Privacy Policy

Last updated: October 13, 2026

Registrly: Gift Registry ("the app") is a Shopify application operated by Ondokuzon. It lets merchants offer gift registries and wishlists on their online store. This policy explains what data the app processes, why, and how it is protected.

Data we process on behalf of merchants

• Registrants: Shopify customer id, name, email address, optional phone and shipping address, provided by the customer when creating or managing a registry.
• Registries: titles, event types and dates, notes, visibility settings and the products added.
• Purchases: order id, line item, quantity, price, the gifter's first name and optional gift message, received through Shopify order webhooks, used to mark registry items as purchased.
• Merchant settings: widget styling, email templates, integration keys (Klaviyo) and plan information.

Why we process it

To provide the registry service the merchant installed: creating and sharing registries, tracking which gifts were purchased, sending transactional emails (registry created, gift purchased, event reminders, sign-in links) and, when the merchant enables it, prefilling the registrant's shipping address at checkout so gifts reach the right person.

Data protection

• Names, email addresses, phone numbers, addresses and gift messages are encrypted at rest.
• Public registry pages show only the registrant's first name; email addresses and shipping addresses are never displayed publicly and registry pages are excluded from search engines.
• Personal data is never written to application logs. Email delivery logs store a hashed recipient only.
• Access to production systems is limited to authorized staff, with separate test and production environments and encrypted backups.

Retention and deletion

• Registrant data of archived registries is anonymized after the retention period configured by the merchant (default 365 days).
• Activity logs are kept for 180 days, email and webhook logs for 90 days.
• Shopify customers/redact requests anonymize the customer's data; shop/redact deletes all data of the store 48 hours after uninstall; customers/data_request produces a report for the merchant.

Sharing with third parties

Data is not sold. It is shared only with Shopify (the platform), the merchant's email delivery provider for transactional messages, and, when the merchant connects them, Shopify Flow and Klaviyo.

Contact

Questions about this policy: dev@ondokuzon.com