Get Started
Last Updated: 2 September 2026
Utilise Social Ltd
Duke Street, Liverpool, Merseyside L1 5AG, United Kingdom
Email: enquiries@utilisesocial.com
This privacy notice applies when you install, access, or use LoopRX Bundle App (the “App”) on a Shopify
store. It explains how information is collected, used, stored, disclosed, and protected in connection with
the App.
Our processing of personal data is subject, where applicable, to the UK General Data Protection
Regulation (“UK GDPR”), the Data Protection Act 2018, the Privacy and Electronic Communications
Regulations (“PECR”), and other applicable UK data-protection legislation.
LoopRX Bundle App is a Shopify application that helps merchants create, configure, manage, and sell
fixed product bundles, kits, and multipacks.
We collect and process the following types of personal data:
When a merchant installs or uses the App, Shopify may provide information necessary to authenticate
and operate the App, including the Shopify store identifier, myshopify.com domain, shop ID, OAuth
access tokens, authentication and session information, installation information, authorised API scopes,
and optional merchant or staff information such as name, email address, user ID, and locale.
We may also process products, product variants, product and variant IDs, inventory information,
product publication information, discount and pricing information, Shopify Function information, and
cart transformation information where necessary to provide bundle functionality.
Merchants may configure bundle titles, status, linked Shopify product and variant IDs, bundle
components, component quantities, pricing rules, discount settings, bundle availability,
inventory-related settings, and other bundle configuration information.
The App may receive webhook notifications necessary for operation, security, and compliance,
including app uninstall notifications, scope updates, inventory changes, product or variant changes
where required, privacy/compliance requests, and other events required to maintain bundle
functionality.
The storefront extension primarily uses Shopify's standard product and cart functionality. We do not
maintain an independent database containing end-customer names, email addresses, telephone
numbers, shipping addresses, billing addresses, or payment card information.
Customer checkout, payment, account, and order information remains within Shopify and the
merchant's authorised Shopify environment. The App may temporarily process Shopify-provided
identifiers or technical requests where necessary to perform bundle or cart functionality, but we do not
use this information to create independent customer profiles.
We and our infrastructure providers may process IP addresses, browser and device information, request
metadata, server and error logs, authentication and security events, timestamps, and diagnostic
information for security, troubleshooting, fraud prevention, monitoring, and reliability.
We do not sell merchant or customer personal data and do not use Shopify merchant or customer data
for unrelated or behavioural advertising.
We retain information only for as long as reasonably necessary to provide the App, maintain security,
investigate technical problems, prevent fraud, comply with legal obligations, resolve disputes, and
establish, exercise, or defend legal claims.
When a merchant uninstalls the App, we delete or de-identify associated shop information when it is no
longer required. When Shopify sends an applicable shop/redact request, we delete applicable
shop-related App information, including Shopify sessions, stored OAuth credentials or tokens, bundle
configurations, bundle component information, shop settings, and other App-specific data associated
with that store.
Limited security, audit, or legal records may be retained where required or permitted by applicable law.
Depending on the circumstances and applicable law, individuals may have rights under UK
data-protection legislation including:
To exercise an App-related privacy right, contact dev@utilisesocial.com. We may need to verify your
identity before fulfilling certain requests. Where we process information solely on behalf of a Shopify
merchant, we may refer your request to the relevant merchant or assist the merchant in responding.
If you are located in the United Kingdom and believe that your personal data has been processed
unlawfully, you have the right to lodge a complaint with the Information Commissioner's Office (ICO).
We encourage you to contact us first so that we have an opportunity to address your concern.
We use appropriate technical and organisational measures designed to protect information processed
through the App, including HTTPS/TLS encryption, Shopify OAuth authentication, secure OAuth token
storage, access controls, restricted production access, least-privilege practices, Shopify webhook HMAC
verification, application and infrastructure monitoring, security logging, and incident-response
procedures.
No internet transmission or electronic storage system can be guaranteed to be completely secure.
If we become aware of a personal data breach, we will investigate and respond in accordance with
applicable UK data-protection legislation. Where required, we will notify the Information Commissioner's
Office and/or affected individuals within applicable legal timeframes. Where we act as a processor, we
will notify and assist the relevant merchant as required by applicable contractual and legal obligations.
Utilise Social Ltd is based in the United Kingdom. Some hosting, infrastructure, or technology providers
may process information outside the United Kingdom.
Where personal data is transferred internationally, we use appropriate safeguards where required under
UK data-protection law. Depending on the destination and circumstances, these may include UK
adequacy regulations, the UK International Data Transfer Agreement (IDTA), the UK Addendum to the
EU Standard Contractual Clauses, other legally recognised transfer mechanisms, and appropriate
technical and organisational safeguards.
The App primarily operates as an embedded Shopify Admin application and may use Shopify
authentication and session mechanisms, strictly necessary cookies or similar technologies, and
technical storage necessary for authentication, security, and App functionality.
We do not use third-party advertising cookies within the App Admin for behavioural advertising. The
storefront extension does not create a separate LoopRX customer account or buyer login system.
A merchant's Shopify storefront may separately use cookies, analytics services, advertising
technologies, or similar technologies. The merchant remains responsible for appropriate cookie
information and consent where required under UK PECR and applicable data-protection legislation.
The App is designed for Shopify merchants and authorised merchant staff and is not directed at
children. We do not knowingly use the App to collect personal data directly from children. Merchants
remain responsible for ensuring that their storefronts, products, and processing activities comply with
applicable age-related and children's privacy requirements.
The App does not use personal data to make solely automated decisions about individuals that produce
legal or similarly significant effects. Bundle pricing, inventory calculations, cart transformations, and
similar technical operations are product and commerce functions rather than profiling of individual
customers.
We may update this notice periodically to reflect changes to the App, Shopify requirements, our
data-processing practices, service providers, or applicable laws and regulations. Where appropriate, we
will provide additional notice of material changes. The latest revision date will be displayed at the top of
this notice.
For questions regarding privacy, data protection, or LoopRX Bundle App, contact:
Utilise Social Ltd
Duke Street
Liverpool
Merseyside L1 5AG
United Kingdom
Email: enquiries@utilisesocial.com
App: LoopRX Bundle App
If you are a customer of a Shopify merchant and your request relates to your purchase, customer
account, order, shipping information, billing information, or other information controlled by themerchant, please contact the relevant Shopify merchant directly.
Use of LoopRX Bundle App is also subject to Shopify's applicable platform policies, developer
requirements, API licence terms, and terms of use.
Shopify API License and Terms of Use: https://www.shopify.com/legal/api-terms