<aside> 💡 Note that CartKit does not run retargetting ads on your website visitors or send promotions directly to your website visitors outside of the context of the functionalities you've configured directly in our apps.

</aside>

A note on retargetting ads:

Although we don't provide your information to third parties and unaffiliated promoters, we may use your Personal Information to provide you with targeted advertisements or marketing communications related to our own products and services. For more information about how targeted advertising works, you can visit the Network Advertising Initiative’s (“NAI”) educational page at http://www.networkadvertising.org/understanding-online-advertising/how-does-it-work.

You can opt out of targeted advertising by visiting the Digital Advertising Alliance’s opt-out portal at: http://optout.aboutads.info/.

European Residents:

If you are a European resident, you have the right to access personal information we hold about you and to ask that your personal information be corrected, updated, or deleted. If you would like to exercise this right, please contact us through the contact information below.