Brand privacy notice · Front Store

This notice is for brands that install the Front Store sales channel on their Shopify store, and for the people who use the brand's account. It says what we read from your store, what we hold about you and your team, why, for how long, and who else sees it.

Who is responsible

The controller of the personal data described in this notice is:

Company name: Black Fenix Korlátolt Felelősségű Társaság (Black Fenix Kft.)
Legal form: Limited liability company (korlátolt felelősségű társaság)
Registered seat and postal address: 1023 Budapest, Lajos utca 35., Hungary
Email: contact@front.store
Company registration number: 01-09-471036, Company Registry Court of the Budapest-Capital Regional Court (Fővárosi Törvényszék Cégbírósága)
Tax number: 33138042-2-41
Founded: 2 October 2026

We have not appointed a Data Protection Officer. Write to contact@front.store with any question about your data.

We act as a controller for everything in this notice, including the order data we read from your store, because we decide what it is used for: crediting the creator, billing your commission and preventing fraud. The order data we hold never identifies a shopper. Our general Privacy notice covers this website and creator sign-in, and the privacy notice for shoppers covers what we record when someone browses a creator storefront. The data-sharing terms you accepted when you installed the channel still apply; this notice explains them, it does not change them.

What we receive from your Shopify store, and why

When you install the channel, Shopify lets us read the following from your store. We use it only to run the channel.

Your shop: its myshopify domain, name, address, country, currency, plan, logo and the checkout features it offers, so that we can show your brand to creators and shoppers and take shoppers to your checkout.
Who opens the app: the ID of the Shopify staff member who opens Front Store in your Shopify admin, so that we know which of your team linked the account or changed a setting.
Products, inventory, locations and shipping profiles: the products you publish to the channel with their variants, prices, images and stock, the locations that hold the stock and the shipping profiles that apply, so that creators can list them and shoppers see what is in stock and what delivery costs.
Discounts: the discount codes you offer through the channel and the limits Shopify applies to them.
Orders placed through a creator storefront: only orders that carry a Front Store reference. We read the order ID and number, the line items, amounts, discounts, tax and currency, the payment and fulfilment status, and any refund or fulfilment. We use these to credit the creator, bill your commission, settle refunds and spot fraud.

What we never receive

We never ask Shopify for a shopper's name, delivery address, email address or phone number. Shopify classes order data as protected customer data, and we ask for the lowest level of that access only, without any field that identifies a person. If Shopify sends such a field with an order anyway, we remove it before the notification is stored. The details a shopper gives on your checkout are yours, and your own privacy policy covers them. Please do not send us shopper details; if you need our help with an order, give us its order number.

What we hold about you and your team

Account holder: the name and email address of the person who opened the account, the store owner's email address Shopify gives us when you install Front Store, and any notification email you choose. Account notices go to the notification email, or to the store owner's email if you have not chosen one.
Contact details you choose to show shoppers: a business phone number, if you add one.
Sign-in security: your two-step sign-in and passkey settings, and for each sign-in its method, time, a short name for the browser and device (such as "Safari on iPhone"), the country and region the connection comes from, and the IP address.
Your settings and records: commission rates and briefs, the terms you accepted and when, commission statements, Shopify App Pricing usage charges, and a log of who changed what in the console.
Correspondence: what you write to us by email or through the contact form, and our replies.

Data protection law protects people, not companies. Where your brand is a company, this notice applies to the people who act for it: the account holder, the staff who open the app, and whoever writes to us.

Why we process it, and the legal basis

To provide the channel you installed: listing your products, taking shoppers to your checkout, crediting creators and billing your commission. This is needed to perform our contract with you (GDPR Article 6(1)(b)). Where the person using the account is your employee rather than the party to the contract, we rely on our legitimate interest in running the service you asked for (Article 6(1)(f)).
To keep accounting and tax records of commission, statements and invoices, which the law requires (Article 6(1)(c)).
To keep accounts secure and prevent fraud, including spotting orders and refunds that look wrong and showing you the devices signed in to your account (Article 6(1)(f)).
To answer you and tell you about changes to the service or these terms (Article 6(1)(b) and 6(1)(f)).

We do not use this data for advertising, do not sell it and do not profile you. We make no decision about you or your business solely by automated means that has a legal or similarly significant effect.

