EU B2B Portal by AddonNordic ("the App") provides a B2B customer onboarding, KYB (Know Your Business) and AML-screening portal ("the Service") to merchants who use Shopify to power their stores. This Privacy Policy describes how personal information is collected, used, and shared when you install or use the App in connection with your Shopify-supported store.
The App is published by AddonNordic ApS, CVR 46495985, Denmark. For our website and the Nordic Data API platform, see our main Privacy Policy.
Personal Information the App Collects
When you install the App, we are automatically able to access certain types of information from your Shopify account:
- Shop — store domain, store-owner name and email, plan, country, currency and locale.
- Customers — name, email, phone number and billing/shipping address (including company name, country and VAT/registration identifiers) for B2B applicants and approved customers processed through the portal.
- Companies and company contacts — company name, registration/VAT number, addresses, and the contacts you associate with each company account.
- Orders — order ID and status, line items, and billing/shipping address, where credit-limit or approval features require it.
Additionally, we collect the following types of personal information from you and/or your customers once you have installed the App:
- Information about you and others who may access the App on behalf of your store, such as your name, email address and the Shopify user ID used to sign in.
- Information about individuals who visit or use the portal, such as their IP address, web browser details, time zone, and minimal session identifiers needed to keep them signed in.
- Business-verification and KYB data — VAT numbers, CVR/organisation numbers, company documents, and information about directors and beneficial owners obtained from official public registries. Screening results (registration status, sanctions/PEP matches, risk indicators) are stored against your company records.
We collect personal information directly from the relevant individual, through your Shopify account, or using the following technologies:
Cookies are data files that are placed on your device and often include an anonymous unique identifier. For more information about cookies, and how to disable cookies, visit allaboutcookies.org. Log files track actions occurring in the App and collect data including your IP address, browser type, referring/exit pages, and date/time stamps. The App does not use web beacons, tracking pixels or advertising trackers.
How Do We Use Your Personal Information?
We use the personal information we collect from you and your customers in order to provide the Service and to operate the App. Additionally, we use this personal information to:
- Communicate with you about the App (e.g. support, billing);
- Optimize and improve the App;
- Detect and prevent abuse, fraud and security incidents, and comply with legal, tax and AML obligations.
We do not use your data or your customers' data for advertising, profiling or targeted marketing, and we do not sell it.
Sharing Your Personal Information
We share your Personal Information with the sub-processors listed below, strictly to provide the Service:
| Processor | Purpose | Region |
|---|---|---|
| Shopify | Platform and source of store data; billing | EU/global per your Shopify region |
| Railway | Application hosting and database | EU (West) |
| AddonNordic Data API (api.addonnordic.dk) | Company, VAT, sanctions, PEP and LEI lookups from official national registries and EU systems (VIES, OpenSanctions, GLEIF) | EU |
| Resend | Transactional emails (e.g. approval notifications) | EU |
| Sentry | Error tracking (where enabled) | EU |
All processors are bound by GDPR-compliant data processing agreements. Payments for paid plans are handled by Shopify through the Shopify Billing API — we never receive your card details.
Finally, we may also share your Personal Information to comply with applicable laws and regulations, to respond to a subpoena, search warrant or other lawful request for information we receive, or to otherwise protect our rights.
Behavioural Advertising
The App does not use your Personal Information for behavioural advertising, remarketing or targeted marketing communications.
Your Rights
If you are a European resident, you have the right to access personal information we hold about you and to ask that your personal information be corrected, updated, deleted or ported, and to object to processing based on legitimate interest. You may lodge a complaint with the Danish Data Protection Authority (datatilsynet.dk). If you would like to exercise this right, please contact us through the contact information below.
Additionally, if you are a European resident we note that we are processing your information in order to fulfil contracts we might have with you (for example when you subscribe to the App), or otherwise to pursue our legitimate business interests listed above. Your information is processed and stored in the EU and is not transferred outside the EU/EEA.
Data Retention
We retain data only while the App is installed. We honour Shopify's mandatory privacy webhooks: customers/data_request (we provide the customer data the App holds), customers/redact (we delete data linked to that customer, within 30 days), and shop/redact (on uninstall we delete your store's data, within 30 days). Some records may be retained longer where required by law, such as the Danish Bookkeeping Act (5 years for financial records) and AML record-keeping obligations.
Nature of Results
KYB, sanctions and PEP results are generated automatically from public sources and are provided as decision support only. They are not legal, accounting, credit or compliance advice, and are never a definitive verdict on any company or person. Sanctions and PEP matches are surfaced for review and are never an automatic block.
Changes
We may update this privacy policy from time to time in order to reflect, for example, changes to our practices or for other operational, legal or regulatory reasons.
Contact Us
For more information about our privacy practices, if you have questions, or if you would like to make a complaint, please contact us by e-mail at [email protected] or by mail using the details below:
AddonNordic ApS · CVR 46495985 · Aalborg, Denmark