Privacy Policy
Effective: 24 July 2026
1. Scope
This policy covers the transactful.com website and the Transactful app for Shopify, operated by Furvur Inc, a company registered in Ontario, Canada (registration no. 82232 2558). It applies to merchants who use Transactful and to the wholesale buyers whose applications merchants process through it.
2. What we collect
From merchants: account details, store domain, and configuration.
From buyer applications (on merchants' behalf): business details, contact information, VAT numbers, trade references, and uploaded documents. For this data the merchant is the data controller and Transactful is a processor acting on their instructions.
From website visitors: server logs and privacy-respecting analytics. We do not run advertising trackers.
3. How we use it
To provide the Service: validating VAT numbers against HMRC and VIES, computing credit exposure from order data, powering approval workflows, and sending transactional email (approvals, rejections, reminders). We do not sell personal data, and we do not use your buyers' data to train models or market to them.
4. Where it lives
Data is hosted in the EU/UK region with encrypted storage; uploaded documents are stored in Cloudflare R2. Order and company data is accessed from Shopify via their APIs under the permissions you grant at install.
5. Retention and deletion
We keep data while your subscription is active. On uninstall, store data is deleted in accordance with Shopify's mandatory data removal webhooks (48 hours for shop redaction requests). Merchants can delete individual applications and documents at any time.
6. Your rights (GDPR / UK GDPR)
Individuals may request access, correction, or erasure of their personal data. Buyers should contact the merchant they applied to (the controller); we support merchants in fulfilling these requests, and honour Shopify's customer data request and redaction webhooks.
7. Contact
Privacy questions: [email protected].