Geo IP Block/Redirect Supreme – Privacy Policy
Geo IP Block/Redirect Supreme (“the App”) allows Shopify merchants to block or redirect store visitors based on their geographic location using IP-based detection (“the Service”). This Privacy Policy explains how personal information is collected, used, and shared when you install or use the App alongside your Shopify store.
Personal Information the App Collects
From Your Shopify Account (upon installation):
-
Store Information – Store name, store email, and store owner name
-
Theme/Script Permissions – Required to reinstate redirect rules or block banners
From Store Visitors:
-
IP Address – Used solely to determine visitor location
-
Geolocation Data – City, region, or country inferred from IP
-
Browser & Device Info – Browser type, language, device type, and referral URL (for whitelist/block logic)
-
Session Logs – Requests, timestamps, and redirect or block outcomes
We collect information directly via Shopify’s APIs or through the use of:
-
Log Files – Tracking IP, browser, ISP, referrer/exit, date/time
-
Web Beacons, Tags, and Pixels – Used optionally to monitor performance and ensure redirect/block actions function correctly
-
Cookies – If you enable persistent blocking prompts; inform your customers via cookie banners
How Do We Use Your Personal Information?
We use collected data strictly for:
-
Determining visitor location and enforcing block or redirect rules
-
Logging and reporting on visitor blocks or redirects for merchant review
-
Ensuring reliable operation and debugging of the App
-
Communication with merchants about updates, support, or errors
-
Improving App performance—for example, caching IP-to-location data
We do not use visitor data for advertising, profiling, or unrelated marketing purposes.
Sharing Your Personal Information
We only share your Personal Information with:
-
Shopify Inc. – To authenticate installation and modify storefront scripts/themes
-
IP Geolocation Services – (e.g., public or third-party APIs) used for IP-to-location determination
-
Cloud Service Providers – (e.g., AWS or equivalent) to host IP/cache data and manage logs
We may also disclose information to comply with lawful requests, such as subpoenas, or to protect legal rights.
Behavioural Advertising
We do not use visitor data for behavioral or targeted advertising.
Your Rights (for European Residents)
If you’re a resident of the EU, you have the following rights:
-
Access personal data we hold about you
-
Request correction, updating, or deletion of your personal data
To exercise these rights, contact us using the details below. Please note data may be processed outside the EU (e.g., USA or Canada) for IP lookup or hosting.
Data Retention
-
IP & Location Logs: Retained in active logs for 30 days, then purged automatically
-
Settings & Rules: Retained indefinitely while the App is installed
-
Upon uninstallation, all logs and location data are deleted within 30 days, unless legally required to retain.
Changes
We reserve the right to update this Privacy Policy to reflect changes in data processing, third-party services, or for legal compliance.
Contact Us
If you have questions, concerns, or wish to exercise your privacy rights, please contact us:
📧 Email: support@arcafy.com
📍 Address: Arcafy, 3131 Michelson Dr, Irvine, CA, 92612, US