Privacy Policy

Neeila is a candle manufacturing and fulfillment app for Shopify, operated by ForeverWick Candle Company. Merchants use it to design private-label products, publish them to their Shopify store, and have orders manufactured and shipped on their behalf.

This policy explains what we collect, why, how long we keep it, and how to have it erased. Where we process a shopper’s personal data, we do so as a processor acting on behalf of the merchant whose store took the order; the merchant is the controller of that data.

What we collect

Store and account information

• Your .myshopify.com domain, store name and store contact email
• An access token that lets the app call the Shopify Admin API on your behalf
• The permissions you granted at install

Product information you create

• Product names, retail prices and the vessel, fragrance and add-on choices you make
• Label artwork you upload
• The Shopify product and variant identifiers we create for you

Order information

When a customer buys one of your Neeila products, Shopify sends us the order so it can be manufactured and shipped. That includes:

• The customer’s name and email address
• The shipping address
• The items ordered, quantities and order total
• The tracking number once the parcel ships

We do not collect or store payment card details. Payment is taken by Shopify in your store; we never see it.

Why we use it

• To manufacture, pack and ship the orders your customers place
• To create and update products in your Shopify store and publish them to your storefront
• To write tracking information back to the order so your customer is notified
• To calculate what you are charged for fulfillment and show your account balance
• To keep the service secure, diagnose faults and meet our legal obligations

We do not sell personal data, and we do not use your customers’ personal data for advertising or to build profiles.

Who we share it with

• Shopify — the source of order data and the destination for the products and fulfillments we create.
• Cloudflare — hosting, database and file storage. Application data and uploaded artwork are stored on Cloudflare infrastructure.
• Shipping carriers — the delivery address and recipient name, so the parcel can be delivered.

We may also disclose information where we are legally required to, or to establish or defend legal claims.

How long we keep it

Customer personal data is erased one year after an order is completed. A daily job overwrites the customer’s name, email address and shipping address on any order that has been delivered or cancelled for more than 365 days. The order record itself is retained as a financial record, but nothing identifying the person remains.

The clock starts when the order finishes, not when it was placed — an order still in production needs its shipping address however long ago it was made.

Store and account information is kept while the app is installed. When you uninstall, Shopify notifies us and we delete the store’s orders, the products we published for it, and the access token, within 48 hours.

Erasure and access requests

If one of your customers asks for their data, make the request through Shopify. Shopify forwards it to us automatically and we act on it:

• Data requests — we return what we hold for that customer to you, so you can pass it on.
• Erasure requests — we overwrite the customer’s name, email and shipping address on every order from your store.

Requests are actioned within 30 days. Depending on where you or your customer live, there may be additional rights — to access, correct, port or object to processing. Contact us at the address below and we will help.

Security

• All traffic is encrypted in transit over HTTPS
• Access tokens are short-lived and refreshed automatically
• Access to personal data is restricted to what is needed to manufacture and ship orders
• Uploaded artwork is stored privately and served only to the merchant who uploaded it

International transfers

Our infrastructure is operated by Cloudflare and data may be processed in countries other than your own, including the United States. Where personal data is transferred out of the UK or the European Economic Area, the transfer is made under an approved safeguard such as the Standard Contractual Clauses.

Changes

We will update this policy when the app changes what it collects or how it is used. The effective date at the top shows when it last changed. Material changes will be notified to installed merchants.

Contact

ForeverWick Candle Company
ATTN: Privacy Officer
15210 Fitzhugh Rd. #2200
Austin, TX 78736
United States
privacy@neeilacandles.com

This policy covers the Neeila app for Shopify. The ForeverWick Candle Company online store has its own separate privacy notice, which governs purchases made directly from that store.