Shopify Merchants may receive credits to be used for the Shopify service plans (“Referral Credits”) through Shopify’s referral program described herein (the “Referral Program”).

To participate in the Referral Program, you must agree to this policy (the “Policy”), which becomes a part of the Shopify Terms of Service (the “Shopify TOS”). Capitalized terms that are not defined here will have the same meaning given to them in the Shopify TOS.

Definitions:

“Advocate” means any eligible Shopify Merchant who chooses to share a Referral Link.

“Eligible Store” means a new store created by a Shopify Merchant or one that is subscribed to a Shopify Free or Paid Trial prior to using the Advocate’s Referral Link. Stores that already subscribe to other Shopify services plans do not qualify as an Eligible Store.

“Friend” means a unique Shopify Merchant who subscribes to the Shopify services using the Advocate’s Referral Link on an eligible Store.

“Qualifying Plan” means the Shopify Basic, Grow, or Advanced services plan.

“Referral Link” means a personalized referral link, provided to the Advocate by Shopify.

“Shopify Merchant” means a user that has a valid Shopify account that complies with the Shopify TOS.

How to Earn Credits

Advocates may refer Friends through a Referral Link. The Advocate and Friend may qualify to earn Referral Credits if (the “Qualifying Conditions”):

The Friend uses the Advocate’s Referral Link to subscribe to a Qualifying Plan on an Eligible Store, and pays a minimum of one full-priced month of such Qualifying Plan; and

The Advocate subscribes and pays a minimum of one full-priced month for a Qualifying Plan within 120 days of initiating a free trial of Shopify services.

The Advocate and Friend must be unique users. In other words, Advocates may not refer themselves to earn Referral Credit.

Referral Credits can take up to sixty (60) days from the fulfillment of the Qualifying Conditions to be applied to a Advocate or Friend’s account. Shopify will send an email to such Advocate or Friend alerting them that their Referral Credits will be applied towards such Advocate or Friend’s future invoices for the Qualifying Plan. Shopify Merchants paying on an annual plan basis will receive the Referral Credits applied to their next annual bill.

Referral Credits

Referral Credit amounts awarded to the Advocate may vary, and will be specified in the referral invitation or any accompanying promotional materials. Referral Credit awarded to the Friend may vary based on the Friend’s shop’s geographic location. Referral Credit amounts will be determined by Shopify in its discretion.

Referral Credits expire after 6 months if the Shopify Merchant pauses or cancels their account. Referral Credits will not be honored in the event such Advocate’s or Friend’s Merchant Account is terminated and inactive for sixty (60) days or suspended by Shopify for any reason.

Shopify Merchants are responsible for any and all tax liability resulting from Referral Credits.

Redeeming Referral Credits

The Referral Credits may only be redeemed to pay Shopify service subscription plan fees for a "Basic,” “Shopify,” or “Advance” plan. Referral Credits may not be applied to any other Shopify provided service, application, purchase, taxes, shipping or delivery charges, or toward the purchase of gift cards.

Referral Credits are non-transferable, not valid for cash or cash equivalent, cannot be combined with other offers, and must be used in the currency in which they were received. Payments made using Referral Credits are non-refundable.

Sharing Referral Links

Advocates must comply with all up-to-date “SPAM” laws and marketing regulations, which may include the laws where the Friends reside. For example, emails must be created and distributed in a personal manner and bulk email distribution is prohibited. Any distribution of the Referral Link that could constitute unsolicited commercial email or "spam" under any applicable law or regulation is expressly prohibited and will be grounds for immediate termination of your Shopify account and exclusion from this Referral Program.

Advocates will not: (i) promote or advertise Shopify on coupon, deal, or discount sites or on GTP/Get Paid to Click or other incentivized sites, or display any offer code on a public-facing page or through the use of a “click to display” offer code; (ii) use its Referral Link directly in any pay-per-click advertising; (iii) purchase search engine or other pay-per-click keywords (such as Google Ads), trademarks or domain names that use the Shopify Trademarks or the names or trademarks of any Shopify Related Entities or any variations or misspellings thereof that may be deceptively or confusingly similar to the Shopify Trademarks or the names or trademarks of any Shopify related entity; (iv) create or participate in any third party networks or sub-affiliate networks without the express written permission of Shopify; (v) use or encourage any means of delivering fraudulent traffic, including, but not limited, to use of bots or toolbar traffic, cookie stuffing, or use of false or misleading links; (vi) use direct linking to any page on any Shopify website, without prior written permission from Shopify; or (vii) mask its referral sites or use deceptive redirecting links.

