隐私政策

简介

我们的使命是为所有 Shopify 用户提供更好的商务体验，为此我们收集和使用您及以下各方的信息：

本隐私政策将帮助您更好地理解我们如何收集、使用和共享您的个人信息。如果我们的隐私相关做法发生更改，我们可能会更新本隐私政策。如有任何重要更改，我们将向您发出通知（例如通过 Shopify 后台或电子邮件）。

我们的价值观

信任是 Shopify 平台发展的基石，包括信任我们可正确处理您的信息。我们通过三项主要价值观来指导我们开发产品和服务。这些价值观应帮助您更好地理解我们对您的信息和隐私的态度。

您的信息属于您自己

我们会仔细分析我们提供服务所需的信息类型，并尝试仅收集我们真正需要的信息。我们会尽量在不再需要此类信息时将其删除或进行匿名化处理。开发或改进我们的产品时，我们的工程师将与隐私和安全团队密切合作，以保护用户隐私为前提。在处理所有这类任务的过程中，我们会全程遵循“您的信息属于您自己”这一指导原则。我们的目标是仅使用您的信息来为您提供服务。

我们保护您的信息免受他人访问

如果第三方请求您的个人信息，我们将拒绝与其共享该信息，除非获得您的授权或法律要求共享您的个人信息。如果法律要求我们共享您的个人信息，我们将提前告知您，除非法律禁止我们这样做。

我们帮助商家和合作伙伴履行其隐私义务

使用 Shopify 的许多商家和合作伙伴没有专门的隐私团队，因此我们务必帮助他们履行其隐私义务。为此，在开发产品和服务时，我们努力确保用户能够轻松使用这些产品和服务，并且用户隐私能够得到有效保护。我们还提供详细的常见问题解答、文档和白皮书（其中涵盖 最重要的隐私主题）并对我们收到的隐私相关问题进行回应。

我们为何处理您的信息

通常，我们会在需要履行合同义务（例如，处理您的 Shopify 平台订阅付款）或在我们或我们的合作方出于业务相关原因（例如，为您提供服务）需要使用您个人信息的情况下处理您的信息。欧洲法律将这些原因称为“合法权益”。这些“合法权益”包括：

我们仅会在考虑对您隐私的潜在风险后出于“合法权益”处理个人信息。例如：清晰透明地提供我们的隐私做法、在适当时为您提供对您个人信息的控制权、限制我们保留的信息、限制我们对您的信息执行的操作、我们将您的信息发送给谁、我们保留您信息的时长或者是我们保护您的信息所用的技术措施。

我们帮助商家使用 Shopify 的一种方式是通过使用“机器学习”[英文版]（欧洲法律将此称为“自动决策”）等技术来帮助我们改进服务。使用机器学习时，我们：(1) 仍有人参与此过程（因此这不是完全自动化）；或者 (2) 以不会产生重要隐私影响的方式使用机器学习（例如重新排列在您访问应用商店时的应用显示顺序）。

我们可能会在经过您同意的前提下处理您的个人信息，特别是在下述情况下：我们无法凭借其他的法律依据进行处理；已经获取到您的数据，而且这些数据的获取也已得到您的同意；或者，按照法律要求，我们在开展某些销售和营销活动时必须征得您的同意才能处理这些信息。您随时有权通过更改您在往来通讯中做出的选择、退订我们的通讯内容或与我们联系来撤回您的同意。

您对您的信息享有的权利

我们认为，无论您身在何处，您都应能够权访问和控制您的个人信息。根据您使用 Shopify 的方式，您可能有权请求访问、纠正、修改、删除、向其他服务提供商传输、限制或反对使用您的个人信息（例如直接营销）。如果您行使任何这些权利，我们将不会向您收取更多费用或为您提供其他级别的服务。

如果您从 Shopify 提供支持的商店购买产品并希望对您的购买信息行使这些权利，您需要直接联系相关商家。我们只是代表商家处理信息的处理者，无法决定信息的处理方式。我们将为商家提供相关工具和解答其问题，帮助他们满足您的请求。

如果您是与 Shopify 有直接关系的商家、合作伙伴、Shop 用户、Shopify 员工或其他个人，请通过我们的在线门户（英文版）提交您的数据主体请求。请注意，如果您向我们发送与您的个人信息相关的请求，我们必须确保这是您本人，然后才会回复。 为此，我们可能会利用第三方来收集和验证身份证明文件。

