Privacy policy – AhoiSports Shopify app

1. Who we are

The AhoiSports Shopify app (“app”) is operated by:

The app lets a sports club connect its Shopify store to its AhoiSports platform. It is only available to clubs that have a contract with AhoiSports.

The club alone is responsible for its customers’ data. It decides which data it uses, for what, and on which legal basis. AhoiSports processes the data only on behalf of and on the instructions of the club (as a processor under Art. 28 GDPR). The details are set out in the agreement between the club and AhoiSports.

2. What data the app uses

The app reads data from the club’s store. It never changes anything in the store.

• Customers’ names and email addresses
• Billing addresses
• Orders: what was bought, when, and at what price
• Checkouts that were started but not completed
• Technical details needed to connect to the store

The app does not use payment data such as card or bank details, phone numbers or shipping addresses.

3. What the data is used for

Only for the club’s purposes:

• to combine store purchases with the club’s other data (e.g. tickets, app, newsletter) into one fan profile
• for the club’s reports and audiences
• for the club’s emails to its fans, where the club has consent or another legal basis
• for suggestions created with the help of artificial intelligence. The club decides on every suggestion itself.

We do not sell data, share it with other clubs or use it for our own purposes, including training AI models.

4. Service providers

We work with carefully selected service providers who are bound by contract to protect the data:

• Amazon Web Services (hosting, storage, email delivery, AI models), data centre in Frankfurt
• MongoDB Atlas (database), data centre in Frankfurt
• Vercel (hosting of the platform interface), processing in Frankfurt
• AhoiKapptn FlexCo, Austria (technical operations), data centre in Frankfurt
• Resend (email delivery, only if the club uses this service)

Where a provider is based outside the EU, data protection is ensured by the European Commission’s standard contractual clauses.

5. How long the data is kept

Data is kept for as long as the club uses the platform. The club decides when data is deleted, within its agreement with us.

• If a customer asks for deletion through Shopify, we delete the data that came from the store. If the club also holds data about the same person from other sources, the club decides about that data.
• If the club removes the app, the connection to the store ends immediately. Shortly after, we delete the store’s order data. Fan profiles stay in the club’s platform until the club has them deleted.
• Backups are only used to recover from an outage and are deleted automatically after fixed periods.

6. Security

Data is encrypted in transit and at rest. Only authorised staff have access, protected by two-factor sign-in. Test and live data are kept separate.

7. Your rights

You have the right to access, rectification, erasure, restriction, data portability and objection. As the club is responsible for your data, please contact the club directly. We forward any request we receive to the club and help it respond.

8. Contact

Questions about the app: ahoi@ahoikapptn.com