Spocket, Inc. ("Spocket", "we", "us") is committed to protecting your privacy. This Privacy Policy explains how Spocket collects and processes personal information when you use the website at www.spocket.co, the Spocket app on Shopify, WooCommerce and other providers, and the Spocket services. It covers what information we collect and why, how we use and disclose it, and how you can access and update it.
Who we are
Controller or processor: Spocket is the data controller for personal information we hold because of your use of our Services. Where we hold personal information uploaded by customers through their use of our platform, Spocket acts as a data processor, and this Privacy Policy does not apply to that information.
Children under 16: our Website, App and Services are not intended for children under 16, and we do not knowingly collect their personal information. If we discover that we have collected personal data from a child under 16 without verified parental consent, we will delete it. If you believe this has happened, please contact us.
Third-party links: our Website or App may link to third-party websites, plug-ins and applications. We do not control them and are not responsible for their privacy policies, so we recommend reading the privacy notice of every site you visit.
The information we collect about you
Personal data is any information about an individual who can be identified directly or indirectly. It does not include anonymous data. We may collect, use, store and transfer:
Identity Data — first name, last name, username or similar identifier.
Contact Data — billing address, delivery address, email address and telephone numbers.
Financial Data — payment card details.
Transaction Data — details of payments to and from you and the services you have purchased from us.
Technical Data — IP address, mobile device ID, login data, browser type and version, time zone and location, plug-ins, operating system and platform, and other technology on the devices you use to access our Website or App.
Profile Data — username and password, purchases and orders, location, preferences, feedback and survey responses.
Usage Data — how you use our Website, App and services, such as buttons clicked, pages visited, time spent, search queries, visit times, products tracked and how often you use them.
Marketing and Communications Data — your marketing and communication preferences.
We also use Aggregated Data, such as statistical or demographic data. It is not personal data unless it is combined with your personal data in a way that identifies you, in which case we treat it as personal data under this policy.
We do not collect Special Categories of Personal Data (such as racial or ethnic origin, religious or philosophical beliefs, sexual orientation, political opinions, trade union membership, health, genetic or biometric data), or data about criminal convictions and offences.
If we need personal information by law or under a contract with you and you do not provide it, we may be unable to provide the services. We will tell you at the time, including if this means cancelling a service.
How we collect personal information
Direct interactions — when you fill in forms, link your Shopify account, or contact us, for example to sign up for a demo, create an account, purchase a service, subscribe to email alerts, download content, contact customer service, request marketing or give feedback.
Automated technologies — Technical Data about your device, browsing and usage, collected through cookies, server logs and similar technologies, including when you visit other websites that use our cookies.
Third parties and public sources — analytics providers (such as Google Analytics), search information providers (such as Google), payment and delivery providers (such as Stripe), partners, data brokers or aggregators, and publicly available sources such as LinkedIn, Instagram and other social media platforms.
How we use your personal information
We only use your personal information when the law allows us to — most commonly to perform a contract with you, where it is necessary for our legitimate interests (and your rights do not override them), or to comply with a legal or regulatory obligation. We rely on consent mainly for third-party marketing, and you can withdraw it at any time.
We use your personal information to:
register you as a new customer and let you use our services;
process and deliver your orders, including managing payments and fees and collecting money owed;
manage our relationship with you, such as notifying you about changes and asking for feedback;
enable you to take part in surveys, competitions or promotions;
administer and protect our business and platforms, including troubleshooting, support and fraud prevention;
improve our websites, services and customer experiences through data analytics; and
make suggestions and recommendations about services that may interest you.
We only use your data for the purpose we collected it for, unless another purpose is compatible with it. If we need to use it for an unrelated purpose, we will notify you and explain the legal basis. In some cases we may process your data without your consent where this is required or permitted by law.
Marketing and cookies
Promotional offers: we may use your data to send you offers if you have shown interest in, purchased or engaged with our services, unless you have opted out.