Termination & Changes

Shopify reserves the right to review, investigate, and disqualify any Referral Credits that are obtained in violation of this Policy.

Shopify may change, cancel, or discontinue the Referral Program at any time in its sole discretion. The amount, scope, and type of Shopify Services that you may obtain by redeeming Referral Credits can change at any time.

Updates to this Policy

Shopify may update this Policy at any time without prior notice. Any notice provided by Shopify with respect to this Policy will be deemed provided on the day it is posted on our website. Continued participation in the Referral Program after any modification shall constitute consent to such modification.

Privacy

Any personal information collected, processed, and used as part of the Referral Program, including that of the Advocate and Friend, will be used in accordance with Shopify’s Privacy Policy.

Governing Law

This Policy and the Referral Program shall be governed by the laws of the Province of Ontario and the laws of Canada applicable therein.

Severability

If any provision in this Policy is determined to be invalid, void, or unenforceable, such provision (or the portion of it that is making it invalid, void or unenforceable) will be struck and not affect the validity of and enforceability of the remaining provisions.

Introduction

In our mission to make commerce better for everyone at Shopify, we collect and use information about you, our

merchants using Shopify to power your business

consumers who shop at a Shopify-powered business, or use Shopify apps and services like Shop or Shop Pay

partners who develop apps for merchants to use, build stores on behalf of merchants, refer potential entrepreneurs to Shopify, or otherwise help merchants operate or improve their Shopify-powered business

visitors to Shopify's websites, or anyone contacting Shopify support

This overall privacy policy and the supplemental privacy policies (together, the "Privacy Policy") will help you better understand how we collect, use, and share your Personal Data. "Personal Data" refers to information defined as 'personal data,' 'personal information,' or 'personally identifiable information' (or analogous terms) under applicable data protection laws. Capitalized terms used but not defined in this Privacy Policy shall have the same meaning given to them in the applicable terms of service. If we change our privacy practices, we may update this Privacy Policy. If any changes are significant, we will let you know (for example, through the Shopify admin or by email).

Our values

Trust is the foundation of the Shopify platform and includes trusting us to do the right thing with your information. Three main values guide us as we develop our products and services. These values should help you better understand how we think about your information and privacy.

Your information belongs to you

We carefully analyze what types of information we need to provide our services, and we try to limit the information we collect to only what we really need. Where possible, we delete or anonymize this information when we no longer need it. When building and improving our products, our engineers work closely with our privacy and security teams to build with privacy in mind. In all of this work our guiding principle is that your information belongs to you, and we aim to only use your information to your benefit.

We protect your information from others

If a third party requests your Personal Data, we will refuse to share it unless you give us permission or we are legally required. When we are legally required to share your Personal Data, we will tell you in advance, unless we are legally forbidden.

We help merchants and partners meet their privacy obligations

Many of the merchants and partners using Shopify do not have the benefit of a dedicated privacy team, and it is important to us to help them meet their privacy obligations. To do this, we try to build our products and services so they can easily be used in a privacy-friendly way. We also provide detailed FAQs and documentation covering the most important privacy topics, and respond to privacy-related questions we receive.

Why we process your information

We use your information for a range of purposes connected to the provision and improvement of our services (for example, to process your subscription payments to use the Shopify platform), or where we or someone we work with needs to use your Personal Data for a reason related to their business (for example, to provide you with a service).

Depending on whether you are a merchant, consumer, partner, or visitor, please refer to our supplemental privacy policies, as relevant, to understand our purposes for processing, and categories of recipients for processing for each type of Personal Data.

We rely on different legal bases to perform such processing. For example, we rely on:

performance of a contract to use your name and contact information to provide you with our services including to set up your account and contact you about issues with the platform

legitimate interest to use information about how you access Shopify websites to prevent fraud, provide reporting and analytics, and improve our services

compliance with a legal obligation to use copies of government-issued identification that you provide us to comply with different laws such as "know your customer", anti-money laundering or anti-terrorism laws

consent to use your name and email address to send you marketing messages (where no other legal basis is available or appropriate)

Your rights over your information

We believe you should be able to access and control your Personal Data no matter where you live. Depending on how you use Shopify, you may have the right to request access to, correct, amend, delete, port to another service provider, restrict, or object to certain uses of your Personal Data. We will not charge you more or provide you with a different level of service if you exercise any of these rights. Please note that a number of these rights apply only in certain circumstances, and all of these rights may be limited by law.

