Legal

Privacy Policy

Last updated: August 8, 2026

This Privacy Policy explains how INFINITY IT & MARKETING LTD ("Revclar", "we", "us", or "our") collects, uses, stores, and protects personal data when you use SMS Order Confirmations (the "App"), our Shopify application available through confirmations.revclar.com, and this website (together, the "Service").

1. Who We Are

The Service is operated by:

INFINITY IT & MARKETING LTD
A company registered in England and Wales under company number 17089163, with registered office at 35 Tynedale Square, Highwoods, Colchester, CO4 9SN, United Kingdom.
Email: contact@revclar.com

For the purposes of the UK GDPR (and the EU GDPR where it applies), INFINITY IT & MARKETING LTD is the data controller for merchant account data, and acts as a data processor for end-customer order data processed on behalf of merchants.

2. What the App Does

SMS Order Confirmations is a Shopify app that helps merchants verify cash-on-delivery (COD) orders. When a customer places a COD order, the App automatically sends an SMS with a unique confirmation link. When the customer confirms, the order is tagged in the merchant's Shopify admin (ADDRESS_CONFIRMED).

3. Information We Collect

Merchant account information. When you install the App, we receive your shop domain, shop name, and contact email from Shopify, together with your selected plan and billing status (billing is processed by Shopify).

Order and customer data (via the Shopify API). To provide the Service, we process the following data for COD orders only: order number, customer name, customer phone number, order total, and currency. We do not access payment card details.

Confirmation events. We record confirmation link taps, timestamps, and delivery status of sent SMS messages.

Wallet and usage data. Prepaid SMS wallet balance, top-up history, and technical logs (device, browser, IP address) used for security and debugging.

Communications. Information you provide when you contact us for support or join the waitlist on this website (name, email, store URL).

4. How We Use Your Data

To send order confirmation SMS messages to your customers on your behalf;
To tag confirmed orders in your Shopify admin;
To operate your prepaid SMS wallet and process top-ups;
To authenticate you, secure the Service, and prevent abuse;
To respond to support requests and communicate service updates;
To improve and develop the Service;
To comply with legal obligations.

We do not sell personal data, and we do not use your customers' data for advertising, profiling, or any purpose other than providing the Service.

5. Legal Basis for Processing

For merchant data, we process data to perform our contract with you and for our legitimate interests in operating and securing the Service. For end-customer order data (name, phone number, order details), the merchant is the data controller and we act as a data processor, processing that data solely on the merchant's documented instructions. As a merchant, you are responsible for having a lawful basis to collect your customers' phone numbers and to send them transactional SMS messages.

6. How We Share Your Data

We share data only with the subprocessors needed to run the Service:

SMS delivery providers — the recipient phone number and message content, solely to deliver the SMS;
Shopify — order tags and app events, through the official Shopify API;
Hosting and infrastructure providers — for secure storage and operation of the Service.

We may also disclose data if required by law or to protect our legal rights. We never sell or rent personal data to third parties.

7. International Data Transfers

Data may be processed in countries outside the UK or EEA where our infrastructure and SMS providers operate. Where data is transferred internationally, we rely on appropriate safeguards such as adequacy decisions or standard contractual clauses.

8. Data Retention and Deletion

We retain order and customer data only while the App is installed and as needed to provide the Service. When you uninstall the App, we delete or anonymize your shop's order and customer data within 30 days, except where we must retain limited records for legal, accounting, or fraud-prevention purposes. Shopify's mandatory data-protection webhooks (customers/data_request, customers/redact, shop/redact) are honored automatically.

9. Your Rights

Under the UK GDPR and EU GDPR, you have the right to access, rectify, erase, restrict, or object to the processing of your personal data, and the right to data portability. End customers should contact the merchant (the data controller) first; we assist merchants in fulfilling such requests. To exercise any right, email contact@revclar.com. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) or your local supervisory authority.

10. Data Security

We use industry-standard technical and organizational measures, including encrypted transport (HTTPS/TLS), access controls, and unique single-use confirmation tokens. No method of transmission or storage is 100% secure, but we work continuously to protect your data.

11. Cookies

This website uses only strictly necessary technical storage. We do not use advertising or third-party tracking cookies.

12. Children's Privacy

The Service is intended for businesses and is not directed at children under 18. We do not knowingly collect data from children.

13. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date above reflects the latest version. Material changes will be communicated through the App or by email.

14. Contact

Questions about this policy or your data? Email us at contact@revclar.com.