Rumi Bundles privacy policy

The short version

Introduction

Rumi Bundles (“the App”, “we”, “us”) provides bundles, mix and match, volume discounts, buy X get Y and BOGO offers, free gifts and a rewards cart drawer to merchants who use Shopify to power their stores. This Privacy Policy describes how personal information is collected, used and shared when you install or use the App in connection with your Shopify-supported store. It also covers this website.

For information about you as a merchant, Rumi Bundles is responsible for how it’s used (the “controller”). For information about your shoppers, you are the controller, and we process it only on your behalf to make your offers work (the “processor”).

Personal information we collect

Information from the Shopify API

When you install the App, we’re automatically able to access certain types of information from your Shopify account, depending on the features you use:

• Shop information: store name, domain, contact email, currency and plan, to set up your account and show prices in the right currency.
• Products and collections: titles, variants, prices, images and inventory, to build bundles and offers.
• Discounts: to create and apply the bundle, volume, BOGO and gift discounts you set up.
• Orders: order totals and line items that include an offer, to report revenue, orders and conversion. This includes orders placed through Shopify POS.
• Themes: to add the App’s blocks and cart drawer to your storefront.

Information about you and your account

We collect the following directly from you, outside the Shopify API:

• The offers, settings and design choices you create in the App.
• Anything you send us when you ask for support, including your name, email address and the details of your request.
• How you use the App, such as which features you open.

The App is free. We don’t collect or store card or bank details. If paid features are added later, billing will run through Shopify, and we’ll only receive the status of your plan.

Information about shoppers and store visitors

To show offers and apply discounts, the App works with shopping activity on your store:

• Products and quantities a shopper picks for a bundle or offer.
• Cart contents and totals, to unlock gifts and rewards.
• Offer views, clicks and add-to-cart events, for your analytics.
• Technical details sent with each request, such as IP address, browser type and time zone, which our hosting providers record in server logs.

We don’t ask for or store shoppers’ names, email addresses, phone numbers, shipping addresses or payment details.

Visitors to this website

When you visit rumibundles.com, our hosting provider records standard technical details: IP address, browser and device type, the pages you open, the page that sent you here and the time of your visit. This website doesn’t use advertising cookies or track you across other sites.

How we collect it

• Directly from you, when you set up offers or contact us.
• Through your Shopify account, using the Shopify API access you approve when you install the App.
• Log files, which track actions on the App and website and record data such as IP address, browser type, referring and exit pages, and date and time.
• Cookies and similar storage, small data files placed on a device. The App may store data in the shopper’s browser, such as the current bundle selection, so offers work as they browse. It isn’t used to track shoppers across other sites.

How we use personal information

We use the personal information we collect to:

• Provide the service and operate the App: show offers, apply discounts and add gifts.
• Show you analytics for each offer.
• Communicate with you, including answering support requests.
• Optimize and improve the App, using aggregated or anonymized data where we can.
• Send occasional product news, which you can unsubscribe from at any time using the link in every email.
• Meet legal obligations, settle disputes and enforce our terms.

We don’t make decisions about anyone using only automated processing that have legal or similarly significant effects on them. The App’s automatic steps, like applying a discount when a cart qualifies, follow the rules each merchant sets.

Sharing personal information

We share personal information only with:

• Shopify, the platform the App runs on. Learn how Shopify uses personal information at shopify.com/legal/privacy.
• Vercel, which hosts this website.
• Brevo, which we use to send emails.
• Hosting and infrastructure providers that run the App and store its data.

These providers may use the information only to provide their service to us, under agreements that require them to protect it. We don’t sell personal information.

We may also share personal information to comply with applicable laws and regulations, to respond to a subpoena, search warrant or other lawful request for information we receive, or to otherwise protect our rights. If Rumi Bundles is sold or merged, information may transfer to the new owner, and this policy would continue to apply to it.

Advertising

We don’t use personal information for behavioral or targeted advertising, and we don’t share it with advertising networks.

Your rights

Depending on where you live, you can ask us to:

• Give you a copy of the personal information we hold about you.
• Correct or update information that’s wrong.
• Delete your information.
• Limit how we use your information, or object to a use.
• Send your information to you or another service in a usable format.
• Withdraw consent you gave earlier.

Europe, the UK and Switzerland

If you’re a European resident, you have the right to access the personal information we hold about you and to ask that it be corrected, updated or deleted. To exercise these rights, use the contact details below.

We process your information on these grounds:

• To fulfill contracts we may have with you, including providing the App and support.
• Legitimate business interests, such as keeping the App secure and improving it, in ways that don’t override your rights.
• Legal obligations, such as keeping records the law requires.
• Consent, for optional things like product news emails.

Your information will be transferred outside Europe, including to Canada and the United States, where Shopify stores data, and to India, where Rumi Bundles is based. When we transfer personal information out of the European Economic Area, the UK or Switzerland, we use safeguards the law recognizes, such as the European Commission’s Standard Contractual Clauses. You can complain to your local data protection authority if you’re unhappy with how we handle your information.

California and other US states

Residents of California, Virginia, Colorado and other states with privacy laws can ask what personal information we hold, and ask us to correct or delete it. We don’t sell personal information or share it for targeted advertising. We won’t treat you differently for using these rights, and if we turn down your request, you can appeal by replying to our decision.

India

Under the Digital Personal Data Protection Act, 2023, you can ask for a summary of your data and how it’s used, ask us to correct or erase it, and nominate someone to act for you. You can raise a grievance with us, and if it isn’t resolved, take it to the Data Protection Board of India.

Shoppers

If you shopped at a store that uses the App, contact that store first, because it controls your information. We respond to the data requests and erasure requests that Shopify sends us on the store’s behalf.

How we respond

We may ask you to confirm your identity before acting on a request, and an authorized agent can make a request for you with your permission. We respond within the time the law sets, for example one month under the GDPR and 45 days under the CCPA.

Data retention

When an order includes one of your offers, we keep that order information for our records and your analytics unless and until you ask us to delete it. We keep the rest of your store’s data while the App is installed.

When you uninstall the App, Shopify sends us an erasure request, and we delete your store’s data when we receive it. We also act on Shopify’s requests to share or delete a specific shopper’s data. In a few cases we keep limited records longer, for example where tax law or an open dispute requires it, and delete them once they’re no longer needed.

Security

We encrypt data in transit and limit access to the people who need it. No system is completely secure. If a breach affects your data, we’ll notify you as the law requires.

Children

Rumi Bundles is a tool for businesses and isn’t meant for anyone under 18. We don’t knowingly collect data from children. If we learn that we have, we’ll delete it.

Changes

We may update this privacy policy from time to time to reflect changes to our practices or for other operational, legal or regulatory reasons. When we do, we’ll change the date at the top of this page. If a change affects how we use your data in a significant way, we’ll tell you in the App or by email before it takes effect.

Contact and complaints

For more information about our privacy practices, if you have questions, or if you would like to make a complaint, please email us at rumibundles@gmail.com.

Rumi Bundles
Chandigarh, India