PRIVACY POLICY

Last Updated: July 19, 2023

We respect your privacy and are committed to protecting personally identifiable information you may provide us through the Website. We have adopted this privacy policy (“Privacy Policy”) to explain what information may be collected on our Website, how we use this information, and under what circumstances we may disclose the information to third parties.
This Privacy Policy applies only to information we collect through the Website and does not apply to our collection of information from other sources.

Data transfer mechanisms

By using our services, you acknowledge and agree that your Personal Data may be transferred to or stored on computers or servers located in the United States. As many of our external third-party service providers operate outside of the UK, the processing of your Personal Data may require the transfer of data outside of the US.
We only transfer Personal Data to countries that are deemed to provide an adequate level of protection for Personal Data.
For certain service providers, we use specific contracts that have been approved for use in the UK and that provide Personal Data with the same level of protection it would have in the US.
If you would like more information on the specific mechanisms we use to transfer your data, please do not hesitate to contact us.

Data we collect

It should be noted that the extent of data accessible to us is primarily governed by Shopify. Upon installation of the App, we are able to automatically obtain specific categories of data from your Shopify account:

  1. All Apps have access to SHOP INFORMATION via Shopify’s Shop API such as shop’s email address, domain, email, country, etc.
     
  2. The Apps Customer Reviews and Amazon Channel have access to ORDER INFORMATION, such as order id, order number, product title, product id, tracking number, tracking url, total price.
     
  3. The App Customer Reviews has access to CUSTOMER INFORMATION, such as full name and email.

Important: It is essential to note that the Apps do not download, store, or process any data that is part of the CUSTOMER INFORMATION and ORDER INFORMATION. However, these Apps can potentially access this data as it is automatically provided by Shopify.

How do we use your data?

Please find below a description of the data we have access to.

  1. All Apps have access to SHOP INFORMATION for billing purposes and also to be able to provide services that require access to Shopify's Shop API scope.
     
  2. The App Marley Media ads Customer Reviews needs to send automatic emails to your customers based on their orders, which requires access to CUSTOMER INFORMATION and ORDER INFORMATION.
     
  3. The App Marley Media ads Amazon Channel needs to sync Shopify and Amazon orders, price, and inventory, which requires access to ORDER INFORMATION and Amazon ID, price, status and date creation. On top of this, the app requires access to product listings on Amazon, including title, description, ASIN, SKU, image url, available quantity, color, and brand.
     
  4. Marley Media ads widgets (Google Reviews, Amazon Reviews, Facebook Reviews, Etsy Reviews, Ebay Reviews, Aliexpress Reviews) needs to import the corresponding reviews, which require access to shop name, shop domain, email, country, owner name, phone, Shopify plan name.
     
  5. The Marley Media ads Blog & Page Builder needs to be able to import documents from Google Drive to your Shopify store page, which requires access to the titles of imported documents and their IDs in Google and Shopify.
     
  6. The Marley Media ads Testimonials Slider needs to be able to display reviews left by your customers, which requires their name and email.

Cookies and similar technologies

Our Apps use functional cookies only. Without these cookies, the Apps would not be able to work correctly. We do not use any marketing or advertising cookies in our Apps.

Security policy

This statement acknowledges that the security of personal data is a top priority for us, and we use commercially acceptable means to protect it. However, it also highlights the fact that no method of transmission over the Internet or electronic storage is completely secure, and that we cannot guarantee the absolute security of personal data
There are several reasons why it is difficult to guarantee the absolute security of personal data. Firstly, there are constantly evolving cyber threats, and new vulnerabilities and attack vectors are discovered all the time. Secondly, there is always the risk of human error, such as employees accidentally disclosing sensitive information or falling for phishing scams. Finally, there are external factors such as natural disasters or power outages that can compromise data security.
Despite these challenges, the company takes a proactive approach to data security, implementing a range of measures to protect personal data. Additionally, we may have policies and procedures in place to limit access to personal data to authorized personnel only, and to monitor data usage and activities to detect any potential security risks.

Data retention

We will keep your Personal Data for a duration that is reasonably necessary to accomplish the objectives for which it was obtained, which includes fulfilling any legal, regulatory, tax, accounting, or reporting obligations. If there is a complaint or we have reason to believe that there is a possibility of legal action concerning our relationship with you, we may hold onto your Personal Data for an extended period.
When deciding on the appropriate duration for retaining Personal Data, we take into account several factors, including the amount, nature, and sensitivity of the data, the potential risks of unauthorized access or disclosure, the purposes for which we are processing the Personal Data and whether we can accomplish these objectives through alternative methods, and the relevant legal, regulatory, tax, accounting, or other obligations.
If you would like your information to be erased, you may make such a request (please see "Your Legal Rights" below for more details). Alternatively, we may anonymize your Personal Data for research or statistical purposes, rendering it no longer attributable to you. In this case, we may use the anonymized information indefinitely without providing further notification to you.