Where Shopify acts as processor or service provider of your Personal Data on behalf of Shopify merchants, you need to directly contact the merchant you interacted with. For more information about how merchants collect and use your data when you visit and make purchases in their stores, review the specific merchant's terms and privacy policy. In some cases, we may offer tools and assistance to merchants to help fulfill these requests.

If you are a merchant, consumer, partner, website visitor or other individual that Shopify has a direct relationship with or for whom Shopify processes your Personal Data as a Data Controller, please submit your data subject request through the privacy portal. We may require you to provide additional documentation to verify your identity and may use third parties to assist us with this process. Further information about rights available to US residents can be found below under the header "United States Regional Privacy Notice".

If you are not happy with our response to a request, you can contact us to resolve the issue. If you are located in the EEA or UK, you also have the right to lodge a complaint with your local data protection or privacy authority at any time.

Finally, because there is no common understanding about what a "Do Not Track" signal is supposed to mean, we don't respond to those signals in any particular way.

Where we send your information

We are a Canadian company, but we work with and process data about individuals across the world. To operate our business, we may send your Personal Data outside of your state, province, or country, including to the United States. This data may be subject to the laws of the countries where we send it. We take steps to protect your information when we send your information across borders.

Depending on whether you are a merchant, consumer, partner, or visitor, please refer to our supplemental privacy policies, as relevant.

Transfers outside of the EEA, the UK and Switzerland

If you are located in the EEA, the UK, or Switzerland, your Personal Data is received by our Irish affiliate, Shopify International Ltd. Your information is then sent to other Shopify locations and to service providers who may be located in other regions, including Canada (where we are headquartered) and the United States. When we send your Personal Data outside of the EEA, the UK and Switzerland, we do so in accordance with applicable law.

If you are in the EEA or Switzerland, when we send your Personal Data to any other Shopify entity outside the EEA or Switzerland, it is transferred in accordance with Shopify's Binding Corporate Rules(BCRs). Shopify's BCRs have been approved by European data protection authorities and reflect Shopify's commitment to adequately protect Personal Data regardless of where the information resides. If you are in the UK, when we send your Personal Data to any other Shopify entity outside of the UK, EEA or Switzerland, it is transferred pursuant to Standard Contractual Clauses in place between Shopify entities, and may rely on the European Commission's adequacy decision in relation to Canada to support transfers from Shopify International Limited to its Canadian-registered corporate parent Shopify Inc.

Where Shopify transfers your Personal Data to any third parties (for example, when we send this information to our Subprocessors), such transfers are protected by contractual commitments in the form of Standard Contractual Clauses where appropriate.

Finally, while we do what we can to protect your information, we may at times be legally required to disclose your Personal Data (for example, if we receive a valid court order). For information about how we respond to such orders, please review our Guidelines for Legal Requests.

How long do we retain your information

We will retain your Personal Data only for as long as necessary to fulfill the purposes for which we have collected it. To determine the appropriate retention period, we consider the amount, nature and sensitivity of your Personal Data, the potential risk of harm from unauthorized use or disclosure of your Personal Data, the purposes for which we process your Personal Data and whether we can achieve those purposes through other means and the applicable legal requirements. We will also retain and use your Personal Data to the extent necessary to comply with our legal obligations, resolve disputes and enforce our policies. If you stop using our services or if you delete your account with us, we will delete your information or store your information in an aggregated and anonymized format.

Depending on whether you are a merchant, consumer, partner, or visitor, please refer to our supplemental privacy policies, as relevant, for further details on the retention of your Personal Data.

Our use of Machine Learning

One of the ways in which we are able to help merchants using Shopify is by using techniques like "machine learning" (some laws, including certain EEA and UK laws, may refer to this as "automated decision-making") to help us improve our services. When we use machine learning, we either: (1) still have a human being involved in the process (and so are not fully automated); or (2) use machine learning in ways that don't have legal or similarly significant effects (for example, reordering how apps might appear when you visit the app store).

