Privacy policy
Last updated October 27, 2026
ShopLynk is a Shopify app run by Audax Marketing ("we", "us"). It connects a supplier's Shopify store with the retailers the supplier approves: retailers sell the supplier's products on their own stores, and orders for those products go to the supplier to ship. This policy explains what information ShopLynk handles, why, and how long we keep it.
Who this covers
It covers merchants who install ShopLynk (suppliers and retailers) and their staff, and the customers of a retailer's store whose orders include a supplier's products. For those customers, the retailer is the business responsible for their information; ShopLynk handles it on the retailer's behalf, only to get their order shipped.
Information we collect
From Shopify when a store installs ShopLynk
- The store's name and myshopify.com domain.
- An access token for the store's Shopify API and the permissions it granted. Tokens are encrypted before they're stored.
From retailers when they sign up
- Business name, billing email, phone number and business address, and the region the store ships from.
- When the retailer accepted our terms, and the Shopify staff account that accepted them.
While the app runs
- Product, price, cost and stock information for the products a supplier shares and a retailer imports.
- For each order that goes to a supplier: the Shopify order numbers, line items and totals, tracking numbers, changes the retailer made to the order, and the weekly statements built from them.
- A record of when ShopLynk read customer details for an order and which fields it read (never the details themselves).
Customer details on orders
When a retailer's order includes a supplier's products, ShopLynk reads the ship-to name, company, address and phone number from the retailer's order and puts them on the order it creates in the supplier's Shopify store, so the supplier can ship to the customer. For digital products, it also passes on the customer's email address so the supplier can send the file. A retailer can turn this off; the supplier then ships to the retailer and sees none of the customer's details.
ShopLynk doesn't keep customers' names, email addresses, phone numbers or addresses in its own database. Those details stay in the two Shopify stores. To notice when a ship-to address changes, ShopLynk keeps a one-way fingerprint of it that can't be turned back into the address.
Technical information
Our servers log requests and background jobs to keep the app running and secure. Logs and error reports leave out access tokens, request bodies and customers' details.
How we use it
- To run ShopLynk: share a supplier's catalog with approved retailers, keep stock in step, send orders to the supplier, return tracking to the retailer and build statements.
- To notify suppliers and our team about requests, orders that need attention and errors.
- To support merchants, keep the app secure and meet legal obligations.
We don't sell personal information, use it for advertising, or use it to make automated decisions about people.
Who we share it with
- The linked supplier and retailer. A supplier sees the business details of retailers who ask to work with it, and the ship-to details of orders it fulfills. A retailer sees the supplier's products, prices, stock and tracking.
- Service providers that run ShopLynk for us: Shopify (the platform the stores run on); DigitalOcean (hosting and databases, in the United States); Slack (notifications to suppliers and our team, which can include a retailer's business name, store domain, billing email and phone, but never customers' details); and Sentry (error reports, without personal information).
- When the law requires it, or to protect the rights and safety of merchants, customers or us.
- A buyer of our business, if ShopLynk is sold or merged, under this policy.
How long we keep it
- We keep a store's information while ShopLynk is installed on it.
- When a store uninstalls ShopLynk, its access token is deleted straight away and syncing stops.
- 48 hours after an uninstall, Shopify asks us to erase the store's data, and we delete everything ShopLynk holds for that store.
- When a store owner asks us to erase a customer's data, we clear the order changes and tracking numbers we hold for that customer's orders. The order numbers and totals stay as the supplier's invoicing record.
- Records used to ignore repeated notifications from Shopify are deleted after 7 days.
- Server logs are kept for up to 30 days and error reports for up to 90 days.
- Deleted data can remain in encrypted database backups for up to 7 days, until those backups expire.
How we protect it
- All traffic to ShopLynk is encrypted with HTTPS.
- Store access tokens are encrypted when stored.
- Each store's data is kept apart in the database, so one store can't read another's.
- Only the people who run ShopLynk can reach its systems, with two-factor authentication.
- Each time ShopLynk reads a customer's details, it records the order and the fields read.
Your choices and rights
Merchants can see and change their business details in the app, and can remove all their data by uninstalling ShopLynk. Depending on where you live, you may have the right to see, correct or delete the personal information we hold about you. If you're a customer of a store that uses ShopLynk, contact that store first: it controls your information and can send your request to us through Shopify. You can also write to us at the address below.
Where it's stored
ShopLynk's servers and databases are in the United States. If you're outside the United States, your information is transferred there.
Children
ShopLynk is a business tool and isn't meant for children.
Changes to this policy
We'll post any change here with a new date. For a significant change, we'll tell merchants in the app before it takes effect.
Contact
Audax Marketing
200 - 4769 222nd Street, Langley, BC V2Z 3C1, Canada
[email protected]