Privacy Policy

Clubhouse
c/o Mikkel Harley Ibsen
2500 Valby, Denmark
Business registration no. DK40035966

When a merchant installs Clubhouse on their Shopify store, we process the following categories of personal data about the merchant's customers:

• Name (first and last name)
• Email address
• Date of birth (obtained via Shopify metafields, Klaviyo, or self-reported by the customer)
• Order history and order value (used to calculate loyalty points)
• Loyalty status (points, tier, redeemed discount codes)

We process this data solely to operate the Clubhouse loyalty program on behalf of the merchant, including calculating and awarding points, assigning customers to loyalty tiers, and generating discount codes when customers redeem rewards.

Clubhouse acts as a data processor on behalf of the merchant, who is the data controller for their customers' data. The terms of this processing are set out in our Data Processing Agreement, which merchants accept upon installing the app.

We use the following sub-processors to provide the Service:

• Klaviyo, Inc. — for sending automated marketing flows on behalf of the merchant, where configured, and as a source of date-of-birth data where made available in Klaviyo
• Neon — hosting of the underlying database
• Vercel Inc. — hosting and operation of the application
• Resend — transactional email delivery (OTP, invitations, password resets, GDPR data-request notifications). Data processed: recipient email addresses and message content. Location: USA.
• Upstash, Inc. — rate limiting infrastructure. Data processed: client IP addresses. Location: USA (with EU-region option).

Some of these sub-processors are established in or process data from the United States. Such transfers take place on a transfer basis recognised under the GDPR, including the European Commission's standard contractual clauses.

We retain customer data for as long as the merchant uses the Service. If a merchant uninstalls the Clubhouse app, data is deleted automatically via the mandatory shop/redact webhook sent by Shopify.

We protect personal data using encryption in transit (HTTPS/TLS) and at rest, access restrictions limiting data access to authorised personnel, separation of test and production environments, and automated encrypted backups.

In addition to processing your customers' data as described above, Clubhouse (as a data controller) may use your own account and contact details — company name, contact email, phone number — to send you product news, tips, and updates about Clubhouse, if you have opted in via the "Subscribe to CLUBHOUSE newsletter" setting in your account. You can withdraw this consent at any time in Settings → Account. We do not share your contact information with third parties for their own marketing purposes.

If you are a customer of a Shopify store using Clubhouse and want to exercise your rights under GDPR (access, correction, deletion, or portability of your data), please contact the merchant directly, as they are the data controller. You can also contact us at the email below, and we will assist the merchant in responding to your request.

Questions about this Privacy Policy can be directed to Clubhouse at support@clubhouseapp.dk.