Privacy Policy

Last updated: August 18, 2026

Who We Are

Wishlist Galore is operated by PP Supply ("we", "us", "our"). The app provides collaborative wishlist functionality to Shopify merchants and their customers, and processes personal data only as necessary to deliver the wishlist service.

What Data We Collect

We collect and process the following categories of personal data:

• Customer identifiers — Shopify customer IDs and anonymous tokens used to associate wishlists with individual shoppers.
• Wishlist data — products you save, organize, or share through our app, including item notes and reactions.
• Device identifiers — cookies and local storage entries used to recognize returning visitors (see our Cookie Policy for details).
• Email addresses — addresses you give us to join the early-access waitlist, to receive or send a wishlist collaboration invite or purchase notification, and addresses we suppress after a hard bounce or spam complaint (see below). For a waitlist signup we also keep, as the record of your consent, the date and time you gave it and the version of this policy that was in force at that moment.

How We Use Your Data

We process personal data only for the following purposes:

• To provide and maintain your wishlists across sessions.
• To enable wishlist sharing and collaboration features.
• To recognize returning visitors (guest or logged-in).
• To respond to Shopify GDPR webhooks (data request, redaction, shop deletion).

Legal Basis for Processing

We process your data based on our legitimate interest in providing the wishlist service (GDPR Art. 6(1)(f)), and where required by Shopify's platform obligations. When you explicitly request data deletion via Shopify, we comply under Art. 6(1)(c).

Waitlist signups

When you join our early-access waitlist, we process your email address with your consent (GDPR Art. 6(1)(a)) solely to send the promised launch email. Consent is given at the point of collection, next to the signup form, and you can withdraw it at any time by emailing privacy@wishlistgalore.com. See Data Retention below for how long we keep a signup and how removal is carried out.

Email suppression

If delivery to an address hard-bounces or results in a spam complaint, we retain only the address and suppression reason under our legitimate interests (GDPR Art. 6(1)(f)). This prevents repeated unwanted or undeliverable email and protects service reliability. We retain the suppression record while we operate outbound email and review that need annually. Permanent closure of the email service, or a verified request showing that the suppression was recorded in error, triggers deletion. Customer redaction does not delete a valid suppression record because doing so could cause repeat contact.

Data Retention

Waitlist signups

We retain an early-access waitlist signup until you withdraw consent or 30 days after the promised launch email is sent, whichever comes first. A withdrawal request deletes the signup immediately, and an automated daily retention job deletes any remaining signups when the 30-day post-launch deadline arrives. A signup that later becomes a customer remains separate from the customer account and follows this same waitlist retention rule. Deleting a signup never removes a bounce or complaint suppression record, so it cannot restore delivery to an unsubscribed or undeliverable address.

We act on removal requests at best effort across the systems we control. We do not modify our backups, so a copy of your signup can persist in a backup until that backup expires.

Email suppression

If delivery to an address hard-bounces or results in a spam complaint, we retain only the address and suppression reason under our legitimate interests (GDPR Art. 6(1)(f)). This prevents repeated unwanted or undeliverable email and protects service reliability.

We retain your wishlist data for as long as your account is active or as needed to provide the service, except for the published wishlists described below, which we keep in anonymised form after your account is deleted. When a Shopify store uninstalls our app, we schedule deletion of all associated data within 48 hours via Shopify's GDPR redact webhook.

Wishlists after an account deletion

When your customer account is deleted, the wishlists you kept private are deleted with it. Wishlists you published — public lists, and lists you shared by link — are kept and anonymised instead: your name and account are removed from the list, its items and its history, so it appears as "Anonymous". A preserved list stays visible to the same audience it had before, which means a public list remains listed and reachable, and a link-shared list remains reachable to anyone holding the link. It becomes read-only, and the people you had shared it with keep their access, comments and reactions.

We do not automatically rewrite the wording you wrote — list titles, descriptions, pinned notes, tags and item notes stay as they were. If any of it identifies you or you simply want it gone, contact us and we will remove it on a best-effort basis.

Deletion request records

We automatically delete ordinary audit logs after 90 days. We retain the record that a customer deletion request was honoured for 1 year, so that we can answer a later complaint and re-run your deletion against a restored backup. That record keeps your Shopify customer ID, the store the request came from, the order numbers Shopify asked us to redact with you, and a keyed fingerprint of your email address — not the address itself. We keep the fingerprint because some of what your deletion removes is only findable by your address: items you bought from someone else's list, invitations addressed to you, and notifications waiting to be sent to you. Matching a fingerprint is all that removing those takes, so the record never holds the address. After the year, the record is deleted too.

Backups

Deleted data remains in backups until those backups age out. We do not modify backups. Backups are encrypted at rest. If we restore a backup, we re-apply the deletions we hold a record of — we identify them from the deletion records described above and re-run each deletion against the restored data before it is served. We can only re-apply deletions we hold a record of: if the database and every copy of it are lost, the records of deletions accepted after the last backup are lost with them, so those deletions cannot be re-applied from the backup alone; and because deletion records are kept for one year, a deletion older than that can no longer be re-applied after a later restore.

Your Rights

Under GDPR, you have the right to:

• Access — request a copy of your personal data.
• Rectification — correct inaccurate data.
• Erasure — request deletion of your data.
• Restriction — limit how we process your data.
• Objection — object to processing based on legitimate interest.
• Data portability — receive your data in a structured format.

To exercise any of these rights, contact us at privacy@wishlistgalore.com. We respond within 30 days as required by GDPR Art. 12(3). If you are not satisfied with our response, you have the right to lodge a complaint with your local supervisory authority (e.g. the ICO in the UK, the CNIL in France, or your state attorney general in the US).

Data Transfers

Our app runs on Shopify's infrastructure. Data may be processed in the United States or other jurisdictions outside the EEA. We rely on Shopify's data processing agreements and Standard Contractual Clauses (SCCs) where required. For details on Shopify's sub-processors and transfer mechanisms, see Shopify's Data Processing Addendum.

Note: Controller/processor designations and UK/Swiss adequacy details will be added in a future update.

Contact

Wishlist Galore — operated by PP Supply
19363 Willamette Dr., #152, West Linn, OR 97068
Email: privacy@wishlistgalore.com