1. About this policy
This policy explains how Good Native, a trading name of Do Harvey Pty Ltd (ABN 52 631 514 442) (“we”, “us”, “our”), collects, uses, discloses and protects personal information when you use our apps and services (“Services”). We handle personal information under the Australian Privacy Principles in the Privacy Act 1988 (Cth) and, where it applies, the General Data Protection Regulation (GDPR) for people in the European Economic Area and the United Kingdom. For exactly what Bloom stores, for how long, and what it never stores, see Data and privacy.2. Information we collect
2.1 Account and staff information
When you install an app or contact us, we collect your name, email address and anything else you give us. Our apps also store the Shopify staff user ID and name of the person who makes changes or connects an integration, so Change History shows who did what.2.2 Store and platform data
Our apps access data from the platforms you connect, limited to the permissions you grant:- Shopify - products, variants, inventory, orders and pre-order details. Customer data only where a feature needs it and your Shopify store settings permit it.
- Google Analytics - read-only, aggregate product page views, when you import them into Bloom’s Sold out report.
- Klaviyo - we send Notify Me sign-ups and events to your Klaviyo account. Bloom doesn’t keep a copy.
- Webflow - site structure, content and configuration, for our Webflow apps.
- Slack, Meta Ads, Google Ads and Google Tag Manager - we send notifications, conversion or event data on your behalf.
2.3 Storefront and usage data
Bloom records anonymous storefront events, such as product views and sign-ups. It doesn’t store shopper IP addresses or user-agent strings. A random browser ID is set only when the shopper’s Shopify privacy consent allows it. See Storefront events. We also record how you use our apps and website, such as pages visited and actions taken, to support and improve the Services.2.4 Payment information
We don’t collect or store payment card details. Shopify apps are billed through your Shopify invoice. Other services are billed through Paddle.com Market Limited (“Paddle”), our Merchant of Record - see Paddle’s privacy policy for how they handle payment data.3. How we use your information
We use the information we collect to:- Provide, maintain and improve the Services.
- Manage your plan and account.
- Send data to platforms you connect, such as sign-ups to Klaviyo or conversions to Google Ads.
- Contact you about your account, updates and support requests.
- Detect and prevent fraud, abuse and security incidents.
- Meet our legal obligations.
4. Legal basis for processing (GDPR)
For people in the EEA and UK, we process personal data on these bases:- Contract - to provide the Services you signed up for.
- Legitimate interest - to run, secure and improve the Services.
- Consent - where you’ve given it, such as for marketing emails or storefront tracking.
- Legal obligation - where the law requires it.
5. Sharing and disclosure
We share data only with:- Shopify - the platform our apps run on.
- Platforms you connect - Klaviyo, Google Analytics, Google Ads, Meta Ads, Google Tag Manager, Slack and Webflow, only as you direct through our apps.
- AI assistants you connect - if you connect an assistant such as Claude or ChatGPT to Bloom, it receives the store data and staff names it reads. Its provider handles that data under your agreement with them. See AI assistant connections.
- Service providers - Cloudflare (hosting and storage), Sentry (error monitoring, with merchant and customer data excluded), HubSpot (merchant contact records), Gorgias (support) and Paddle (non-Shopify billing), under appropriate data processing terms.
- Legal and regulatory bodies - where the law, a court order or protecting our legal rights requires it.
6. Data retention
We keep personal information while your account is active or while we need it to provide the Services. Uninstalling an app deletes its connections and credentials, and Shopify’s shop redaction deletes the rest of your store’s data 48 hours later. Bloom’s retention periods are listed in Data and privacy. We may keep limited records longer to meet legal obligations, resolve disputes or enforce our agreements, then delete or de-identify them.7. Data security
We encrypt data in transit, encrypt stored credentials, restrict and log staff access, and review security regularly. No system is completely secure, and we can’t guarantee absolute security. See Data loss prevention and Incident response.8. Your rights
Depending on where you are, you can:- Access a copy of the personal information we hold about you.
- Correct inaccurate or incomplete information.
- Delete your personal information, subject to legal obligations.
- Port your data in a portable format (GDPR).
- Object to processing based on legitimate interest (GDPR).
- Withdraw consent at any time, where processing relies on it.
customers/data_request and customers/redact) are handled automatically.
9. International transfers
Data may be processed and stored in Australia and in other countries where our service providers operate. Where data leaves your jurisdiction, we use appropriate safeguards, including standard contractual clauses where the GDPR requires them.10. Cookies and tracking
Bloom doesn’t set storefront cookies. It reads Shopify’s owncart cookie and, with consent, keeps an anonymous ID in browser storage - see Cookies and browser storage. Our website may use cookies to work and to measure usage; you can manage them in your browser. Some apps add tags such as Google Tag Manager or the Meta Pixel to your store at your request.
11. Children’s privacy
Our Services aren’t directed at anyone under 18. We don’t knowingly collect children’s personal information, and we delete it promptly if we find we have.12. Changes to this policy
We update this policy when our practices change. We notify you of material changes by email or in our apps. The date at the top shows when it last changed.13. Contact us
For questions, concerns or complaints about this policy or how we handle your personal information:- Email: support@goodnative.co
- Entity: Do Harvey Pty Ltd, trading as Good Native
- Address: Level 2/696 Bourke St, Melbourne VIC 3000, Australia