EnquiryFlow Privacy Policy

Effective date: 2 November 2026

EnquiryFlow (“the App”) helps Shopify merchants collect and manage product enquiries and quote requests.

This Privacy Policy explains how Greeny Nicotec Enterprise Company Limited (“we,” “us,” or “our”) collects, uses, stores and shares information when merchants and their customers use the App.

Information we collect

Merchant and store information

When a merchant installs or uses EnquiryFlow, we process information needed to connect and operate the App, including:

• Shopify store domain, installation information and app settings.
• Product information used in enquiries, including product identifiers, titles, images, SKUs and quantities.
• Shopify authentication tokens and session information. Depending on the session, this may include an authorized user’s identifier, name, email address and account role.
• Information merchants provide when contacting us for support.

Customer enquiry information

When a customer submits an enquiry or quote request, we collect the information they provide, which may include:

• Contact name and email address.
• Phone number and company name, when provided.
• Selected products, quantities and item remarks.
• General messages and answers to merchant-configured form fields.
• A Shopify customer identifier, when available through the authenticated storefront integration.

We also store enquiry reference numbers, submission dates, statuses and associated merchant notes.

Customers should not enter payment card details, passwords or sensitive personal information into enquiry fields.

Technical information

Our hosting and infrastructure providers may process technical information, such as IP addresses, request timestamps and server logs, to deliver, maintain and secure the service.

How we use information

We use information to:

• Operate EnquiryFlow and connect it to the merchant’s Shopify store.
• Save and display product enquiries and quote requests.
• Allow merchants to search submissions, update statuses and manage follow-ups.
• Send service notifications where email delivery is configured and enabled.
• Authenticate authorized users, prevent duplicate submissions and protect against abuse.
• Provide support, troubleshoot problems and respond to privacy requests.
• Meet applicable legal obligations.

We do not sell customer enquiry information or use it for our own advertising.

Browser storage

EnquiryFlow uses browser local storage and session storage to remember enquiry lists, cache storefront settings and help prevent duplicate submissions.

Information saved in the browser may remain until it expires, is cleared by the App or is deleted through browser settings.

Clearing browser storage does not delete enquiries already submitted to a merchant.

How information is shared

We share information as needed to provide the service or meet legal obligations:

• With merchants: Submitted enquiries and contact details are available to the relevant merchant and authorized users of their Shopify Admin.
• With Shopify: We exchange information with Shopify to authenticate users, retrieve permitted product information and process app lifecycle and privacy requests.
• With Render: Render provides application hosting and database infrastructure.
• With Resend: Where email notifications are configured and enabled, Resend processes recipient information and message content needed to deliver those notifications.
• For legal purposes: We may disclose information where required by law or necessary to establish, exercise or defend legal rights.

Merchants may independently download information or contact customers. Their subsequent use of that information is governed by their own privacy practices.

Data retention and deletion

Submitted enquiries remain stored until removed through an applicable deletion process. The App does not currently guarantee automatic deletion after a fixed number of days.

We determine retention based on the purposes described in this policy, the merchant’s use of the service, privacy requests and applicable legal requirements. Merchants and customers may contact us to request deletion of information, subject to identity verification and applicable law.

When the App receives a verified Shopify customer-erasure request, it deletes matching enquiry records and associated items, notes, status history and notification records from its active database.

Authentication sessions are removed when the App receives Shopify’s uninstall notification. Uninstalling the App does not itself immediately erase all enquiry records. When Shopify sends a store-erasure request, the App deletes the associated store records and related information from its active database.

Where backups are enabled, deleted information may remain in backup copies until those copies expire under the hosting provider’s configured retention schedule. Backup availability and retention depend on the hosting plan in use.

Copies downloaded by merchants or delivered through email are subject to the retention practices of those recipients and providers.

Merchant and customer responsibilities

For customer enquiry information processed on a merchant’s behalf, the merchant generally determines why that information is collected and how it is used. We process it to provide EnquiryFlow’s services.

Merchants are responsible for providing appropriate privacy notices, collecting information lawfully and configuring form fields appropriately.

We separately handle information needed to administer the App, provide support and protect the service.

International processing

We operate from [BUSINESS COUNTRY].

Information may be processed in the United States, where our application and database are hosted, and in other countries where Shopify and our service providers process information.

Where applicable law requires safeguards for international transfers, we will use the required transfer arrangements.

Security

We use technical and organizational measures designed to protect information, including HTTPS connections, authenticated administrative access and verification of Shopify webhook signatures.

No method of transmission or storage is completely secure.

Your privacy rights

Depending on applicable law, you may have rights to:

• Access or obtain a copy of your personal information.
• Request correction or deletion.
• Restrict or object to certain processing.
• Request data portability.
• Withdraw consent where processing relies on consent.
• Make a complaint to your local data protection authority.

Customers should first contact the merchant to whom they submitted their enquiry. Merchants and customers may also contact us using the details below.

We may request information to verify identity and locate relevant records before responding.

Where applicable, we process information to provide contracted services, pursue legitimate interests such as security and support, comply with legal obligations, or act on consent where required.

Changes to this policy

We may update this Privacy Policy to reflect changes to the App, our practices or legal requirements.

The revised policy will show an updated effective date. We will provide additional notice where required by law.

Contact us

For privacy questions or requests, contact:

Operator: Greeny Nicotec Enterprise Company Limited
Privacy contact: Chi Yen Yu
Privacy email: nidata99@gmail.com
Business mailing address: [BUSINESS POSTAL ADDRESS, INCLUDING COUNTRY]