Shopper notice template. This page is ready

Shopper notice template

Adapt this to your store before publishing

This is a starting point for the merchant's own privacy notice, not a separate shopper contract with Orderly Rescue. Adapt it to your store's actual settings, lawful basis, retention, privacy controls and local obligations. Replace the bracketed items before publication. Do not tell shoppers this is essential-only tracking or anonymous analytics.

Suggested wording

We use Orderly Rescue, provided by Quarata Consulting LLC in the United States, to understand shopping and checkout problems and help with purchases. Where our privacy settings and Shopify's analytics permission allow, it processes page, cart and checkout activity, browser and checkout identifiers, error messages and the value entered in a field that showed an error, cart summaries and products added, pages visited (without query strings) and approximate location/device information, and the privacy permission state Shopify reported at the time (which of analytics, marketing, preferences and sale of data were allowed, whether it was the page-load state or a choice made during the visit, and, where the app saw the shopper make a choice, when it was observed and how it changed, up to ten entries). While analytics is allowed, the app also keeps a small record of those privacy choices in the shopper's browser local storage for our store and sends it with events; the record is deleted when analytics permission is withdrawn. If a checkout or error event cannot be delivered, the app keeps it in the same browser storage for up to 24 hours and sends it again, only while analytics is allowed. It may also process contact and shipping details available to us. Street address and postal code are kept only for errors on shipping-address fields. We do not use the app to collect payment card credentials.

Our lawful basis for this processing is [state the applicable basis and, if relevant, legitimate interest]. We keep event records for [state the number of days your Orderly Rescue plan and settings keep them: 7 on Free, 30 on Starter, 90 on Growth, up to 365 on Pro, or a shorter window you chose; page, cart and add-to-cart steps are kept at most 30 days on every plan]. We may use the information to investigate a failed checkout and contact you about your purchase where permitted; any marketing follows our separate marketing choices and rules. Access to your contact details does not itself authorise marketing.

You can change your analytics choices using [link to your privacy controls]. This stops future collection where applicable; it does not automatically delete information already held. For access, correction or deletion, contact [merchant privacy contact]. We may need limited information to locate your checkout and verify your request.

Orderly Rescue processes data for us and uses US hosting and transactional-email providers. Applicable international-transfer safeguards are described in its Privacy Policy. We remain responsible for our use of the service and any copies we export or send to our staff.

Before publishing

  • Replace relative links with the public app's full HTTPS URLs when copying this text into a store.
  • List the app's browser local-storage records wherever your notice lists cookies and similar technologies: orderly_rescue_consent_v1 (the privacy choices the app saw, up to ten, removed when analytics is withdrawn) and orderly_rescue_outbox_v1 (checkout and error events not yet delivered, kept at most 24 hours, 5 attempts and 20 entries, only while analytics is allowed, removed when it is withdrawn).
  • Describe your actual contact, retention and consent choices, not every feature you could enable. The history window follows your Orderly Rescue plan, so keep the period in your notice in step with it: moving to a lower plan shortens it and deletes older events.
  • Include this in your full notice alongside the other disclosures your business needs, including applicable rights, regulator contacts and complaint/appeal routes.
  • Test Shopify's privacy controls with the storefront and checkout pixel. A geographic detail filter is not a substitute for permission or a lawful basis.
  • Review your customer follow-up messages separately. A checkout problem does not make every promotional email or text a service message.