Last updated: June 16, 2026
EU Withdrawal Widerruf Button ("the App") is provided by Creative Panda. When you install the App on your Shopify store, you control the purpose and means of the withdrawal processing and act as the data controller. We act as a processor for the App’s technical processing activities. This privacy policy explains how data is collected and used when merchants install the App and when consumers submit a withdrawal request.
From merchants: App configuration settings stored for the merchant’s Shopify shop (e.g., store name and email sender display name), as well as the merchant’s Shopify shop domain used to identify the installation.
From consumers: Full name, order number, email address, and an optional withdrawal reason submitted through the withdrawal form, plus a withdrawal reference ID generated by the App.
We use collected data to:
Data is stored securely on our hosting infrastructure (Railway), which may involve processing outside the EEA. Withdrawal request data is retained for a minimum of 3 years, unless a data deletion/redaction request is received earlier under applicable laws.
We do not sell personal data. We share personal data only as necessary to operate the service. For example, we use an email delivery provider (Resend) to send withdrawal confirmation emails on behalf of the merchant.
Consumers have the right to request access, rectification, erasure, and other rights provided by applicable data protection laws. To exercise these rights, contact the merchant whose store you submitted a withdrawal request to.
We process personal data in accordance with the General Data Protection Regulation (GDPR). The legal basis for processing withdrawal request records is legal obligation (Article 6(1)(c) GDPR), and in some cases for establishing, exercising, or defending legal claims.
For privacy-related questions about the App’s technical processing, contact us at: info@thedesignpanda.com