How we protect your information

Our teams work tirelessly to protect your information, and to ensure the security and integrity of our platform. We also have independent auditors assess the security of our data storage and systems that process financial information. However, we all know that no method of transmission over the Internet, and method of electronic storage, can be 100% secure. This means we cannot guarantee the absolute security of your Personal Data. You can find more information about our security measures at shopify.com/security.

How we use "cookies" and other tracking technologies

We use cookies and similar tracking technologies on our website and when providing our services. For more information about how we use these technologies, including a list of other companies that place cookies on our sites, a list of cookies that we place when we power a merchant's store, and an explanation of how you can opt out of certain types of cookies, please see our Cookie Policy.

How you can reach us

If you would like to ask about, make a request relating to, or complain about how we process your Personal Data, please contact Shopify Support, or mail us at one of the addresses below. If you would like to submit a legally binding request to demand someone else's Personal Data (for example, if you have a subpoena or court order), please review our Guidelines for Legal Requests.

If you have questions about how a merchant or store processes your Personal Data, you should contact the merchant or visit their privacy policy.

If you are located in Canada or the United States, your Personal Data is received by:

Shopify Inc.
Attn: Privacy Officer
151 O'Connor Street
Ground Floor
Ottawa
Ontario
K2P 2L8
Canada

If you are located in the EEA, the UK, the Middle East, South America, or Africa, your Personal Data is received by:

Shopify International Ltd.
Attn: Data Protection Officer
c/o Intertrust Ireland
2nd Floor 1-2 Victoria Buildings
Haddington Road
Dublin 4, D04 XN32
Ireland

If you are located in Asia, Australia, or New Zealand, your Personal Data is received by:

Shopify Commerce Singapore Pte. Ltd.
Attn: Data Protection Officer
77 Robinson Road,
#13-00 Robinson 77,
Singapore 068896

United States Regional Privacy Notice

This United States Regional Privacy Notice ("US Notice") supplements our Privacy Policy.

This US Notice is for individuals residing in certain US states and is designed to help you better understand how we collect, use, and disclose your Personal Data and, depending on how you use Shopify and where you reside, how to exercise available rights under various applicable privacy laws in the US, such as the California Consumer Privacy Act, the Colorado Privacy Act, the Connecticut Act Concerning Personal Data Privacy and Online Monitoring, the Utah Consumer Privacy Act, and the Virginia Consumer Data Protection Act (collectively, the "US Privacy Laws").

What information we collect and share about you

To provide our apps and services to you, we must process information about you, including Personal Data.

We do not "sell" your Personal Data as that term is defined under US Privacy Laws.

Here is a summary of the categories of Personal Data we may have collected about you over the past 12 months and with whom we may have disclosed that information to, depending on how you use Shopify.

CATEGORIES OF PERSONAL DATA COLLECTEDRECIPIENTS OF PERSONAL DATA

Identifiers, including name, email address, mailing address, phone number;

Personal Data categories listed in the California Customer Records statute, including name, mailing and billing address, phone number, credit or debit card information;

Commercial information, including products you purchase, place in your shopping cart, favorite or review (if you are a consumer) and information you provide us about you and your business (if you are a merchant);

Photos and videos, which may include face imagery, if you choose to provide them.

Internet or other electronic network activity information, including information regarding the device and browser you use, network connection, IP address, and how you browse through our apps and sites;

Geolocation data, including your mailing and billing address;

Inferences, or information derived from other Personal Data about you, which could include your preferences, interests, and other information used to personalize your experience;

Other information you provide; and

Sensitive Personal Data, which may include:

Government-issued identifiers, including social security, driver's license, state identification card, or passport number;

Your account access credentials (such as account log-in, financial account, debit or credit card number in combination with any required security access code, password, or credentials allowing access to an account);

Your device's precise location (if you are a Shop user, but only when you allow Shop to access this information);

Information you voluntarily disclose that may reveal certain characteristics about you such as your racial or ethnic origin or sexual orientation

The contents of email messages in the email inboxes that you connect to your Shop account, and information from email messages you transfer to the app to be included in your order history (if you use Shop).

Companies who help us provide you with our services, including cloud storage providers, payment providers and financial institutions, fulfillment partners, security vendors, email providers, marketplaces and data analytics vendors;

Advertisers and marketing vendors;

Merchants whose stores you visit or make purchases from;

Partners who provide a range of services to merchants, such as by developing apps or themes for use by merchants, serving as an affiliate that refers potential merchants to us, or helping merchants build or manage stores;

Law enforcement or other third parties in connection with legal requests, to comply with applicable law or to prevent harm.

