This Privacy Policy explains how Simple Genius — a trading name of Tenfold Ltd, registered in England and Wales under company number 05231604 ("Simple Genius", "we", "us") — handles information in connection with our website and the Shopify apps we publish. This policy applies to all apps published by Simple Genius, including our current apps Tax Inside and +Tax, and any apps we publish in the future.
We are based in the United Kingdom and act as a data processor for the store data we access on behalf of the merchant, who remains the data controller for their store. Tenfold Ltd is registered with the UK Information Commissioner's Office (ICO) under registration number ZA370502.
1. Information we access
Each app we publish accesses only the data needed to perform its single, stated function, through the Shopify API and with the merchant's authorisation. The specific data permissions for each app are presented at the point of installation via Shopify's standard permission screen.
Our current apps access the following data:
- Tax Inside — payout, order and tax data already recorded in your Shopify store (for example VAT collected, VAT refunded, fees, refunds and adjustments), used to present a per-payout and monthly VAT view.
- +Tax — product taxability status, used to display a tax label beside taxable product prices on your storefront. Shopify remains the source of truth for whether a product is taxable.
End-customer data: Where an app's function requires access to order or transaction data, that data may include transactional information relating to your customers (such as order values, tax amounts, and refunds). Such data is accessed solely to provide the app's stated function to you as the merchant; it is not used for any other purpose and is not linked to individual customer identities.
Data storage: Our apps read data from Shopify to generate the views they display. We do not store Shopify merchant or customer data on our own servers beyond what is essential for the immediate operation of each app.
We also process basic account and contact details (such as your store domain and the email address you contact us from) to provide support.
Our website itself does not require you to create an account and does not use non-essential tracking cookies.
2. How we use information
- To provide and operate each app's core functionality.
- To respond to support and technical enquiries.
- To maintain the security, integrity and performance of our apps.
- To comply with our legal obligations.
We do not sell your data, and we do not use it for advertising or profiling.
3. What we do not do
Each Simple Genius app is built to do one specific job within your Shopify store. We do not use any app as a vehicle for anything beyond its stated function. We do not sell data, use it for advertising or profiling, or share it with third parties beyond the sub-processors listed below.
4. Lawful basis
Where UK GDPR applies, we process data on the basis of performance of a contract (providing any app you install from us), our legitimate interests in operating and securing our apps, and compliance with legal obligations.
5. Sharing and sub-processors
We share data only with service providers that help us run our apps, under appropriate agreements. These include our hosting provider (HostArmada) and Shopify, on whose platform our apps run. We may disclose information where required by law.
6. Data retention
We retain data only as long as needed to provide our apps and for legitimate business or legal purposes. When you uninstall an app, we delete or anonymise associated store data within a reasonable period, except where retention is required by law.
7. Shopify GDPR mandatory data requests
Shopify requires all apps to respond to mandatory GDPR webhooks for customer and shop data. We honour these requests:
- Customer data access (customers/data_request): if a shopper submits a data access request via your store, Shopify notifies us. We will confirm what, if any, data we hold relating to that individual.
- Customer data deletion (customers/redact): if a shopper requests deletion of their data, we will delete or anonymise any data we hold relating to them.
- Shop data deletion (shop/redact): if you uninstall an App and request deletion of your shop data, we will delete associated store data.
To submit a request directly: support@simplegenius.co.uk
8. Security
We use appropriate technical and organisational measures to protect data, including encrypted connections (HTTPS) and access controls. No method of transmission or storage is completely secure, but we work to protect your information.
9. Your rights
Subject to applicable law, you may have the right to access, correct, delete or restrict the processing of your personal data, and to object to processing or request portability. To exercise these rights, contact us using the details below. You also have the right to complain to the UK Information Commissioner's Office (ICO).
10. International transfers
Where data is transferred outside the UK or EEA, we take steps to ensure an appropriate level of protection, such as relevant safeguards required under applicable data protection law.
11. Changes to this policy
We may update this Privacy Policy from time to time. We will revise the "Effective date" above when we do, and material changes will be reflected here.
12. Contact us
Questions about this policy or your data:
Email: support@simplegenius.co.uk