Third-party marketing: we will get your express opt-in consent before sharing your information with other companies for marketing purposes.
Opting out: you can opt out of marketing messages from us or third parties at any time by contacting us. This does not apply to service-related communications.
Cookies (website only): you can set your browser to refuse cookies or alert you to them. Disabling cookies may affect how the site works.
Who we share your information with
Service providers that provide IT and system administration services.
Social networking sites, if you have linked your account to a social media profile.
Professional advisers — lawyers, bankers, auditors and insurers based in Canada and the United States.
Regulators and government authorities in Canada, the United States and the EEA that require reporting of processing activities in certain circumstances.
Third parties to whom we may sell, transfer or merge parts of our business or assets. New owners may use your personal information in the same way as described in this policy.
We require all third parties to respect the security of your personal information and to handle it according to the law. Our service providers may not use your personal information for their own purposes and may only process it for specified purposes, on our instructions.
International transfers
We share your personal information within our company and with third-party service providers such as Amazon Web Services, which may involve transferring it internationally — for example, outside the European Economic Area (EEA) if you are based in the European Union. Whenever we transfer the personal information of EU-based users out of the EEA, we make sure appropriate safeguards are in place to give it a similar level of protection. Contact us for more information about the specific mechanisms we use.
Data security
We have appropriate security measures in place to prevent your personal information from being accidentally lost, used, accessed without authorization, altered or disclosed. Access is limited to employees, agents, contractors and other third parties who have a business need to know, who process it only on our instructions and are subject to a duty of confidentiality. We have procedures to deal with any suspected personal data breach and will notify you and any applicable regulator where we are legally required to.
Data retention
We keep your personal information only as long as necessary for the purposes we collected it for, including legal, accounting or reporting requirements. To decide the retention period, we consider the amount, nature and sensitivity of the information, the risk of harm from unauthorized use or disclosure, our purposes for processing it, and applicable legal requirements.
By law, we must keep basic information about our customers (Contact, Identity, Financial and Transaction Data) for six years after they stop being customers, for tax and other legal purposes.
In some circumstances you can ask us to delete your information (see your rights below).
We may anonymize your personal information for research or statistical purposes, in which case we may use it indefinitely without further notice.
Your legal rights
Under certain circumstances, data protection laws give you the right to:
Request access to your personal information and receive a copy of it.
Request correction of incomplete or inaccurate information.
Request erasure of your personal information where there is no valid reason for us to keep processing it. We may not always be able to comply for legal reasons, which we will tell you about.
Object to processing based on legitimate interests, and object to processing for direct marketing.
Request restriction of processing — for example, while we verify the accuracy of your data, or where you need us to keep it for legal claims.
Request a transfer of your personal information to you or a third party in a structured, commonly used, machine-readable format.
Withdraw consent at any time where we rely on consent. This does not affect processing carried out before you withdraw it.
You usually will not need to pay a fee, but we may charge a reasonable fee or refuse if a request is clearly unfounded, repetitive or excessive. We may ask for information to confirm your identity. We aim to respond to all legitimate requests within one month; complex or multiple requests may take longer, and we will keep you updated.
If you are located in the European Union, you have the right to lodge a complaint with your local supervisory authority, but we would appreciate the chance to resolve your concerns first.
Changes to this policy
We may change this Privacy Policy at any time. Updates are posted on our Website and linked in the App, and the revision date always reflects the latest version. Please let us know if your personal information changes during your relationship with us. Effective date: July 6, 2020.
Last updated: October 22, 2026
Contact us
If you have questions about this Privacy Policy or want to exercise your rights, contact Spocket Inc. at support@spocket.co, or by post at 555 Burrard St, Vancouver, BC V7X 1L4.
The policy page also sets out Spocket's subscription renewal and failed-payment terms — see What is Spocket's subscription refund policy?
New to Spocket? Start your 7-day free trial.