This Privacy Policy explains how Wixpa Feed (“Wixpa”, “we”, “us”) collects, uses and protects information when merchants install and use the Wixpa Google Analytics 4 (GA4) app for Shopify (the “App”), and when shoppers visit stores that use the App.
1. Who we are
The App is provided by Wixpa Feed, 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom. For merchant account data we act as a data controller. For shopper data processed on a merchant's store, the merchant is the controller and we act as a processor on the merchant's behalf.
2. Information we collect
Merchant information. When you install the App, Shopify gives us access to data needed to run it: your store name, store URL, shop owner name, contact email, plan details, currency and time zone.
Configuration data. Settings you enter, such as your GA4 Measurement ID, API secret, Google Ads conversion ID and label, Google Tag Manager container ID and custom event definitions.
Store and order data. To send ecommerce events, the App reads product, cart, checkout and order details such as order ID, products, quantities, prices, taxes, shipping, discounts and currency.
Shopper event data. On your storefront and checkout, the App records browsing and purchase events (for example page views, product views, add-to-cart and purchases) together with technical data such as page URL, referrer, device and browser type, and Google client identifiers. This data is forwarded to your own Google Analytics and Google Ads accounts.
Support communications. Messages, emails and screenshots you share with us when requesting help.
We do not collect payment card details. Subscription billing is handled entirely by Shopify.
3. How we use information
We use information to provide and operate the App; send ecommerce events to the Google accounts you connect; enable server-side tracking where you turn it on; provide support and troubleshoot your setup; manage your plan and session limits; keep the App secure and prevent abuse; improve features and performance using aggregated data; and meet legal obligations.
We do not sell personal information, and we do not use shopper data for our own advertising or profiling.
4. Legal bases
Where the UK or EU GDPR applies, we process merchant data to perform our contract with you, for our legitimate interests in running and improving the App, and to comply with legal obligations. Shopper data is processed on the merchant's instructions; the merchant is responsible for having a valid legal basis, including consent where required.
5. Sharing and processors
We share information only as needed to run the App: with Google (Google Analytics, Google Ads, Google Tag Manager), to deliver the events you configure to your own accounts; with Shopify, the platform the App runs on; with our hosting and infrastructure providers [list providers, e.g. hosting, database, email]; and with our support tools [list providers]. We may also disclose information where required by law or to protect our rights, or as part of a merger or acquisition subject to this policy.
Google's handling of data sent to your accounts is governed by Google's own terms and privacy policy.
6. Storefront tracking and consent
The App uses Shopify's Web Pixels and may place Google cookies or similar identifiers in shoppers' browsers. The App respects the consent choices collected through Shopify's Customer Privacy API and cookie banner where configured. Merchants are responsible for displaying an appropriate cookie notice, obtaining consent where the law requires it, and describing Google Analytics in their own store privacy policy.
7. Retention and deletion
We keep merchant data while the App is installed. Event data is passed through to Google and is not stored by us longer than necessary to deliver it [state your retention period, e.g. 30 days of logs]. When you uninstall the App, we delete your store data after receiving Shopify's shop redaction request, within the timeframe Shopify requires. We respond to Shopify's mandatory privacy webhooks for customer data requests and customer redaction. Support records may be kept longer where needed for legal or accounting reasons.
8. International transfers
Information may be processed outside the UK and European Economic Area, including in the United States. Where this happens we rely on appropriate safeguards such as adequacy decisions, the UK International Data Transfer Addendum or the EU Standard Contractual Clauses.
9. Security
We use technical and organisational measures to protect information, including encryption in transit, restricted access to production systems and secure storage of access tokens and API secrets. No method of transmission or storage is completely secure, but we work to protect your data and will notify affected merchants of a breach as required by law.
10. Your rights
Depending on where you live, you may have the right to access, correct, delete or port your personal data, to object to or restrict processing, and to withdraw consent. California residents have rights under the CCPA/CPRA, including the right to know and to delete; we do not sell or share personal information for cross-context behavioural advertising.
Shoppers should contact the store they purchased from, which will pass requests to us through Shopify. You may also complain to your local data protection authority; in the UK this is the Information Commissioner's Office (ICO).
11. Children
The App is intended for businesses and is not directed to children. We do not knowingly collect personal information from children.
12. Changes to this policy
We may update this policy from time to time. We will post the new version on this page with a new “Last updated” date and, for material changes, notify merchants by email or in the App.
13. Contact us
Wixpa Feed
71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom
Email: support@wixpa.com