Privacy Policy

Lawyer-review draft — last updated 28 August 2026.

Who we are

Upsell Me is operated by Marvello Pty Ltd. Privacy questions and requests can be sent to matthew@marvellogroup.co.uk.

What Upsell Me does

Upsell Me helps Shopify merchants show product upsells while customers browse, during checkout, after payment, and during a time-limited follow-up shopping window. It can also let an authenticated customer correct selected delivery details before fulfilment begins. The merchant is normally the controller of customer personal data. Marvello Pty Ltd normally processes that data on the merchant's instructions.

Information we process

• Merchant information: Shopify store domain, installation and session details, limited authorised staff details, app configuration, support requests, and subscription or usage evidence.
• Store information: products, variants, prices, availability, markets, shipping options, and the merchant's settings.
• Order and checkout information: order or checkout references, line items, quantities, totals, discounts, payment and fulfilment status, market, currency, delivery method, and timestamps needed for eligibility, safety, attribution, and billing.
• Customer information: a Shopify customer reference and, only for an enabled Address Changes feature, name, phone number, and delivery address. We do not collect or store card details.
• Usage and diagnostics: privacy-safe evidence that an upsell was eligible, shown, clicked, accepted, declined, dismissed, timed out, added, paid, suppressed, or failed, plus reason codes and technical health information.

Why we process information

We use this information to authenticate merchants, save settings, select and display eligible products, prevent duplicate or unsafe offers, attribute paid upsells, operate Add Items and Address Changes, provide analytics and support, secure the service, comply with Shopify requirements, and administer app billing.

For customer data, the merchant normally determines the purposes and lawful basis and Marvello normally acts as processor. Marvello acts as an independent controller for its own merchant relationship, security, legal compliance and business records where applicable. Depending on the activity and law, processing may be necessary to perform a contract, comply with law, pursue legitimate interests such as security and service improvement, or act with consent.

Minimisation and security

Each Shopify store is kept separate. Customer and order references used for analytics, replay protection, and diagnostics are normally converted to shop-bound keyed fingerprints. Raw card information is never collected. Raw addresses, complete order payloads, checkout tokens, signed request URLs, and access tokens are not written to general analytics or support logs. Data is encrypted in transit and at rest. Unknown tenant or eligibility information fails closed.

Retention

• Installation sessions and merchant configuration are kept while the app is installed and authorised, then deleted after a valid uninstall or redaction request, except where a narrow legal requirement applies.
• Non-billing operational records are kept for no more than 30 days.
• Decision and security evidence is kept for no more than 90 days unless a documented investigation requires a limited extension.
• Address values submitted for correction are used to perform and verify that request and are not retained in general analytics or logs.
• Billing and accounting evidence is kept only for the period required by tax, accounting, dispute, and Shopify obligations.

Service providers and international processing

We rely on Shopify for commerce and authentication, Google Cloud for application hosting, managed databases, secret storage, backups, and operational logging, and Cloudflare for DNS, traffic protection, protected ingress and web delivery. The current application region is Sydney, Australia, but these providers and their support operations can process data in the United States and other countries described in their terms. Cross-border handling is subject to applicable contracts and transfer safeguards; Australian APP accountability can continue to apply.

Details are in our Subprocessor List. Merchant processing terms are in our Data Processing Addendum.

Privacy choices

We do not sell personal data, use it for cross-context behavioural advertising, or make decisions with legal or similarly significant effects. Browsing does not start or send interaction analytics when Shopify reports that the visitor cannot be tracked. We honour authenticated Shopify privacy and deletion requests.

Your rights

Depending on where you live, you may have rights to access, correct, delete, restrict, object to processing, or receive a copy of personal data. Customers should normally contact the merchant they purchased from. Merchants and customers can also contact us. We may need to verify the request and relevant Shopify store.

Privacy complaints

Send a privacy request or complaint to matthew@marvellogroup.co.uk and describe the relevant store and issue without sending passwords, card data or unnecessary customer details. We will acknowledge it, investigate and respond within a reasonable period. If you are not satisfied, you may complain to the Office of the Australian Information Commissioner or another regulator available to you.

Security incidents

We maintain a process to contain suspected incidents, preserve safe evidence, revoke affected credentials, disable risky functions, recover service, and assess required Shopify, merchant, regulator, and individual notifications.

Changes

We may update this policy when the service, law, or providers change. We will update the date above and provide additional notice where required.