VAT & Company Data by Nordic ("the App") provides automated VAT-number validation and Nordic company-data enrichment ("the Service") to merchants who use Shopify to power their stores. This Privacy Policy describes how personal information is collected, used, and shared when you install or use the App in connection with your Shopify-supported store.
The App is published by AddonNordic ApS, CVR 46495985, Denmark. For our website and the Nordic Data API platform, see our main Privacy Policy.
Personal Information the App Collects
When you install the App, we are automatically able to access certain types of information from your Shopify account:
- Shop — store domain, store-owner name and email, plan, country, currency and locale.
- Customers — name, email, billing/shipping address (including company name, country and VAT/registration identifiers) for customers whose records the App validates or enriches.
- Orders — order ID and status, line items, and billing/shipping address, where the feature you use requires it (for example, tax-exemption or post-order verification).
Additionally, we collect the following types of personal information from you and/or your customers once you have installed the App:
- Information about you and others who may access the App on behalf of your store, such as your name, email address and the Shopify user ID used to sign in.
- Information about individuals who visit or use the App's embedded admin, such as their IP address, web browser details, time zone, and minimal session identifiers needed to keep you signed in.
- Business-verification data — VAT numbers and CVR/organisation numbers you or your buyers provide, used to look up official business-registry data. Enrichment results (company name, registration status, VAT validity) are stored against your Shopify records.
We collect personal information directly from the relevant individual, through your Shopify account, or using the following technologies:
Cookies are data files that are placed on your device and often include an anonymous unique identifier. For more information about cookies, and how to disable cookies, visit allaboutcookies.org. Log files track actions occurring in the App and collect data including your IP address, browser type, referring/exit pages, and date/time stamps. The App does not use web beacons, tracking pixels or advertising trackers.
How Do We Use Your Personal Information?
We use the personal information we collect from you and your customers in order to provide the Service and to operate the App. Additionally, we use this personal information to:
- Communicate with you about the App (e.g. support, billing);
- Optimize and improve the App;
- Detect and prevent abuse, fraud and security incidents, and comply with legal and tax obligations.
We do not use your data or your customers' data for advertising, profiling or targeted marketing, and we do not sell it.
Sharing Your Personal Information
We share your Personal Information with the sub-processors listed below, strictly to provide the Service:
| Processor | Purpose | Region |
|---|---|---|
| Shopify | Platform and source of store data; billing | EU/global per your Shopify region |
| Railway | Application hosting and database | EU (West) |
| AddonNordic Data API (api.addonnordic.dk) | Company and VAT lookups from official national registries and EU systems (VIES) | EU |
| Resend | Transactional emails | EU |
| Sentry | Error tracking (where enabled) | EU |
All processors are bound by GDPR-compliant data processing agreements. Payments for paid plans are handled by Shopify through the Shopify Billing API — we never receive your card details.
Finally, we may also share your Personal Information to comply with applicable laws and regulations, to respond to a subpoena, search warrant or other lawful request for information we receive, or to otherwise protect our rights.
Behavioural Advertising
The App does not use your Personal Information for behavioural advertising, remarketing or targeted marketing communications.
Your Rights
If you are a European resident, you have the right to access personal information we hold about you and to ask that your personal information be corrected, updated, deleted or ported, and to object to processing based on legitimate interest. You may lodge a complaint with the Danish Data Protection Authority (datatilsynet.dk). If you would like to exercise this right, please contact us through the contact information below.
Additionally, if you are a European resident we note that we are processing your information in order to fulfil contracts we might have with you (for example when you subscribe to the App), or otherwise to pursue our legitimate business interests listed above. Your information is processed and stored in the EU and is not transferred outside the EU/EEA.
Data Retention
We retain data only while the App is installed. We honour Shopify's mandatory privacy webhooks: customers/data_request (we provide the customer data the App holds), customers/redact (we delete data linked to that customer, within 30 days), and shop/redact (on uninstall we delete your store's data, within 30 days). Some records may be retained longer where required by law, such as the Danish Bookkeeping Act (5 years for financial records).
Nature of Results
VAT and company-data results are generated automatically from public sources and are provided as decision support only. They are not legal, accounting or compliance advice.
Changes
We may update this privacy policy from time to time in order to reflect, for example, changes to our practices or for other operational, legal or regulatory reasons.
Contact Us
For more information about our privacy practices, if you have questions, or if you would like to make a complaint, please contact us by e-mail at [email protected] or by mail using the details below:
AddonNordic ApS · CVR 46495985 · Aalborg, Denmark