GDPR Compliance

Last updated: 3/21/2026

Our Commitment to GDPR

TSP Before/After Slider is committed to complying with the General Data Protection Regulation (GDPR) and protecting the privacy rights of individuals in the European Union. This page outlines how we handle personal data in accordance with GDPR requirements.

Data Controller Information

Legal Basis for Processing

We process personal data under the following legal bases:

• Contractual Necessity: To provide the app service you've subscribed to
• Legitimate Interest: To improve our service, prevent fraud, and ensure security
• Consent: Where you've given explicit consent for specific processing activities
• Legal Obligation: To comply with applicable laws and regulations

Your Rights Under GDPR

As a data subject, you have the following rights:

1. Right to Access (Article 15)

You have the right to request a copy of all personal data we hold about you. We will provide this information in a commonly used electronic format within 30 days.

2. Right to Rectification (Article 16)

You can request correction of inaccurate or incomplete personal data. We will update your information promptly upon verification.

3. Right to Erasure / "Right to be Forgotten" (Article 17)

You can request deletion of your personal data when:

• The data is no longer necessary for the purpose it was collected
• You withdraw consent and there's no other legal basis for processing
• You object to processing and there are no overriding legitimate grounds
• The data has been unlawfully processed

4. Right to Restriction of Processing (Article 18)

You can request that we limit how we use your personal data in certain circumstances, such as when you contest the accuracy of the data.

5. Right to Data Portability (Article 20)

You can request to receive your personal data in a structured, commonly used, machine-readable format and transmit it to another controller.

6. Right to Object (Article 21)

You can object to processing of your personal data based on legitimate interests or for direct marketing purposes.

7. Right to Withdraw Consent (Article 7)

Where processing is based on consent, you have the right to withdraw that consent at any time.

8. Right to Lodge a Complaint

You have the right to lodge a complaint with your local supervisory authority if you believe we've violated GDPR.

How to Exercise Your Rights

To exercise any of these rights, please:

1. Email us at tsp.pricescan@gmail.com
2. Include "GDPR Request" in the subject line
3. Specify which right(s) you wish to exercise
4. