Other Covered Entities

Shopify (USA) Inc.
Shopify Payments (USA) Inc.

Participation

EU-U.S. Privacy Shield Framework: Active

Original Certification Date: 10/6/2016
Next Certification Due Date: 10/6/2017
Data Collected: NON-HR

Purpose of Data Collection

This certification applies to the following U.S. subsidiaries of Shopify Inc.: Shopify Data Processing (USA) Inc., Shopify Payments (USA) Inc., and Shopify (USA) Inc. (collectively, the "Shopify Entities"). The Shopify Entities provide a variety of hosted ecommerce software and related online services, including payment processing, shipping and marketing. Personal information is processed for a variety of purposes related to the particular services provided. For example, the Shopify Entities use personal information to confirm user identity, process transactions, process payments, improve services, communicate with users, monitor and mitigate fraud risk, and to comply with applicable legal and regulatory requirements. Personal information is transferred to third parties for limited purposes in accordance with Shopify's Privacy Policy.

Privacy Policy

Non-HR Data

Description:

Privacy Policy for data collected as part of Shopify's "Shopify Pay" service.

Effective Date: 7/18/2017
Description:

This Privacy Policy applies to Shopify Inc. and its affiliates, including Shopify Data Processing (USA) Inc., Shopify Payments (USA) Inc., and Shopify (USA) Inc.

Effective Date: 9/27/2016

Verification Method

Self-Assessment

Dispute Resolution

Questions or Complaints?

If you have a question or complaint regarding the covered data, please contact Shopify Data Processing (USA) Inc. at:

Vivek Narayanadas
Associate General Counsel, Privacy
Shopify Data Processing (USA) Inc.
1209 Orange Street
Wilmington, Delaware 19801

Privacy Shield organizations must respond within 45 days of receiving a complaint.

If you have not received a timely or satisfactory response from Shopify Data Processing (USA) Inc. to your question or complaint, please contact the independent recourse mechanism listed below


NON-HR RECOURSE MECHANISM



Appropriate statutory body with jurisdiction to investigate any claims against Shopify Data Processing (USA) Inc. regarding possible unfair or deceptive practices and violations of laws or regulations covering privacy Federal Trade Commission