Privacy Policy

Effective date: August 7, 2026 · Last updated: August 7, 2026

This Privacy Policy explains how One Click Compliance Solutions ("Remissa", "we", "us", or "our") collects, uses, stores, shares, and protects information in connection with the Remissa — EU Withdrawal Form application ("the App") for Shopify.

The App adds a withdrawal declaration form to a merchant's storefront that any visitor can complete without an account, records each declaration together with the exact wording the person was shown, generates a timestamped PDF receipt, and gives the merchant a dashboard in which to decide each request. We process only the data needed to provide that functionality.

1. Our role

The merchant who installs the App is the data controller, and Remissa acts as a data processor, processing data on the merchant's behalf and on their instructions. Each merchant is responsible for having a lawful basis for the processing carried out through the App and for their own customer-facing privacy notices. This policy is the agreement under which we process that data.

Merchants accept a data processing agreement inside the App before the form goes live.

2. Information we collect

We collect the minimum personal data required to operate the App.

From the person making a declaration (the merchant's customer, who may not have an account):

• Contact and identification details — full name and email address, and optionally a phone number and postal address if provided.
• The free-text message, if one is written on the form.
• The order reference exactly as typed, and the order it was matched to, where a match was found. A declaration is accepted even when no order matches.
• The declaration snapshot — an immutable copy of the labels, fields and legal wording shown at the moment of submission, in the language shown. This is the evidence the App exists to preserve, and it is retained with the declaration.
• A salted hash of the IP address, and the browser user agent, used to rate-limit and detect abuse of a form that is open to the public. We do not store the IP address itself — only a one-way hash of it, which is not included in data exports.
• The PDF receipt generated for the declaration, held in our object storage and reachable from a long-lived link sent to the person who declared.

From the merchant and their store:

• Merchant account information — the name and email address of the store owner or staff who installs or signs in, and the store's myshopify.com domain.
• Authentication data — OAuth access tokens issued by Shopify and the App's own session tokens.
• Store data needed to operate the form — orders, fulfilment and delivery events (used to calculate the withdrawal deadline), products and product tags (used to flag exempt items), and the store's theme navigation, so the link to the form can be added and re-checked.
• Your configuration — form and email text overrides, notification and reply-to addresses, retention settings, and the record of the data processing agreement acceptance.
• The audit trail — an append-only record of every event on a declaration (received, matched, acknowledged, decided), including the email address of the staff member who made a decision.

We do not collect payment card details, and we do not use any of this data to build profiles or for advertising.

3. How we use information

We tell merchants what personal data we process and our purposes for processing it, and we limit our use of personal data to those purposes:

• To present the withdrawal form and accept declarations through it.
• To look up the referenced order, flag exempt items, and calculate the withdrawal deadline from fulfilment and delivery events.
• To generate the PDF receipt and send the acknowledgement, decision and merchant notification emails.
• To preserve the declaration snapshot and the audit trail as a record of what happened.
• To add and monitor the link to the form on the merchant's storefront.
• To rate-limit and prevent abuse of a publicly reachable form.
• To provide support, maintain security, and debug errors.
• To comply with legal obligations.

We do not sell personal data, and we do not use it for advertising or for automated decision-making that produces legal or similarly significant effects. Every decision on a withdrawal request is made by the merchant.

4. Consent

By installing and using the App, merchants accept this Privacy Policy, which governs how we process personal data on their behalf. Because Remissa acts as a processor on the merchant's instructions and has no direct relationship with the people who submit declarations, the lawful basis for that processing, and any notice or consent owed to those people, are the merchant's responsibility as controller.

5. How we share information

We share information only as needed to run the service:

• Shopify — we exchange data with the Shopify Admin API to read the order, fulfilment, product and theme data described above, and to add the form page and navigation link.
• The merchant — declarations, receipts and the audit trail are shown to the merchant whose store the declaration was made against. They are never shown to any other merchant.
• Service providers (sub-processors) — Amazon Web Services (AWS) for hosting, database, object storage, cache and messaging, and Sentry for error monitoring. These providers process data on our behalf under contractual confidentiality and security obligations.
• Legal and safety — we may disclose information if required by law or to protect our rights, users, or the public.

We do not sell or rent personal data to third parties.

6. Data storage and security

We apply administrative, technical, and physical safeguards designed to protect personal data:

• Encryption — data is encrypted in transit (TLS) and at rest, and our backups are encrypted.
• Tenant isolation — each store's declarations and receipt files are stored under that store's own keys and are not reachable from another store's session.
• Environment separation — we keep test and production data separate.
• Access control — we limit staff access to personal data on a least-privilege basis, enforce strong authentication for staff, and log access to personal data.
• Resilience — we maintain a data loss prevention strategy and a security incident response policy.

Data is hosted in the United States (AWS). No method of transmission or storage is completely secure, but we work to protect personal data using industry practices.

7. Data retention and deletion

Declarations are kept for as long as the merchant's retention policy says, and no longer:

• Retention period — set by the merchant, and 24 months by default, counted in calendar months from the date of the declaration. A merchant who shortens the period changes it for the records they already hold, not only for future ones.
• At expiry, the merchant chooses between two outcomes. Anonymisation clears the name, email, phone, address, message, the order reference as typed, the hashed IP and user agent, and the personal fields inside the declaration snapshot, leaving a record that identifies nobody. Deletion removes the declaration and its events outright.
• Either way, the PDF receipt is deleted from our storage and its retrieval link stops working. Personal data in a durable-medium document does not survive the erasure of the record it belongs to.
• When a merchant uninstalls the App, Shopify sends us a shop erasure request, which we process as described below.
• We may retain limited data longer where required for legal, accounting, or security purposes.

8. Your rights

Depending on where you are, you may have rights to access, correct, delete, port, or restrict the processing of your personal data, and to object to certain processing, under laws such as the GDPR and CCPA/CPRA.

Because Remissa acts as a processor, a person who has submitted a declaration should direct their request to the merchant whose store they submitted it to — that merchant is the controller. We assist merchants in responding, and we implement the erasure and access requests Shopify forwards to us:

• Customer erasure (customers/redact) — that person's declarations are anonymised or deleted, and their receipt files removed, following the store's retention mode.
• Customer data request (customers/data_request) — we compile that person's declarations, with a link to each receipt, and provide the bundle to the merchant to pass on.
• Shop erasure (shop/redact) — the store's declarations, events and stored files are removed.

Merchants may also contact us directly using the details below.

9. International data transfers

Remissa is operated from the United States, and personal data submitted through the App — including personal data of individuals in the European Union and the European Economic Area — is processed there. Where personal data is transferred out of the EU/EEA or the United Kingdom, we rely on appropriate safeguards, such as the European Commission's standard contractual clauses, and we require the same of our sub-processors.

10. Children's privacy

The App is intended for use by merchants and their adult customers, and is not directed to children. We do not knowingly collect personal data from children.

11. Changes to this policy

We may update this Privacy Policy from time to time. For material changes we will provide reasonable notice (for example, at least 30 days where practicable) by updating the effective date and, where appropriate, notifying merchants.

12. Contact us

Questions, requests, or complaints about this policy or our data practices:

• One Click Compliance Solutions
• Email: support@euwithdraw.com
• Address: 285 W Wieuca Rd NE, Atlanta, GA 30342, United States

If you believe we have not addressed your concern, you may have the right to lodge a complaint with your local data protection authority.