Liftline privacy policy

Last updated: 3 November 2026. Liftline is made by CHRISPSDesign.

What Liftline is

Liftline is a Shopify app that helps merchants find customers likely to buy again, recommends what to do, and measures the extra sales each campaign makes. This policy explains what data Liftline accesses, why, and how it is protected.

Data we access

When a merchant installs Liftline, Shopify gives Liftline access to that store's:

Orders — dates, totals, discounts, line items and the landing page/campaign of the visit;
Customers — customer ID, first name, tags, account status and creation date, and email-marketing consent status. Email addresses are read only as described below;
Products — titles, types, tags, prices and availability;
Abandoned checkouts — items, totals and the recovery link;
Store analytics — sessions and conversion by landing page, where Shopify makes them available;
Store and staff details — store name, currency, time zone, plan status and the Shopify user ID of staff who take actions in Liftline, kept as a history of those actions.

Liftline does not store customer email addresses, phone numbers or postal addresses. When a merchant launches an approved campaign, Liftline reads each customer's email address and consent status from Shopify at that moment and tags the consenting customers. If the merchant downloads the campaign list, it is built from Shopify at the moment of download and sent straight to them; it is never saved by Liftline.

Liftline does not request customers' IP addresses, device details, phone numbers or postal addresses from Shopify. Our hosting provider may keep technical request logs, which can include the IP address of the person using the app.

How we use it

To calculate customer and product insights for the merchant, including when a customer is due to reorder, how likely they are to buy again or stop buying, and their favourite category. These predictions come from that store's own order history, and the merchant decides what to do with them.
To create campaign audiences the merchant approves, and to add campaign tags to those customers in Shopify.
To measure results by comparing customers who received a campaign with a randomly held-back group.

We never sell data, never use one store's data for another store, and never send emails to customers ourselves.

Customers who opted out

Campaign audiences only ever include customers whose email-marketing status in Shopify is "subscribed", checked again at launch.

Storage and security

Each store's data is kept in its own separate database on servers in the United States (Render), encrypted in transit (HTTPS) and at rest (including daily backups).
Shopify access tokens are encrypted at rest. Access to production systems is limited to the developer.
Liftline only reads store data, except adding campaign tags to customers on a launch the merchant approved.

Retention and deletion

While Liftline is installed, it keeps the store's data, including full order history, so it can spot buying patterns.
When a merchant uninstalls Liftline, its access to the store ends. Shopify sends a deletion notice about 48 hours later, and we then delete all of that store's data. Encrypted backups containing it expire within a further 7 days.
When Shopify sends a customer data deletion request, we delete that customer's profile, predictions, recommendations, campaign membership, abandoned checkouts and history entries from Liftline, and remove the customer from their order records. Encrypted backups containing them expire within 7 days.
When Shopify sends a customer data request, Liftline shows the request to the merchant, who can download what Liftline holds about that customer: their profile, predictions, orders, abandoned checkouts, recommendations and campaign membership.

Your rights

Customers should contact the store they bought from to exercise their rights (access, correction, deletion). Merchants can contact us at any time.

Contact

CHRISPSDesign — hello@chrisps.co.uk