This article outlines, at a high level, how Buzzbassador handles personal data belonging to merchants (Shopify store owners using the app) and ambassadors (members who join a merchant's program), and what rights apply under GDPR and UK GDPR.
What data Buzzbassador processes
As part of providing the referral and rewards service, Buzzbassador processes personal data belonging to both merchants and ambassadors, including but not limited to:
Merchant account and Shopify store information needed to run the app.
Ambassador/member application data (name, email, PayPal email, social handles, and any custom fields a merchant's application form collects).
Attribution and order data (referral codes, affiliate link clicks, attributed sales, and associated commission calculations).
Payout data needed to send rewards to members (through PayPal, Tremendous, or a merchant's manual payment method).
This data is used to operate the core service: recruiting and vetting ambassadors, tracking attributed sales, calculating rewards, and processing payouts on behalf of merchants.
Rights for EU/UK ambassadors and merchants
Ambassadors and merchants located in the EU or UK have rights under GDPR / UK GDPR with respect to their personal data, which generally include the right to access, correct, and request deletion of their data.
Buzzbassador has an established process for handling data erasure requests; requests of this kind have been received and handled through support before. Today, this is handled as an ad hoc support request rather than a fully self-service flow.
Separately, note that uninstalling the Buzzbassador app from Shopify triggers permanent deletion of a store's account data (members, orders, attribution history, payouts, and configuration) after a fixed retention window following Shopify's data retention policies for apps. This is an existing, documented behavior for merchants, distinct from an individual ambassador's right to request deletion of their own personal data specifically.
How to submit a data request
Ambassadors or merchants who want to access, correct, or request deletion of their personal data can contact support at [email protected] or via the chat bubble in the app/dashboard.
General data handling practices
Buzzbassador aims to follow standard good practice for handling personal data, including limiting access to personal data to what's needed to operate the service, and using reputable, established third-party providers for functions like payments and hosting.
For more details, please refer to our privacy policy.