Privacy Policy

Last updated: 14 July 2026

This Privacy Policy explains how the Cloud Call PK Shopify app (the “App”), operated by H3 Technologies (“we”, “us”), handles information when a Shopify merchant installs and uses it. The App connects a merchant’s Shopify store to their Cloud Call PK phone system so that inbound callers can be identified by name and recent orders.

1. Information we access

With the merchant’s authorisation, the App accesses:

• Store & account data — the store domain and the offline access token Shopify issues at install (used to call the Shopify Admin API on the merchant’s behalf).
• Customer data — a customer’s name, phone number, email and order history, looked up in real time when a call arrives, so the caller can be identified.
• Order data — order numbers, status, totals and line items shown to the agent, and (if enabled) tags, notes and metafields written back after a call.

2. How we use it

• To match an incoming phone number to a Shopify customer and show that customer’s name and recent orders to the merchant’s agents.
• If the merchant enables write-back, to add a CSAT tag, a feedback metafield, and/or a call-log note to the customer (and optionally their most recent order).
• To operate the merchant’s subscription and provide support.

3. What we store — and what we don’t

We do not store your customers’ personal data. Customer and order lookups are performed live against the Shopify Admin API and the results are returned to the merchant’s Cloud Call PK system without being retained by the App.

The only data the App stores is what it needs to function:

• The store domain and Shopify offline access token.
• A generated API key that authenticates the merchant’s Cloud Call PK system to the App.
• The merchant’s write-back feature settings.

4. How data is shared

Customer and order details retrieved at call time are shared only with the merchant’s own Cloud Call PK account, which requested the lookup using the merchant’s API key. We do not sell, rent, or share data with any other third party. All communication is over encrypted HTTPS.

5. Data retention & deletion

When the App is uninstalled, the store session, access token and API key are deleted. We also honour Shopify’s mandatory GDPR compliance webhooks (customers/redact, customers/data_request, shop/redact). Because we do not store customer personal data, a redaction request has no stored personal data to erase.

6. Data security

Access tokens and API keys are held on our server and transmitted only over TLS. Each lookup and write-back request must present the merchant’s secret API key.

7. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by the “Last updated” date above.

8. Contact us