Privacy Policy

THG Shopify App Privacy Notice:

Effective Date: 13 Jan 2026

THG Ingenuity Limited (“THG”, “we”, “us” or “our”) is committed to protecting your privacy. Please take the time to review this notice which explains what personal data we collect about you, how we use it, and your rights. THG Ingenuity Limited is the controller of the personal data collected via or in connection with the THG Shopify Application and any associated integration services (the “App”). This Notice applies specifically to the THG Shopify App and does not apply to THG corporate websites or consumer-facing trading websites.

1. What personal data we collect and how

We collect personal data from Shopify merchants and their authorised users when they install and use the App. This data is provided either directly by the merchant or via Shopify APIs.

• Personal data we collect includes:

  • Merchant and account information:
  • Store name and store URL
  • Business contact details
  • Administrator and authorised user details
  • Support and account communications

• Order and customer data (processed on behalf of merchants):

  • Customer name
  • Shipping and billing address
  • Email address and phone number
  • Order ID, order contents and order value
  • Product and inventory data
  • Fulfilment, delivery and returns data

• Technical and usage data:

  • IP address
  • Device and browser type
  • API request logs
  • Error logs and diagnostic data
  • App usage and performance data

  We only collect data that is necessary to provide the App’s functionality and integration services. We do not collect personal data for advertising, profiling, or resale.

2. How we use personal data

We use personal data strictly for the purpose of providing and operating the App, including to:

• Enable integration between Shopify and THG Ingenuity systems
• Process and manage order fulfilment and logistics workflows
• Synchronise product, order and inventory data
• Provide technical and operational support to merchants
• Monitor, maintain and improve App performance
• Detect and prevent fraud, abuse and misuse
• Ensure platform security and stability
• Comply with legal and regulatory obligations

We do not use personal data for marketing, behavioural advertising, analytics unrelated to the App, or resale.

3. Legal bases for processing

We rely on the following legal bases under UK and EU data protection law:

• Performance of a contract – to provide the App and integration services
• Legitimate interests – to operate, secure and improve the App
• Legal obligations – to comply with regulatory and legal requirements Where we process customer data on behalf of merchants, we act as a data processor and the merchant remains the data controller.

4. Who we share personal data with

We may share personal data where necessary to provide the App and related services, including with:

• Other companies within the THG group
• Cloud hosting and infrastructure providers
• Logistics, fulfilment and payment service providers (as instructed by merchants)
• Professional advisors such as legal, audit and compliance providers
• Regulators, courts and law enforcement authorities where required by law We do not sell personal data and do not permit third parties to use personal data for their own marketing or advertising purposes.

5. International transfers

THG operates globally and personal data may be transferred outside the UK or European Economic Area. Where international transfers take place, we ensure appropriate safeguards are in place, including Standard Contractual Clauses and UK international data transfer mechanisms.

6. Retention

We retain personal data in accordance with our data retention policy and only for as long as necessary for the purposes set out in this Notice, including providing the App services, complying with legal obligations, resolving disputes and enforcing agreements.

7. Security

We implement appropriate technical and organisational security measures to protect personal data, including encryption, access controls, monitoring, and secure cloud infrastructure aligned with ISO 27001 standards.

8. Children

The App is a business-to-business product and is not intended for use by children. We do not knowingly process personal data relating to children.

9. Your rights

Depending on your location, you may have rights to access, correct, delete, restrict, object to processing of, and request portability of your personal data. Where we process data on behalf of merchants, the merchant remains responsible for handling end-customer rights requests. We support merchants in fulfilling those requests.

10. California privacy rights

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA), including the right to know, delete and correct your personal data and to opt out of the sale or sharing of personal data. We do not sell personal data and do not use personal data for targeted advertising. Requests may be submitted to privacy@thehutgroup.com.

11. Changes to this Notice

This Notice is current as of the Effective Date stated above. We may update this Notice from time to time. If we make material changes, we will notify merchants via the App or by email.

12. Contact us

Email: privacy@thehutgroup.com

Address: THG Ingenuity Limited, Meridian House, Gadbrook Park, Cheshire, CW9 7RA, United Kingdom