如果您对我们的请求响应不满意，可以联系我们来解决此问题。您还有权随时联系您当地的数据保护部门或隐私部门。

最后，由于对“请勿追踪”（英文版）信号的含义没有共识，因此我们不会以任何特殊方式响应这些信号。

我们将您的信息发送到何处

我们是一家加拿大公司，但我们与世界各地的个人合作并处理其数据。为了经营我们的业务，我们可能会将您的个人信息传输到您所在的州、省或国家/地区之外，包括传输到美国。此数据需遵循我们将其发送到的国家/地区的法律。当我们跨国发送您的信息时，我们会采取措施来保护您的信息，并且会尝试仅将您的信息发送到具有严格数据保护法律的国家/地区。

向欧洲经济区、英国或瑞士境外传输数据

如果您位于欧洲经济区、英国或瑞士境内，您的个人信息将由我们的爱尔兰子公司 Shopify International Ltd. 掌控。您的信息随后将被发送到其他 Shopify 地点和可能位于其他区域的服务提供商，包括加拿大（我们的公司所在地）和美国。我们将按照欧洲法律的要求向欧洲境外地区发送您的个人信息。

如果您位于欧洲经济区、英国或瑞士境内，当我们向加拿大发送您的个人信息时，该信息将受加拿大法律保护，欧盟委员会已证实此方式足以保护您的信息。如果我们随后将您的个人信息发送到加拿大境外（例如发送到我们的分支处理机构），则该信息将受到与标准合同条款（英文版）中规定条款相当的合同承诺的保护。

最后，尽管我们会尽力保护您的信息，但我们有时可能会依据法律要求披露您的个人信息（例如，如果我们收到有效的法院指令）。有关我们如何响应此类指令的信息，请查看我们的法律请求指南（英文版）。

How long do we retain your information

We will retain your personal data only for as long as necessary to fulfill the purposes for which we have collected it. To determine the appropriate retention period, we consider the amount, nature and sensitivity of your personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means and the applicable legal requirements. We will also retain and use your personal information to the extent necessary to comply with our legal obligations, resolve disputes and enforce our policies. If you stop using our services or if you delete your account with us, we will delete your information or store your information in an aggregated and anonymized format.

Depending on whether you are a merchant, customer, partner, user or visitor, please refer to our supplemental privacy policies, as relevant, for further details on the retention of your personal information.

Our use of Machine Learning

One of the ways in which we are able to help merchants using Shopify is by using techniques like “machine learning” (some laws, including certain EEA and UK laws, may refer to this as “automated decision-making”) to help us improve our services. When we use machine learning, we either: (1) still have a human being involved in the process (and so are not fully automated); or (2) use machine learning in ways that don’t have legal or similarly significant effects (for example, reordering how apps might appear when you visit the app store).

我们如何保护您的信息

我们团队坚持不懈地保护您的信息，并确保我们平台的安全性和完整性。我们还有独立的审核员来评估我们的数据存储和财务信息处理系统的安全性。但是，我们都知道没有绝对安全的 Internet 传输方法或电子存储方法。这意味着我们无法保证您个人信息的绝对安全。有关我们的安全措施的详细信息，请访问 https://shopify.com/zh/security（英文版）。

我们如何使用“Cookie”和其他跟踪技术

我们在自己网站上和在提供服务时使用 Cookie（英文版）和类似的跟踪技术。有关我们如何使用这些技术的详细信息，包括在我们的网站上放置 Cookie 的其他公司列表、我们在为商家商店提供支持时放置的 Cookie 列表以及您如何选择退出特定类型 Cookie 的说明，请查看我们的《Cookie 政策》。

您如何联系我们

如果您要就我们如何处理您的个人信息询问相关问题、提出相关请求或投诉，请联系 Shopify 支持，或通过以下地址之一向我们寄送邮件。如果您要提交具有法律约束力的请求以请求获得其他人的个人信息（例如，您收到传唤或法院指令），请查看我们的法律请求指南（英文版）。

Shopify Commerce Singapore Pte. Ltd. Attn: Data Protection Officer 77 Robinson Road, #13-00 Robinson 77, Singapore 068896

如果您位于欧洲、中东地区、南美洲或非洲：

Shopify International Ltd. Attn: Data Protection Officer c/o Intertrust Ireland 2nd Floor 1-2 Victoria Buildings Haddington Road Dublin 4, D04 XN32 Ireland

如果您位于亚洲、澳大利亚或新西兰：

Shopify Commerce Singapore Pte. Ltd. Attn: Data Protection Officer 77 Robinson Road, #13-00 Robinson 77, Singapore 068896

United States Regional Privacy Notice

This United States Regional Privacy Notice (“US Notice”) supplements our Privacy Policy and all supplemental privacy policies on www.shopify.com (together, the “Shopify Privacy Policies”).

This US Notice is for individuals residing in certain US states and is designed to help you better understand how we collect, use, and disclose your personal information and, depending on how you use Shopify and where you reside, how to exercise available rights under various applicable privacy laws in the US, specifically the California Consumer Privacy Act, the Colorado Privacy Act, the Connecticut Act Concerning Personal Data Privacy and Online Monitoring, the Utah Consumer Privacy Act, and the Virginia Consumer Data Protection Act (collectively, the “US Privacy Laws”).

