1. Who we are
RewardMe is provided by KHALILOV LTD (Hi Ecom), based in 2 Frederick street, London, United Kingdom, WC1X 0ND. You can contact us at contact@hiecom.co.
When we process a store’s customer and affiliate information to operate its referral, reward and loyalty programs, the merchant determines the purposes of that processing and acts as the data controller. We act as a processor on the merchant’s behalf. We also use merchant contact and support information to administer our relationship with the merchant.
The merchant’s own privacy policy also applies to purchases, customer accounts and participation in that store’s programs. Shopify and any other services you use have their own privacy notices.
2. Information we collect and why
Merchant and store information
Through Shopify and the information merchants provide, we process store names, domains, business details and addresses, merchant or administrator names and email addresses, app settings, and subscription and usage information. We use this to install and configure RewardMe, administer the app, provide support and manage billing. Shopify session identifiers and access tokens allow the app to communicate with Shopify on the merchant’s behalf.
Affiliate and customer information
We process names, email addresses, Shopify customer IDs, affiliate identifiers, referral links and social network handles provided through Shopify, the merchant, affiliate imports or the affiliate’s own submissions. We use this information to manage participation, attribute referrals, maintain account records and deliver the store’s affiliate and loyalty features.
Orders, commissions and rewards
We process Shopify order IDs, customer IDs, order values, product and variant IDs, quantities, referral attribution, points balances, commission calculations and reward redemption history. This information supports reward calculations, maturity periods, campaign rules, discount and shipping rewards, and reporting on referred revenue and redeemed rewards.
Payout requests
When a merchant enables a payout option, affiliates may provide a PayPal email address and name, or bank details such as an IBAN, account-holder name and address. Merchants may configure additional redemption fields. We store and display the submitted details so the merchant can review and fulfil the request. RewardMe’s PayPal and bank-transfer request options do not automatically transfer funds.
Creator pages and videos
When an affiliate uses the page builder, we process submitted videos, images or thumbnails, profile and page text, product selections, links, theme settings and page-review information. We use this content to create, preview, review and publish shoppable pages. Content published on a store’s domain is visible to visitors and may be indexed or shared by others. Affiliates should only upload material they have permission to publish and should not put private payout information in page content.
Referral tracking and technical information
Referral links and storefront tracking associate store activity and orders with an affiliate. Depending on the enabled features, this can involve referral identifiers, cookies or browser storage, and Shopify customer or web-pixel events. Technical and diagnostic records may include request, device or browser information needed to operate, troubleshoot and protect the service. Merchants are responsible for configuring appropriate privacy notices and obtaining any required consent for their storefront tracking.
Communications and email settings
We process messages and contact details sent to support. If a merchant configures program emails, we process the sender and recipient details, templates, delivery settings and credentials needed for the selected email service. We use these to send the program notifications enabled by the merchant and to investigate delivery problems.
4. Storage and security
Our app hosting environment is based in Amsterdam, in the European Union. We operate from Albania and use service providers, including Shopify and merchant-configured email services, whose processing locations may differ. Contact us for information about the providers relevant to your store and any international processing.
We maintain organizational and technical safeguards to protect personal information, including controls on access to app data. No online service or transmission method can guarantee absolute security. Merchants should limit staff access and avoid collecting payout or other personal information that is unnecessary for their program.
5. Retention and deletion
We retain app information while a merchant uses RewardMe, as needed to operate the store’s program and maintain its account, reward and transaction records. After termination or uninstallation, we follow the merchant’s instructions regarding deletion or return of its data, subject to legal obligations to retain information for audit or compliance purposes.
Merchants can request the deletion or return of their app data by contacting contact@hiecom.co. Uninstalling the app ends its ongoing access through Shopify, but is not a promise that all existing records, backups or legally required records are immediately erased.
6. Your choices and rights
Depending on applicable law, individuals may have rights to access, correct, delete or obtain a copy of personal information, to restrict or object to processing, or to withdraw consent where processing relies on consent. They may also have the right to complain to a relevant data-protection authority.
Merchants: contact us to request help with your own information, administrator records or data processed for your store.
Customers and affiliates: contact the store where you shop or participate in the program. The merchant controls that program’s records and can instruct us about your request. You can also contact us, identifying the relevant store, and we will help direct the request. We may need information to verify a request before acting on it.
Merchants are responsible for establishing a lawful basis for their use of customer and affiliate information, providing appropriate notices, obtaining consent where required and responding to individuals’ requests. Storefront visitors can use the store’s privacy controls and their browser settings where available; limiting tracking may affect referral attribution.
7. This privacy-policy website
This page is hosted on GitHub Pages. It does not contain an app sign-in, tracking scripts, analytics tools or a form for collecting information. GitHub processes visitors’ IP addresses for security when serving Pages sites. See the GitHub Privacy Statement for its practices. Following an external link takes you to a service with its own privacy policy.
8. Changes to this policy
We may update this policy as the app or our practices change. We will update the date on this page and notify merchants of material changes through the app or the merchant’s registered email address.
9. Contact us
For questions about this policy or a privacy request, contact: