Effective: September 2026
Thomas Wüstenberg, trading as TrueBuildStudio
Im Waldquartier 41
45892 Gelsenkirchen
Germany
truebuildstudio@gmx.de
Depending on permissions granted, MarginHalo can process shop/app identifiers, product and variant data, prices and costs, order and line-item data, discounts, refunds, cancellations, fulfillment and shipping information, payment/transaction information where required for commercial analysis, merchant settings and technical synchronization/security data. Processing is limited to authentication, synchronization, margin and contribution analysis, risk detection, merchant notifications, troubleshooting, security and reliability.
The core functionality does not generally require customer names, postal addresses, telephone numbers or customer email addresses and is not designed to store those directly identifying fields for margin analysis. Order information can nevertheless constitute protected customer data under Shopify's classification. Protected customer data is not used by the core functionality for advertising, customer profiling or sale of data.
Order analyses are retained for 90 days by default and then automatically deleted. Current product data is retained while the product is monitored in Shopify Collective. Technical diagnostic data is retained for 30 days. On uninstall or following a valid Shopify deletion request, the related shop data is removed through the configured deletion process. MarginHalo supports Shopify processes for customer data access, customer data deletion and shop data deletion.
Cloudflare is used for hosting, server-side processing and database infrastructure; specific processing locations can depend on the infrastructure and configuration used. Resend (Plus Five Five, Inc., USA) is used for operational emails, particularly risk notifications, and can process the configured merchant notification address and required message content. Where information is processed outside the EEA, transfers are subject to applicable data-protection requirements and appropriate transfer mechanisms.
TrueBuildStudio uses appropriate technical and organizational measures including encrypted transmission, access restrictions, secure authentication and data minimization. Subject to applicable law, individuals can have rights including access, rectification, erasure, restriction, portability and objection and can lodge a complaint with a competent supervisory authority. Requests: truebuildstudio@gmx.de.