Why we collect and share your Personal Data

We use and share your Personal Data for the purposes set out in the Privacy Policy. For categories of sensitive Personal Data that we collect, we only use or disclose such information either with your specific consent when required, or as otherwise permitted by law.

Sources of Personal Data

To make commerce better for everyone at Shopify, we collect and use Personal Data provided by:

You: We collect the information you provide when you use our platform, including when you sign up for Shopify as a merchant, visit a Shopify-powered store, fill in order information, visit one of Shopify's websites or contact Shopify support. We collect account and payment information you provide to us (including information about your business if you are a merchant), Shopify stores or items you save to favorites, purchases you make, reviews you post, and how you otherwise interact or communicate with stores or other users on our apps or services. We also collect information about how you browse through our apps and sites, including search terms you may enter.

Your device(s): We collect information from and about the devices you use, including computers, phones, and other web-connected devices you use to access our apps or services, and we combine this information across different devices you use.

Third parties: We receive information from partners who help us provide you with our services including the following:

Email providers. If you use Shop and you connect your third party inboxes, such as Gmail or Outlook (according to their terms and policies and as permitted by applicable law), we receive information to identify shopping-related emails and display, within Shop, information about specific orders you have made, stores you have engaged with in the past, and other related information.

Service Providers. We receive information from our service providers, who help us provide services to our merchants, like reviewing accounts for fraud or other concerns.

Marketplaces. If you use Shop, we receive information about purchases you have made from other marketplaces or platforms, such as Amazon, that you choose to connect through Shop. This information helps us to provide and improve Shop, to personalize your experience using our apps and services, and to determine if you are eligible for specific offers or payment methods.

Subprocessors. We work with third party subprocessors for cloud hosting, content delivery, data analysis, internal logging, fulfillment services and email transmission, among others, to provide you with our services. For more information, see Shopify's subprocessors.

Analytics and cookie providers. We receive information through our use of cookies, social plugins (such as the Facebook "like" button), pixels and tags for business purposes, such as providing information to help measure how users interact with our website content. For more information about how we use these technologies, see our Cookie Policy.

How long we keep your information

Because we need your Personal Data to provide Shopify services, we generally keep your Personal Data, including sensitive Personal Data, while you use Shopify products or services or until you tell us to delete your information. We may also keep Personal Data to comply with legal obligations or protect our or other's interests.

If you are a merchant operating a Shopify-powered store, and you close the store, stop paying your subscription fees, or we terminate your account, we retain store information for two years before we begin the deletion process.

When we process your information as a service provider or processor for the merchant, the merchant, not Shopify, decides how long your information is retained.

Your rights over your information

Depending on where you live, how you use Shopify, and subject to certain exceptions, you may have some or all of the following rights:

Right to Know: The right to request that we disclose to you the Personal Data we collect, use, or disclose about you, and information about our data practices.

Right to Request Correction: The right to request that we correct inaccurate Personal Data that we maintain about you.

Right to Request Deletion: The right to request that we delete Personal Data that we have collected about you.

To exercise your rights, including the "right to know" and "right to delete," please submit a request through our online portal. If you use Shop or Shop Pay, please visit https://shop.app/delete-account for instructions on how to request deletion of your information.

If you have visited or made a purchase from a merchant's Shopify-powered store, please contact the specific merchant directly. If you make a request to us, we will forward your request to the relevant merchant.

Please note that to protect your information and the integrity of our products and services, we may need to verify your identity before processing your request. In some cases we may need to collect additional information to verify your identity, such as your email address or a government issued ID.

Under US Privacy Laws, you may also designate an authorized agent to make these requests on your behalf. If you use an authorized agent to submit a request, we may need to collect additional information, such as a government issued ID, to verify your identity before processing your request to protect your information.

For information on the CCPA requests we have received, please see here. In certain states, you may have the right to appeal our decision regarding a request related to these rights. If you wish to appeal a decision, please contact Shopify Support.

We will not discriminate against you for exercising any of these rights.

How you can reach us

If you would like to ask about or have concerns about how we process your Personal Data, please contact Shopify Support. If you want to make a request relating to your Personal Data, please contact us using the methods set out in the section immediately above.