Last updated: 12 July 2026
This policy describes how Fischer & Hasenohr GbR ("Flavio's", "we") handles data in connection with the Flavio's Partner Connector, the Shopify app that links a partner brand's Shopify store to the Flavio's marketplace at flavios.store. It applies to merchants who install the app and to personal data processed through it. Contact: hello@flavios.store.
What the app does
Flavio's is a curated marketplace. When a partner brand installs the connector, we read the brand's catalogue and route marketplace orders back to the brand for fulfilment. The app does not modify the brand's products, settings or theme.
Data we access and why
From the brand's store (read-only): product data (titles, descriptions, images, prices, variants), inventory levels and locations, and shipping zones and rates. Purpose: presenting the brand's pieces on flavios.store with accurate stock and shipping, and keeping them in sync.
Written into the brand's store: when a customer places an order on flavios.store containing the brand's pieces, we create a corresponding order in the brand's Shopify store. That order contains the customer's name, shipping address, e-mail address and, where provided, phone number. Purpose: enabling the brand to pack, ship and, where legally required, invoice the order. This is the sole purpose for which customer personal data is transmitted to the brand.
Read back from the brand's store: the fulfilment status and tracking number of those marketplace orders, so we can inform the customer.
What we store
We store product and inventory records, shipping configuration, order records (including customer name, shipping address and e-mail for marketplace orders), commission accounting, and the access credential the brand grants at installation. Data is stored in our database hosted with Supabase in the European Union.
What we do not do
We do not sell personal data. We do not use customer data for advertising or profiling. We do not access the brand's own customers — only the data listed above. We request the minimum scopes required for the functions described.
Retention and deletion
Order records are retained as long as required for accounting and statutory retention periods. Product and inventory data is deleted when a brand leaves the marketplace. When a brand uninstalls the app, its access credential is invalidated; upon receipt of Shopify's shop redaction webhook, stored credentials are erased. We honour Shopify's mandatory privacy webhooks: customer data requests (we provide the stored data relating to the customer), customer redaction (we erase or anonymise the customer's personal data in our records) and shop redaction.
Your rights
Under the GDPR, data subjects have the right of access, rectification, erasure, restriction, portability and objection. Requests can be sent to hello@flavios.store and will be answered within 30 days. You also have the right to lodge a complaint with a supervisory authority.
Sub-processors
Supabase (database and serverless functions, EU region), Shopify (commerce platform), Netlify (partner portal hosting). Each processes data solely on our instructions.
Changes
We may update this policy as the connector evolves; the current version is always available at this address.
