> For the complete documentation index, see [llms.txt](https://staylime.com/docs/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://staylime.com/docs/energy-label/legal/privacy-policy.md). # Privacy Policy *Last updated: September 2, 2026* This policy explains what data the **EU Energy Label** Shopify app processes, why, and what happens to it. It is written for merchants who install the app. EU Energy Label is operated by **Staylime Inc.**, 2093 Philadelphia Pike #7659, Claymont, DE 19703, United States. For anything privacy-related, write to . ### What EU Energy Label does not do The app does not request access to Shopify customer, order, or checkout data, and it is not designed to collect personal data about your store's **customers**: it does not set tracking cookies, build visitor profiles, or use visitor data for advertising. Your customers' data is governed by your own store policies and Shopify's, not by this one. We do not sell your data, and we do not use it for advertising. ### What we process **Store and account information.** When you install the app, Shopify shares your store's name and domain and the store owner's contact details (name, email address, phone number, physical address). We use them to run the app for your store, to provide support, and to send service messages. **Product data and app metafields.** The app reads your products and variants to display badges, and creates its own metafield definitions in your store to hold its data: the EPREL registration numbers you assign and, in Manual mode, the energy class, label image, and product sheet you provide. The app reads and writes only its own metafields and does not access others. This data lives in your Shopify store. **EPREL data.** Energy labels, class data, and product information sheets are fetched from the European Commission's public EPREL database using the registration numbers you assign. The app may cache this data on our servers to serve your storefront faster. **Storefront requests.** To show badges and open labels and documents, your storefront visitors' browsers send requests to our servers. These requests carry standard technical data — the visitor's IP address and the country and language Shopify determines for the visit — which the app uses only to return the right badge and the document in the right language. This data is kept only in short-lived technical logs and is not used to identify or profile visitors. **Support data.** When you contact support, we process what you submit through our help desk: your email address, store URL, message contents, attachments, and — if you provide one — a Shopify collaborator request code. **Billing.** The subscription is billed through Shopify's billing system. Payment details are processed by Shopify; we do not receive or store your payment card numbers. **Technical logs.** Our servers keep standard technical logs (such as IP addresses and timestamps) for security and troubleshooting. The app currently uses no third-party analytics tools. If that changes, we will update this policy first. ### Legal bases for processing Where laws such as the GDPR or UK GDPR apply, we rely on: **performance of a contract** — to run the app for your store and provide support; **legitimate interests** — to secure and troubleshoot the service, improve the app, and communicate about the service; and **consent**, where the law requires it — for example, for certain marketing emails. You can object to processing based on legitimate interests, and withdraw consent, at any time. ### How long we keep it * **App metafields** (EPREL numbers, Manual mode data) live in your Shopify store; what happens to them on uninstall follows Shopify's platform rules for app data. * **Cached EPREL data** is transient and refreshed or expired automatically. * **Account information** is kept while the app is installed. * **Support conversations** are kept in our help desk for as long as we need them to provide support. ### When you uninstall the app Our server-side copies of your data — configuration and cached documents — are deleted within 48 hours of uninstalling. If you reinstall within those 48 hours, your data is kept, so you can continue where you left off. Residual copies may remain in routine infrastructure backups for a limited time — no longer than 28 days — and are deleted automatically as backups rotate. You can request deletion of any data at any time at . ### Security We use reasonable administrative, technical, and organizational safeguards designed to protect data against unauthorized access, loss, misuse, or alteration. No system can be guaranteed completely secure. ### Where your data is processed The app is hosted with DigitalOcean in the European Union (Frankfurt, Germany). Some of our providers — Shopify and Zendesk — process data under their own terms and policies and may transfer it to the United States and other countries where they operate. ### Service providers We share data only with providers that help us run the service: * **Shopify** — the platform the app runs on, including subscription billing. * **DigitalOcean** — hosting (Frankfurt, European Union). * **Zendesk** — support help desk. * **European Commission (EPREL)** — the source of energy labels and product information sheets; we send it the registration numbers needed to retrieve them. If we add a new provider that processes your data, we will list it here. ### When we may disclose data We may disclose data if required by law or legal process, to protect the rights, safety, or security of Staylime, our users, or others, or as part of a merger, acquisition, or sale of assets — in which case this policy continues to apply to your data until updated. ### Emails We send service emails related to your use of the app — for example, replies to your support requests. We may also send occasional product news about EU Energy Label to your store's email address; where the law requires it, we will only do so with your consent. Every such email includes an unsubscribe link, and opting out never affects the app or service emails. ### Your rights You can ask us what data we hold about you and your store, ask us to correct or delete it, restrict or object to its processing, receive a copy in a portable format where applicable, and withdraw consent where processing is based on consent — write to . If you are in the EEA or the UK, you also have the right to complain to your supervisory authority. Depending on where you are located, you may have additional rights under laws such as the CCPA; we honor applicable requests. ### Changes to this policy If this policy changes, we will publish the new version on this page with an updated date. Material changes — such as a new category of data or a new provider — will be reflected here before they take effect. --- # Agent Instructions This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com. ## Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter: ``` GET https://staylime.com/docs/energy-label/legal/privacy-policy.md?ask=&goal= ``` `ask` is the immediate question: it should be specific, self-contained, and written in natural language. `goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.