Privacy policy

This privacy policy explains how Pimbo Ltd ("we", "us", "our") collects, uses, and protects your personal information when you use Pimbo ("the Service"). We respect your privacy and are committed to protecting your data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Information we collect

Account information

When you register for Pimbo, we collect your name, email address, and the name of your organisation. If you subscribe to a paid plan, we also collect billing information (processed securely by our payment provider — we do not store your full card details).

Shopify store data

When you connect your Shopify store, we access product data, metafields, images, and related information via Shopify's API. This data is stored in Pimbo to provide the Service. We only access the data necessary to deliver the features you use.

Usage data

We collect information about how you use the Service, including pages visited, features used, and actions taken. This helps us improve Pimbo and identify issues. We also collect technical data such as your IP address, browser type, and device information.

2. How we use your information

We use your information to:

• Provide, maintain, and improve the Service
• Process payments and manage your subscription
• Sync product data between Pimbo and your Shopify store
• Respond to your support requests and enquiries
• Send you essential service communications (such as billing receipts and security alerts)
• Analyse usage patterns to improve the product

We will not send you marketing emails without your explicit consent, and you can opt out at any time.

3. Legal basis for processing

We process your personal data under the following legal bases:

• Contract: Processing necessary to provide the Service you've signed up for
• Legitimate interests: Improving our product, preventing fraud, and ensuring security
• Consent: Marketing communications and non-essential cookies
• Legal obligation: Compliance with tax and accounting requirements

4. Data sharing

We do not sell your personal data. We share your data only with:

• Shopify: To sync product data to and from your store (as directed by you)
• Payment processors: To process subscription payments securely
• Hosting and infrastructure providers: To store and serve your data securely
• Analytics tools: To understand how the Service is used (see our cookie policy for details)

All third-party providers are bound by data processing agreements and are required to handle your data in accordance with applicable data protection laws.

5. Data storage and security

Your data is stored on servers within the European Economic Area (EEA). We use industry-standard security measures to protect your data, including encryption in transit and at rest, access controls, and regular security reviews.

No system is completely secure. While we take all reasonable steps to protect your data, we cannot guarantee absolute security. If we become aware of a data breach that may affect you, we'll notify you and the relevant authorities as required by law.

6. Data retention

We retain your data for as long as your account is active. If you cancel your account, we'll keep your data for 30 days in case you wish to reactivate. After that, it will be permanently deleted.

Billing records may be retained for longer to comply with tax and accounting regulations.

7. Your rights

Under the UK GDPR, you have the right to:

• Access the personal data we hold about you
• Rectify inaccurate or incomplete data
• Erase your data (the "right to be forgotten")
• Restrict or object to certain types of processing
• Data portability: Receive your data in a structured, machine-readable format
• Withdraw consent where processing is based on consent

To exercise any of these rights, contact us at hello@pimbo.app. We'll respond within 30 days.

8. Cookies

We use cookies to keep you logged in and to understand how you use the Service. For full details, see our cookie policy.

9. Children's privacy

Pimbo is not intended for use by anyone under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we'll delete it promptly.

10. Changes to this policy

We may update this privacy policy from time to time. If we make significant changes, we'll notify you by email or through the Service. The "last updated" date at the top of this page shows when it was last revised.

11. Contact and complaints

If you have any questions about this privacy policy or how we handle your data, contact us at hello@pimbo.app.

If you're not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.