Informacije koje obrađujemo
Kada se prijavite kao trgovina, partner ili ulagač, vaše podatke za kontakt i dostavljene poslovne podatke koristimo za pregled prijave i odgovor. Prijave se dostavljaju našem timu putem servisa Brevo i ne stvaraju račun.
Za izravne trgovačke račune obrađujemo ime i adresu e-pošte vlasnika računa, naziv tvrtke ili trgovine, izlog URL, odabranu platformu za e-trgovinu, prodajnu valutu, ukupni mjesečni obujam prodaje, prosječnu prodaju, trenutni omjer sporova pri plaćanju karticom, evidenciju faktura, poslovne postavke i evidenciju testa živosti prodajnog izloga. Podaci o sporovima o prodaji i kartičnom plaćanju zbirni su podaci na razini trgovine koje dostavlja trgovac, a ne zapisi transakcija pojedinačnih kupaca.
For the Shopify App, we process Shopify installation identifiers, store configuration, operational order references, timestamps, amounts, currencies, payment and transaction identifiers, risk assessments, merchant decisions, dispute status, reasons, amounts, currencies and deadlines, provider alerts and connection configuration, audit records, billing status, and verified merchant notification recipients.
Za pristup dokazima potrebna su dopuštenja Shopify i odobrenje zaštićenih podataka korisnika. Kada je omogućeno, ime kupca, e-pošta te adrese za naplatu i dostavu čitaju se iz Shopify radi pregleda osporavanja i podnošenja dokaza koje potvrđuje trgovac. Ne traže se telefonski brojevi i IP adrese kupaca. Lower Chargeback ne kontaktira kupce niti prikuplja odgovore.
Vlasnici trgovina mogu lokalno spremati šifrirane poslovne podatke i informacije o sporovima u Lower Chargeback. Vrijednosti iz Shopifyja imaju prednost, a spremanje ručno unesenih informacija nikada ne mijenja zapise u Shopifyju.
Primatelji obavijesti
Entered and verified by the merchant; never imported from Shopify customer records.
Granice plaćanja i odlučivanja
Direct account invoice records contain the invoice amount and status, but Lower Chargeback does not store card numbers. Provider credentials are encrypted before storage and are never returned after they are saved. The Shopify App does not create Shopify refunds, automatically accept or decline network cases, automatically report provider outcomes, send customer messages, or submit dispute evidence without explicit merchant confirmation.
Kako se informacije koriste
Direct account information is used to create and secure the merchant account, issue and display the registration invoice, send account and invoice messages, maintain business settings, run storefront liveness tests, and record their results. Shopify App information is used to synchronize operational order data, present risk signals, record merchant decisions, monitor disputes, match provider alerts to eligible order references, notify verified merchant recipients, maintain billing entitlements and provider connection state, and record merchant-confirmed provider actions.
Skice dokaza i PDF, PNG i JPEG dokumenti koje je učitao trgovac podržavaju pripremu sporova. Dokumenti se pohranjuju privatno i šalju na Shopify tek nakon potvrde trgovca. Učitane datoteke stavljaju se u red čekanja za brisanje nakon potvrđenog slanja; preostali dokazni zapisi brišu se najkasnije 30 dana nakon zatvaranja predmeta.
Pružatelji usluga
Lower Chargeback uses Cloudflare for Worker execution and storage. Brevo sends transactional account, invoice, and operational merchant notifications. For the Shopify App, Lower Chargeback also uses Shopify for operational commerce data and embedded application services, together with only the merchant providers explicitly connected and verified through Provider Hub.
These providers may process information in countries outside the merchant’s country. Where a cross-border transfer requires safeguards, Lower Chargeback relies on the contractual and transfer mechanisms made available by the applicable provider and required by data-protection law.
Zadržavanje i brisanje
Direct-account data is retained while needed to provide that account and meet its audit obligations. For the Shopify App, operational order, transaction, risk, dispute, and operational aggregate records are retained for no more than 180 days after their last relevant activity. Active provider cases and their source records remain available while action is required; terminal provider cases and their source identifiers, actions, and events are deleted 30 days after closure. Shopify App audit records, observed Shopify users, notification deliveries, and terminal provider-webhook metadata are retained for no more than 180 days.
Objekti web-dojavnika pružatelja usluga i zapisi o primitku web-dojavnika Shopify App čuvaju se najviše 30 dana.
Konfiguracija instalacije, šifrirane vjerodajnice, potvrđeni primatelji, pravo na zbirnu naplatu i minimalni zapisi potrebni za usklađivanje sa zahtjevima za brisanje podataka zadržavaju se samo dok je aplikacija instalirana ili ih treba omogućena usluga. Deinstalacijom se poništavaju aktivne Shopify vjerodajnice i započinje brisanje Shopify podataka instalacije. Shopify web-dojavnici za usklađenost imaju prioritet i pokreću brisanje podataka o kupcima i podataka o trgovini. Životni ciklusi sigurnosnog kopiranja potprocesora i dalje su regulirani primjenjivim uvjetima usluge pružatelja.
Sigurnost i pristup
Production secrets are held in Cloudflare secret configuration. Stored provider credentials and Shopify authorization tokens use authenticated encryption. Administrative access is restricted, operational changes are audited without customer identity values, production data is not copied into demo or test datasets, and security incidents are investigated and contained through the documented response procedure.
kontakt
Trgovci i subjekti podataka mogu zatražiti pristup, ispravak, brisanje, ograničenje ili kopiju informacija povezanih s njima, ili se usprotiviti prihvatljivoj obradi slanjem e-pošte marian@agilemedia.com. The request should identify the relevant shop and relationship to the data so Lower Chargeback can verify authority before responding. Shopify privacy requests may also be initiated through the merchant, which delivers the required Shopify compliance webhook.
Adresa za dopisivanje: Intrarea Gheorghe Simionescu 19, stan B26, Bukurešt 031779, Rumunjska.