Data loss prevention strategy

We conducts a risk assessment to identify the types of sensitive data it holds and the potential risks of data loss. This includes analyzing the types of data that are most at risk of being lost, such as customer data, intellectual property, and confidential business information.
We implements security measures such as authentication, authorization, and encryption to control access to sensitive data. This includes using access controls to limit who can access sensitive data, and encryption to protect data that is in transit or at rest.
Marley Media ads monitors data usage and activities to detect unauthorized access or exfiltration. This includes using data loss prevention tools to monitor network traffic and detect any attempts to access or transfer sensitive data.

Your legal rights

We firmly believe that you have the right to access and manage your Personal Information held by us. You can request the correction, update, or deletion of your Personal Information.
We will promptly respond to your requests within one month of receiving them, unless we require more time due to the complexity of the request. In such cases, our response time may take up to three months in total.

Rights of European residents: 

As a European resident, you have the right to access, correct, delete, object to, or restrict how we process or share your data. You can request relevant actions by sending us an email at the address specified above. If your data processing relies on explicit consent, you can withdraw your consent at any time by sending us a relevant request via email.

Rights of California residents: 

In accordance with the California Consumer Privacy Act (CCPA), we will respond to your verifiable request within 45 days of receiving it. If we need more time (up to 90 days), we will inform you in writing about the reason and extension period. We will provide our written response by email.

Right to opt out:

As per CCPA, each California resident can request that a business stops selling their data to third parties. However, we do not provide or sell your data in exchange for money. Hence, you can ensure that we do not sell your data.

Other rights: 

You have the right to know what data we collect. You can ask us to disclose what data we have collected over the past 12 months and receive a free copy of your data. You can also request us to delete the data we have collected over the past 12 months. We will not discriminate against you for exercising any of your CCPA-granted rights.

Mandatory verification:

As required by CCPA, we need to verify your identity before processing your request. We typically match the information you provide with the information we have on record. In some cases, we may decline your request if we cannot verify your identity.
We are committed to safeguarding your data and respecting your rights. If you have any questions or concerns about your privacy or this Privacy Policy, please feel free to contact us. Your privacy is important to us, and we appreciate your trust in our services.

Data Breach Notification:
In the event of a data breach that may compromise your personal information, we will notify you and the appropriate regulatory authorities in accordance with applicable data protection laws. We will take all necessary measures to mitigate the breach and prevent future occurrences.

International Users:
If you are accessing our services from outside the United States, please be aware that your information may be transferred to, processed, and stored in the United States, where our servers are located. By using our services, you consent to the transfer and processing of your information in the United States, which may have different data protection laws than your country.

California Privacy Rights:
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA). These rights include the right to know what personal information we have collected about you, the right to request deletion of your personal information, and the right to opt-out of the sale of your personal information, if applicable. For more information on exercising your CCPA rights, please contact us using the provided contact information.

European Union Data Subject Rights:
If you are a resident of the European Union, you may have additional rights under the General Data Protection Regulation (GDPR), including the right to access, rectify, or erase your personal data, the right to restrict or object to processing, and the right to data portability. For more information on exercising your GDPR rights, please contact us using the provided contact information.

Data Protection Officer (DPO):
We have appointed a Data Protection Officer (DPO) to oversee our data protection practices and ensure compliance with data protection laws. You may contact our DPO at [DPO Contact Information] for any data protection-related queries or concerns.

Data Transfer to Successors:
In the event of a merger, acquisition, or other change of control, your personal information may be transferred to the acquiring or successor entity. We will ensure that any such transfer complies with applicable data protection laws and that your personal information remains subject to the protections outlined in this Privacy Policy.

Accessibility and Accommodations:
We are committed to providing accessible and inclusive services to all users. If you require accommodations or have specific accessibility needs related to the use of our services or this Privacy Policy, please contact us, and we will make every effort to assist you.

Third-Party Services:
In some cases, our services may integrate with or link to third-party services or websites. Please note that these third-party services may have their own privacy policies and terms of use. We are not responsible for the privacy practices or content of these third-party services. We recommend reviewing their policies before interacting with them through our services.

Children's Privacy:

Our services are not intended for children under the age of 13. We do not knowingly collect or solicit personal information from anyone under the age of 13. If you believe that we may have collected personal information from a child under 13, please contact us immediately, and we will take steps to remove such information from our records.

Changes to Privacy Policy:

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. Any changes will be posted on this page, and the revised Privacy Policy will be effective immediately upon posting. We encourage you to check this page regularly to stay informed about our data practices.

Contact Information:
If you have any questions, concerns, or requests regarding this Privacy Policy, our data practices, or your personal information, please contact us using the following information:

Marley Media ads
8th Nahal Hulit, Mitzpe Ramon