Privacy Policy

How EU Energy Label handles your store's data.

Last updated: September 7, 2026

This policy explains what data the EU Energy Label Shopify app processes, why, and what happens to it. It is written for merchants who install the app.

EU Energy Label is operated by Staylime Inc., 2093 Philadelphia Pike #7659, Claymont, DE 19703, United States. For anything privacy-related, write to [e-mail].

What EU Energy Label does not do

The app does not request access to Shopify customer, order, or checkout data, and it is not designed to collect personal data about your store's customers: it does not set tracking cookies, build visitor profiles, or use visitor data for advertising. Your customers' data is governed by your own store policies and Shopify's, not by this one.

We do not sell your data, and we do not use it for advertising.

What we process

Store and account information. When you install the app, Shopify shares your store's name and domain and the store owner's contact details (name, email address, phone number, physical address). We use them to run the app for your store, to provide support, and to send service messages. The app also stores the access tokens it needs to work in your store.

Product data and app metafields. The app reads your products and variants to display badges, and creates its own metafield definitions in your store to hold its data: the EPREL registration numbers you assign and, in Manual mode, the energy class, label image, and product sheet you provide. The app reads and writes only its own metafields and does not access others. This data lives in your Shopify store.

EPREL data. Energy labels, class data, and product information sheets are fetched from the European Commission's public EPREL database using the registration numbers you assign. The app may cache energy badges on our servers for up to 24 hours; cached badges are public EPREL data keyed by registration number and are not linked to any store or visitor.

Storefront requests. To show badges and open labels and documents, your storefront visitors' browsers send requests to our servers. These requests carry standard technical data — the visitor's IP address, the country Shopify determines for the visit, and the visitor's browser language — which the app uses only to return the right badge and the document in the right language. This data is kept in technical logs for up to 14 days and is not used to identify or profile visitors.

Support data. When you contact support, we process what you submit through our help desk: your email address, store URL, message contents, attachments, and — if you provide one — a Shopify collaborator request code.

Billing. The subscription is billed through Shopify's billing system. Payment details are processed by Shopify; we do not receive or store your payment card numbers.

Technical logs. Our servers keep standard technical logs (such as IP addresses and timestamps) for security and troubleshooting, for up to 14 days.

The app currently uses no third-party analytics tools. If that changes, we will update this policy first.

Legal bases for processing

Where laws such as the GDPR or UK GDPR apply, we rely on: performance of a contract — to run the app for your store and provide support; legitimate interests — to secure and troubleshoot the service, improve the app, and communicate about the service; and consent, where the law requires it — for example, for certain marketing emails. You can object to processing based on legitimate interests, and withdraw consent, at any time.

How long we keep it

• App metafields (EPREL numbers, Manual mode data) live in your Shopify store; what happens to them on uninstall follows Shopify's platform rules for app data.
• Cached energy badges expire within 24 hours.
• Account information is kept while the app is installed.
• Technical logs are kept for up to 14 days.
• Support conversations are kept in our help desk for as long as we need them to provide support.

When you uninstall the app

Our server-side copies of your data — your app settings and access tokens — are deleted within 48 hours of uninstalling. If you reinstall within those 48 hours, your settings are kept, so you can continue where you left off. Residual copies may remain in routine infrastructure backups for a limited time — no longer than 28 days — and are deleted automatically as backups rotate.

You can request deletion of any data at any time at [e-mail].

Security

We use reasonable administrative, technical, and organizational safeguards designed to protect data against unauthorized access, loss, misuse, or alteration. No system can be guaranteed completely secure.

Where your data is processed

The app is hosted with DigitalOcean in the European Union (Frankfurt, Germany); storefront requests reach it through Cloudflare's network. Some of our providers — Shopify, Zendesk, and Cloudflare — process data under their own terms and policies and may transfer it to the United States and other countries where they operate.

Service providers

We share data only with providers that help us run the service:

• Shopify — the platform the app runs on, including subscription billing.
• DigitalOcean — hosting (Frankfurt, European Union).
• Cloudflare — network and security layer in front of our servers.
• Zendesk — support help desk.
• European Commission (EPREL) — the source of energy labels and product information sheets; we send it the registration numbers needed to retrieve them.

If we add a new provider that processes your data, we will list it here.

When we may disclose data

We may disclose data if required by law or legal process, to protect the rights, safety, or security of Staylime, our users, or others, or as part of a merger, acquisition, or sale of assets — in which case this policy continues to apply to your data until updated.

Emails

We send service emails related to your use of the app — for example, replies to your support requests. We may also send occasional product news about EU Energy Label to your store's email address; where the law requires it, we will only do so with your consent. Every such email includes an unsubscribe link, and opting out never affects the app or service emails.

Your rights

You can ask us what data we hold about you and your store, ask us to correct or delete it, restrict or object to its processing, receive a copy in a portable format where applicable, and withdraw consent where processing is based on consent — write to [e-mail]. If you are in the EEA or the UK, you also have the right to complain to your supervisory authority. Depending on where you are located, you may have additional rights under laws such as the CCPA; we honor applicable requests.

Changes to this policy

If this policy changes, we will publish the new version on this page with an updated date. Material changes — such as a new category of data or a new provider — will be reflected here before they take effect.