What information we collect and share about you

To provide our apps and services to you, we must process information about you, including personal information.

We do not “sell” your personal information as that term is defined under US Privacy Laws.

Here is a summary of the categories of personal information we may have collected about you over the past 12 months and with whom we may have disclosed that information to, depending on how you use Shopify.

Why we collect and share your Personal Information

We use and share your personal information for the purposes set out in the Shopify Privacy Policies. For categories of sensitive personal information that we collect, we only use or disclose such information either with your specific consent when required, or as otherwise permitted by law.

Sources of Personal Information

To make commerce better for everyone at Shopify, we collect and use personal information provided by:

1. You: We collect the information you provide when you use our platform, including when you sign up for Shopify as a merchant, visit a Shopify-powered store, fill in order information, visit one of Shopify’s websites or contact Shopify support. We collect account and payment information you provide to us (including information about your business if you are a merchant), Shopify stores or items you save to favorites, purchases you make, reviews you post, and how you otherwise interact or communicate with stores or other users on our apps or services. We also collect information about how you browse through our apps and sites, including search terms you may enter.
2. Your device(s): We collect information from and about the devices you use, including computers, phones, and other web-connected devices you use to access our apps or services, and we combine this information across different devices you use.
3. Third parties: We receive information from partners who help us provide you with our services including the following:
   1. Email providers. If you use the Shop App and you connect your third party inboxes, such as Gmail or Outlook (according to their terms and policies and as permitted by applicable law), we receive information to identify shopping-related emails and display within Shop information about specific orders you have made, stores you have engaged with in the past, and other related information.
   2. Service Providers. We receive information from our service providers, who help us provide services to our merchants, like reviewing accounts for fraud or other concerns.
   3. Marketplaces. If you use the Shop App, we receive information about purchases you have made from other marketplaces or platforms, such as Amazon, that you choose to connect through Shop. This information helps us to provide and improve Shop, to personalize your experience using our apps and services, and to determine if you are eligible for specific offers or payment methods.
   4. Subprocessors. We work with third party subprocessors for cloud hosting, content delivery, data analysis, internal logging, fulfillment services and email transmission, among others, to provide you with our services. For more information, see Shopify’s subprocessors.
   5. Analytics and cookie providers. We receive information through our use of cookies, social plugins (such as the Facebook “like” button), pixels and tags for business purposes, such as providing information to help measure how users interact with our website content. For more information about how we use these technologies, see our Cookie Policy.

How long we keep your information

Because we need your personal information to provide Shopify services, we generally keep your personal information, including sensitive personal information, while you use Shopify products or services or until you tell us to delete your information. We may also keep personal information to comply with legal obligations or protect our or other’s interests.

If you are a merchant operating a Shopify-powered store, and you close the store, stop paying your subscription fees, or we terminate your account, we retain store information for two years before we begin the deletion process.

When you visit or make a purchase from a merchant’s Shopify-powered store, we act as a service provider or processor for the merchant, and the merchant, not Shopify, decides how long your information is retained.

Your rights over your information

Depending on where you live, how you use Shopify, and subject to certain exceptions, you may have some or all of the following rights:

1. Right to Know: The right to request that we disclose to you the personal information we collect, use, or disclose about you, and information about our data practices.
2. Right to Request Correction: The right to request that we correct inaccurate personal information that we maintain about you.
3. Right to Request Deletion: The right to request that we delete personal information that we have collected about you.

To exercise your rights, including the “right to know” and “right to delete,” please submit a request through our online portal. If you use Shop or Shop Pay, please visit https://shop.app/delete-account for instructions on how to request deletion of your information.

If you have visited or made a purchase from a merchant’s Shopify-powered store, please contact the specific merchant directly. If you make a request to us, we will forward your request to the relevant merchant.

Please note that to protect your information and the integrity of our products and services, we may need to verify your identity before processing your request. In some cases we may need to collect additional information to verify your identity, such as your email address or a government issued ID.

Under US Privacy Laws, you may also designate an authorized agent to make these requests on your behalf. If you use an authorized agent to submit a request, we may need to collect additional information, such as a government issued ID, to verify your identity before processing your request to protect your information.

For information on the CCPA requests we have received, please see here. In certain states, you may have the right to appeal our decision regarding a request related to these rights. If you wish to appeal a decision, please contact Shopify Support.

We will not discriminate against you for exercising any of these rights.

How you can reach us

If you would like to ask about or have concerns about how we process your personal information, please contact Shopify Support. If you want to make a request relating to your personal information, please contact us using the methods set out in the section immediately above.