Legal

Privacy Policy

Last updated: November 7, 2026

Privacy Policy and Terms of Service are available in English only. The English version is the legally binding one.

This Privacy Policy explains how INFINITY IT & MARKETING LTD ("Revclar", "we", "us", or "our") collects, uses, stores, and protects personal data when you use Revclar: SMS Confirmations (the "App"), our Shopify application available through confirmations.revclar.com, and this website (together, the "Service").

1. Who We Are

The Service is operated by:

INFINITY IT & MARKETING LTD
A company registered in England and Wales under company number 17089163, with registered office at 35 Tynedale Square, Highwoods, Colchester, CO4 9SN, United Kingdom.
Email: confirmations@revclar.com

For the purposes of the UK GDPR (and the EU GDPR where it applies), INFINITY IT & MARKETING LTD is the data controller for merchant account data, and acts as a data processor for end-customer order data processed on behalf of merchants.

2. What the App Does

Revclar: SMS Confirmations is a Shopify app that helps merchants verify cash-on-delivery (COD) orders. When a customer places a COD order, the App automatically sends an SMS with a unique confirmation link. When the customer confirms, the order is tagged in the merchant's Shopify admin (ADDRESS_PHONE_CONFIRMED).

The same service is also available as the Revclar SMS Confirmations plugin for WordPress/WooCommerce. For the plugin, the wallet and plan payments are processed by Stripe, and the data described below is handled in the same way, using the plugin's own separate account and wallet.

3. Information We Collect

Merchant account information. When you install the App, we receive your shop domain, shop name, contact email, and phone number from Shopify, together with your selected plan and billing status (billing is processed by Shopify).

Support and communication. When you install the Shopify App, your shop's contact details (email, phone, and domain) are sent to Revclar's internal support and communication system, so that we can assist you with the installation and measure our marketing campaigns. These details are deleted when we receive your shop's deletion request (shop/redact). The WordPress/WooCommerce plugin does not send these details.

Order and customer data (via the Shopify API). To provide the Service, we process the following data for unpaid orders such as cash on delivery (and for orders paid by card only if you switch that on in Settings): order number, customer name, customer phone number, order total, and currency. We do not access payment card details.

Confirmation events. We record whether an SMS was sent and confirmation link taps, with timestamps.

Wallet and usage data. Prepaid SMS wallet balance, top-up history, and technical logs (device, browser, IP address) used for security and debugging.

Communications. Information you provide when you contact us for support or use the contact form on this website (name, email, store URL, message).

Chat assistant. If you use the chat on this website, we process the messages you type and the assistant's replies. We remove phone numbers and email addresses from them before storing. We do not store your IP address with the messages; a temporary one-way hash of it is used for abuse protection and discarded within 3 days.

4. How We Use Your Data

We do not sell personal data, and we do not use your customers' data for advertising, profiling, or any purpose other than providing the Service.

5. Legal Basis for Processing

For merchant data, we process data to perform our contract with you and for our legitimate interests in operating and securing the Service and in measuring the effectiveness of our own marketing campaigns. For end-customer order data (name, phone number, order details), the merchant is the data controller and we act as a data processor, processing that data solely on the merchant's documented instructions. As a merchant, you are responsible for having a lawful basis to collect your customers' phone numbers and to send them transactional SMS messages.

6. How We Share Your Data

We share data only with the subprocessors needed to run the Service and, to measure our own marketing campaigns, with Meta Platforms:

We may also disclose data if required by law or to protect our legal rights. We never sell or rent personal data to third parties.

7. International Data Transfers

Questions typed in the chat are sent to Anthropic in the United States to generate the answer; chat messages are stored in the EU (Frankfurt). The recipient of the conversion events described in section 6 is Meta Platforms Ireland Limited; this data may be transferred to and processed in the United States by Meta, under Meta's transfer mechanisms (the EU-US Data Privacy Framework or standard contractual clauses). Data may be processed in countries outside the UK or EEA where our infrastructure and SMS providers operate. Where data is transferred internationally, we rely on appropriate safeguards such as adequacy decisions or standard contractual clauses.

8. Data Retention and Deletion

Chat messages are deleted after 90 days. We retain order and customer data only while the App is installed and as needed to provide the Service. When you uninstall the App, we delete or anonymize your shop's order and customer data within 30 days, except where we must retain limited records for legal, accounting, or fraud-prevention purposes. Shopify's mandatory data-protection webhooks (customers/data_request, customers/redact, shop/redact) are honored automatically.

9. Your Rights

Under the UK GDPR and EU GDPR, you have the right to access, rectify, erase, restrict, or object to the processing of your personal data, and the right to data portability. End customers should contact the merchant (the data controller) first; we assist merchants in fulfilling such requests. To exercise any right, email confirmations@revclar.com. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) or your local supervisory authority.

10. Data Security

We use industry-standard technical and organizational measures, including encrypted transport (HTTPS/TLS), access controls, and unique single-use confirmation tokens. No method of transmission or storage is 100% secure, but we work continuously to protect your data.

11. Cookies

This website uses only strictly necessary technical storage. We do not use advertising or third-party tracking cookies. We store one functional cookie, revclar_lang, which remembers the language you chose (or the language version you were sent to) for one year, so we do not redirect you again; it contains no personal data.

12. Children's Privacy

The Service is intended for businesses and is not directed at children under 18. We do not knowingly collect data from children.

13. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date above reflects the latest version. Material changes will be communicated through the App or by email.

14. Contact

Questions about this policy or your data? Email us at confirmations@revclar.com.