Requirements when Shopify Network Intelligence is enabled

When Shopify Network Intelligence is enabled, Shopify will securely use your customer data together with customer data from other merchants to generate insights that power advanced features, known as Enhanced Services, to make running your business easier.

Enhanced Services help protect, grow, and improve your business and the businesses of other Shopify merchants through features that incorporate data and information from customer interactions with your store, with other merchants, and with Shopify. Certain Shopify apps and features require Shopify Network Intelligence to be enabled and are listed here. This list may be updated from time to time.

Requirements for informing customers

When Shopify Network Intelligence is enabled, there are additional requirements to make sure your customers are informed about how Shopify processes their data to provide these Enhanced Services:

Link to Shopify's Privacy Policy: Include a link to Shopify's Consumer Privacy Policy in your privacy policy, and post a link to your privacy policy prominently in your store where visitors will be able to see it.
Information in your terms of service and privacy policy:
- Your terms and privacy policy should inform visitors that your store is hosted by Shopify and that Shopify processes their data when they visit and make purchases on your store, including to provide services based on their interactions with other merchants and with Shopify.
- Explain to visitors that their information will be shared with Shopify and other third parties that may be located in other countries, in order to provide services to them, including those that incorporate data from their interactions with other merchants and with Shopify.

Additional requirements according to location

Depending on where you do business and where your customers are based, you may have some additional requirements when Shopify Network Intelligence is enabled.

US-based businesses or customers

Some of the Enhanced Services, such as those that target advertising based on your customers' activity with other merchants and Shopify, may constitute "sharing" or "targeted advertising" under privacy laws in certain US states. Learn more about these definitions here.

You should do the following if your store is available to customers in those US states:

Provide your customers in those states with a right to opt-out of using their data for "sharing" or "targeted advertising."
Include a link to the opt-out method in your privacy policy. You may also be required to offer a second method to opt-out to customers in certain states
Shopify offers automated privacy settings, including a template privacy policy and data sharing opt-out page, to help you meet these requirements.

EEA, UK, or Switzerland-based business or customers

In addition to the privacy compliance obligations outlined in Using Shopify to help comply with GDPR, you should do the following if your store or customers are based in the UK, EEA, or Switzerland:

Obtain consent from customers to see ads based on their activity in your store, with other merchants, and with Shopify, and provide them with the ability to withdraw their consent. Learn more about cookie banners and how customers can access their consent preferences here.
Include in your privacy policy a link to the Shopify privacy portal where customers can learn how to exercise their rights to withdraw consent or object to Shopify's processing of their data to provide Enhanced Services.
Shopify offers automated privacy settings, including a template privacy policy and cookie banner, to help you meet these requirements.

For information about how Shopify can help you meet your GDPR obligations, refer to Using Shopify to help comply with GDPR.

Automated privacy settings

Shopify offers the following automated privacy settings that you can use to help meet these requirements:

Automated privacy policy: A privacy policy is a legal document that details how your business collects, uses, stores, and protects the personal information of its visitors. Shopify provides an automated policy generator in the Shopify admin at Settings > Customer privacy to help keep your policy in sync with your store's settings, including your Shopify Network Intelligence setting. You also have the option to draft your privacy policy manually, as long as it meets the requirements described above.
Cookie banner: A cookie banner is a notification that informs visitors about the use of cookies and similar technologies and asks for their consent to the use of these technologies for different purposes. Shopify offers a tool that you can customize as needed to notify customers and obtain consent to collect their data through cookies and similar technologies.
Data sharing opt-out page: A data sharing opt-out page page is a tool for your store that allows visitors to opt out of the "sale" or "sharing" of their personal data (as those terms are defined under certain US state privacy laws) with Shopify or other third parties and to opt out of the use of their personal data for targeted advertising based on their activity with different merchants and websites, as may be required under certain US state privacy laws.
- If you are located outside the United States and your store is available to customers in these states, then you need to indicate the markets where you operate to activate these tools for your store.
- You can customize the markets where you make this opt-out available, depending on where you do business and how you choose to operate your store.

These requirements are in addition to any obligations you may have under applicable laws. Shopify is not able to provide you with legal advice about your business. If you have specific questions about which laws apply to you and your business, then consult with a lawyer who is familiar with those laws.

You can change your Shopify Network Intelligence settings any time at Settings > Customer privacy.