Effective July 16, 2026
Privacy Policy
Hongkong Leyihui Technology Co., Limited, doing business as BestDealer, is the data controller for personal data processed by the BestDealer Shopify apps listed below. This policy explains what we process, why we process it, how long it is kept, and the choices available to merchants and storefront visitors.
Apps covered by this policy
- BestDealer Goal Bar
- BestDealer Age Gate
- BestDealer Stock Counter
- BestDealer Product Badges
- BestDealer Country Guard
- BestDealer Order Tracking
Information we process for every installed app
- Shop and merchant account metadata: Shopify shop domain and identifiers, installation status, and the limited merchant user ID, name, email, locale, session, and granted-scope information Shopify provides to authenticate the merchant and operate the embedded app.
- Merchant configuration: settings, display rules, appearance choices, and operational preferences selected by a merchant for the installed app.
- Operational information: security and error records reasonably needed to operate, protect, troubleshoot, and support the service.
Storefront apps and event data
BestDealer Goal Bar, Age Gate, Stock Counter, and Product Badges can record store-scoped configuration or aggregate storefront events such as display, view, click, verification, dismissal, route, and event time. These records are used to render the merchant's configuration and show app activity; they are not used to build an individual visitor profile.
BestDealer Age Gate performs birthdate calculations locally in a visitor's browser. A birthdate is not sent to BestDealer, Shopify App Proxy, or the merchant backend. The theme extension may place a small verified marker or expiry value in browser storage so the same gate or event does not repeat unnecessarily. A Shopify-signed App Proxy request can transiently include a customer ID; Age Gate authenticates the request and does not use or persist that customer ID.
Country Guard visitor analytics
Country Guard uses the active storefront country context and the merchant's saved rules to apply access controls. If a merchant turns on its optional visitor analytics, the app records visitor IP address, country, region or city where supplied, page path, rule outcome, and event time to provide that merchant's security and access-control analytics. Country Guard does not read Shopify order or customer records.
Order Tracking customer and shipment data
BestDealer Order Tracking processes the order, fulfillment, and customer information needed to synchronize shipments, display a merchant's tracking dashboard, and let buyers look up their own delivery status. This can include order number, fulfillment and tracking number, carrier and shipment status, customer name and email, and delivery-address or tracking-event location details. The buyer-facing tracking page returns only a restricted set of fields and does not expose a customer's full email, phone number, or address.
To retrieve and update shipment status, Order Tracking sends the tracking number and related carrier information to 17TRACK, our tracking-data provider. We use the minimum information necessary for that service and do not sell customer personal data.
How and where information is used
We process the information above to authenticate merchants, deliver configured storefront behavior, synchronize shipment status, save merchant settings, provide analytics, secure the service, and respond to support or privacy requests. Data may be processed in the United States and other countries where BestDealer or its infrastructure and service providers operate.
Retention and deletion
Shopify session records are deleted when we receive the app uninstalled webhook. Merchant configuration and app business records are deleted when Shopify sends the mandatory shop/redact webhook, which Shopify sends after uninstall and no earlier than 48 hours after uninstall. We also process Shopify's mandatory customer data-request and customer-redact webhooks. A merchant may request earlier deletion by emailing us. Necessary security, access, and operational logs may be retained for the period reasonably required to investigate abuse, protect the service, and meet operational security needs.
Security and your rights
We use encrypted transport, access controls, tenant-scoped records, restricted service credentials, and operational monitoring to protect information. Depending on location, a person may have rights to access, correct, delete, restrict, or object to processing, receive a portable copy, or complain to a data-protection authority. We may need to verify a request before acting on it.
Policy updates and contact
We may update this policy when an app, our providers, or legal requirements change. We will post the revised policy here and update its effective date. For privacy questions, rights requests, or deletion requests, email support@bestdealer.com. For product help, visit the support page.