Prehook Privacy Policy

1. Information we collect

Information you give us

• Forms. When you subscribe to our newsletter, download an ebook, register for a workshop, or ask about partnering, we collect what the form asks for — typically your name and email address, sometimes your company or store URL. The forms are provided by ActiveCampaign, our email platform.
• Email. When you write to [email protected] we keep the correspondence so we can answer you and keep a record of the request.

Information collected automatically

• Server logs. Our hosting and content-delivery providers record the IP address, browser and device type, pages requested, referring page and time of each request. We use these logs for security, troubleshooting and capacity planning.
• Analytics and advertising tags on the app product pages. The pages under /apps/ load Google Tag Manager, which runs Google Analytics 4, a LinkedIn Insight Tag and a Meta (Facebook) pixel. These measure how those pages are used and whether our advertising works; they use cookies and similar identifiers set by those providers (see section 3).
• Marketing attribution. When you arrive on the Site, the app product pages store in your browser's local storage (key prehook_attr_v1) the source, medium and campaign that brought you here, a random identifier and the time of your first and latest visits. If you click through to the Shopify App Store, those values are added to the link so we can tell which campaign led to an installation. This data stays in your browser until you clear site data; it is not linked to your name unless you later install an app.

The Site itself does not set cookies. Embedded content — the podcast player (Simplecast), YouTube videos, Google Fonts on older pages and the ActiveCampaign forms — is loaded from those providers, who may set their own cookies and receive your IP address and browser details under their own policies.

2. How we use information

• To operate, secure and improve the Site.
• To send you the resource you requested and, if you opted in, our newsletter and product updates. Every email includes an unsubscribe link.
• To respond to your questions and partnership requests.
• To understand how the app product pages are used and to measure and improve our marketing, including advertising on Google, LinkedIn and Meta.
• To comply with legal obligations, enforce our terms and protect Prehook, our merchants and visitors.

Where the GDPR or UK GDPR applies, we rely on our legitimate interests (running and securing the Site, marketing our apps to businesses), your consent (newsletter, advertising cookies where consent is required) and compliance with legal obligations.

3. Cookies, analytics and advertising

The third parties below process visitor data on the Site. Each acts under its own privacy policy for the identifiers it sets.

Your choices: you can block or delete cookies and local storage in your browser settings; opt out of Google Analytics with Google's browser add-on; manage advertising preferences in your LinkedIn and Meta account settings; and unsubscribe from our emails with the link in any message. The Site does not currently respond to "Do Not Track" browser signals.

4. How we share information

• Service providers that process information for us — the providers in section 3, our hosting and email providers — under contracts that limit their use of it to the services they provide.
• Shopify. When you follow a link to the Shopify App Store, Shopify receives the request (including the attribution parameters described in section 1) under Shopify's privacy policy.
• Legal and safety. When required by law, subpoena or other lawful request, or to protect the rights, property or safety of Prehook, our merchants or the public.
• Business transfers. If Prehook is involved in a merger, acquisition or sale of assets, information may be transferred as part of that transaction, subject to this Policy.
• With your consent, for any other purpose we describe at the time.

We do not sell personal information. The advertising tags on our app product pages may count as "sharing" for cross-context behavioural advertising under some U.S. state privacy laws; you can opt out as described in section 3 or by emailing us.

5. How long we keep information

• Server logs are kept for a limited period for security and troubleshooting, then deleted or rotated, unless needed to investigate an incident.
• Newsletter and form data is kept until you unsubscribe or ask us to delete it. Unsubscribed addresses may be retained in a suppression list so we do not email you again.
• Correspondence is kept for as long as needed to handle your request and maintain reasonable business records.
• Analytics and advertising identifiers are retained by the respective providers according to their own retention settings.

6. Your rights and choices

Depending on where you live, you may have the right to access the personal information we hold about you, to have it corrected or deleted, to restrict or object to its processing, to receive a copy in a portable format, to withdraw consent, and to opt out of targeted advertising. Residents of the EU and UK may also lodge a complaint with their data-protection authority; California residents have the rights to know, delete, correct, opt out of sharing and not be discriminated against for exercising them.

To exercise any of these rights, email [email protected] from the address concerned. We will verify the request and respond within the time the applicable law allows. We will not treat you differently for exercising your rights.

7. International transfers

Prehook LLC is based in the United States, and the providers named above operate in the United States and other countries. If you visit from the EU, UK or elsewhere, your information is transferred to and processed in those countries. Where the law requires, we rely on safeguards such as the European Commission's standard contractual clauses or the provider's participation in an approved framework.

8. Security

We use reasonable technical and organisational measures — encrypted connections (HTTPS), access controls and reputable providers — to protect the information we hold. No website or transmission method is completely secure, so we cannot guarantee absolute security.

9. Children

The Site is intended for businesses and adults. It is not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided us information, email [email protected] and we will delete it.

10. Links to other sites

The Site links to other websites — the Shopify App Store, articles we reference, our partners. Their privacy practices are their own; this Policy does not cover them.

11. Changes to this Policy

We may update this Policy to reflect changes in our practices or for legal, operational or regulatory reasons. We will post the new version here with a new "last updated" date; for material changes we will also give notice on the Site or, where appropriate, by email.

12. Contact us

Questions, requests or complaints about privacy on the Site: email [email protected]. Prehook LLC is the controller of the information described in this Policy.