Data deletion requests

This page explains how to have data deleted that NORTHMAST processes. NORTHMAST is a Shopify application provided by Satisfy & I B.V.. It stores no customer contact details; what it does store is described in the Privacy Policy.

How to request deletion

E-mail info@satisfyi.nl with the subject "Data deletion request". There is no form and no third-party tool — a plain e-mail is enough. We may ask for information to confirm that you are entitled to make the request, so that we never delete or disclose data on someone else's behalf.

What to include in your request

Customers of a store can also contact the merchant directly; Shopify then forwards the request to us automatically and we complete it through Shopify's mandatory privacy webhooks.

  • The Shopify store domain the request concerns (for example your-store.myshopify.com).
  • Whether you are the merchant (store owner or authorised staff) or a customer of that store.
  • Which data the request concerns: all store data, the advertising platform connection, or specific orders.
  • A reply address we can use to confirm completion.

What is deleted

  • Uninstalling the app immediately deletes the Shopify session records (staff details and access tokens); when Shopify's shop/redact request follows, all remaining store data is deleted: orders, line items, refunds and refund components, ad spend records, settings, shipping rates, synchronisation logs and privacy request records.
  • Meta-related data: disconnecting Meta in the app, or a deletion request, removes the stored (encrypted) access token, the selected ad account details and the imported Meta advertising cost data for the store.
  • Customer-level requests (customers/redact) delete the affected order data and block it from being re-imported.

Processing period

We process verified deletion requests without undue delay and at the latest within 30 days of receiving them. Deletions triggered through Shopify's privacy webhooks are processed automatically.

Data we may have to retain

Where applicable law requires us to keep something — for example records under tax or accounting law — we keep only what that law requires, for as long as it requires, and continue to protect it as described in the Privacy Policy. Completed deletion requests keep a minimal technical marker so that a later synchronisation cannot re-import deleted orders; completed data request records are kept at most 30 days. Independent of any request, detailed order data is deleted automatically after 24 calendar months.

Full details of what NORTHMAST stores, why, and for how long are in the Privacy Policy.