Cartful legal

Data Protection

A summary of the data categories, retention approach, and safeguards used to operate Cartful.

Last updated: March 15, 2026

Purpose

Cartful processes store, cart, analytics, billing, and limited order-related information in order to provide a premium cart experience platform for Shopify merchants.

The service is designed to help merchants control cart design, merchandising, multi-cart deployment, and cart-specific reporting from a single application.

Data categories

  • Merchant and store account data needed for installation, authentication, and billing.
  • Cart configuration data such as layouts, widget settings, translations, and design settings.
  • Cart session and event data used for funnel and performance analytics.
  • Order-related data delivered by Shopify webhooks, including order totals, identifiers, timestamps, line item data, and payload data used for attribution and analytics workflows.

Access and security measures

Cartful uses commercially reasonable controls to protect the information it processes. These measures may include secure transport, access restrictions, infrastructure-level protections, and internal safeguards intended to reduce unauthorized access and misuse.

Access to operational data is limited to the people, systems, and service providers that need it in order to operate, maintain, support, or secure Cartful.

Retention and deletion

Cartful retains information for as long as reasonably necessary to operate the service, preserve merchant configuration, support billing and analytics, resolve disputes, and comply with legal or Shopify platform obligations.

When Cartful receives Shopify's shop redact request, data associated with that shop is deleted from Cartful's systems. Certain customer-related privacy requests may also be handled through Shopify's privacy request workflows.

Use limitation

Cartful uses the information it processes to provide, support, secure, and improve the service. Cartful does not sell merchant or customer personal data.

Operational notes

Because Cartful is installed into merchant Shopify stores, some information is received from Shopify APIs and webhooks as part of normal platform operation. Cartful stores and processes that information only in connection with the service provided to the merchant.

Contact

Questions about Cartful's data protection practices can be sent to hello@cartful.ca.