How long we keep it

Your shop, products, inventory, locations, shipping profiles and discounts: while the channel is installed. Shopify asks us to erase them 48 hours after you uninstall, and we do (see below).
Orders placed through a creator storefront, commission statements, usage charges and invoices: while your account is open, and then for eight years after the end of the financial year they belong to, which is the period Hungarian accounting law requires.
Shopify notifications: each is applied as it arrives and its content kept only as part of the records above. A notification we could not apply is kept, without any shopper details, until a member of our staff has replayed or closed it, and is deleted 30 days after that.
Account holder details, contact details, settings, acceptance records and the console log: while your account is open and for 90 days after it closes, except what is part of the accounting records above.
Sign-in records: the IP address for 12 months after the sign-in; the rest while your account is open.
Correspondence: two years after we have dealt with your request, and longer only where the law requires it or to establish or defend a legal claim.
Error reports: 90 days. They are stripped of shopper details, credentials and query strings before they leave our systems.

Where the data is kept, and who else receives it

Your data is stored on Amazon Web Services in the European Union, in the Frankfurt region. These providers process data on our behalf:

Amazon Web Services EMEA SARL (Luxembourg): Hosting, database and backups in Frankfurt, Germany
Resend, Inc. (USA): Email delivery
Functional Software, Inc., trading as Sentry (USA): Error reports
Grafana Labs (USA): Service metrics, logs, traces and alerting
Slack Technologies, LLC (USA): Alerts to our staff, which may name your shop

Shopify is not our processor: it is the platform your store runs on, and its own privacy policy covers what it does with your data.

Resend, Sentry, Grafana Labs and Slack are based in the United States. Transfers of personal data to them are covered by the EU–US Data Privacy Framework where the provider is certified under it, and otherwise by the European Commission's Standard Contractual Clauses, with the UK Addendum for data about people in the United Kingdom. You can ask for a copy by writing to contact@front.store. We do not sell personal data.

When you uninstall, and Shopify's erasure requests

When you uninstall the channel, we delete the access Shopify gave us at once and stop reading from your store. Your products, stock and shop details stay on file for 48 hours, so that a reinstall can pick up where you left off, and an order a shopper placed before the uninstall is still settled and billed.

48 hours after an uninstall, Shopify sends us a request to erase your shop (shop/redact). We then erase our copy of your shop's products, inventory, locations, shipping profiles, discounts and shop details, delete any notification still waiting for your shop, and blank the shop's domain. We keep your account, its sign-in, and the order, statement and invoice records for the periods above, because we need them to settle what is owed and to meet accounting law. If you reinstall before the request arrives, nothing is erased.

Shopify also forwards a shopper's request to see or erase their data (customers/data_request and customers/redact). We hold nothing that identifies a shopper, so there is nothing for us to return or erase, and the order stays on file as a financial record with no personal detail. Such a request is for you to answer from your own records; write to us if you need our help with it.

Your rights

You and the people who act for your brand can ask us for access to your personal data, and for its correction, erasure or restriction, object to its processing, and where it applies ask for it in a portable form. Write to contact@front.store. We answer within one month. You can close your account at any time from the console or by writing to us.

Where we rely on our legitimate interests (GDPR Article 6(1)(f)), such as keeping accounts secure and preventing fraud, you can object at any time on grounds relating to your particular situation. We then stop, unless we have compelling legitimate grounds that override your interests, rights and freedoms, or need the data to establish, exercise or defend a legal claim.

Your shoppers' rights

A shopper who wants to exercise their rights over an order should contact you, the seller, because you hold their details and we do not. If a shopper writes to us, we tell them this and, where we can, point them to you.

Complaints

You can complain to the data protection authority of the EU country where you live or work, or where you think the breach happened, or go to court. In Hungary, where we are based, the authority is:

Authority: Hungarian National Authority for Data Protection and Freedom of Information (NAIH)
Address: 1055 Budapest, Falk Miksa utca 9-11.; postal: 1363 Budapest, Pf. 9.
Contact: +36 1 391 1400, ugyfelszolgalat@naih.hu, naih.hu

Changes to this notice

When we change this notice, we update the date at the top. If a change materially affects how we use your data, we tell the account holder by email before it takes effect.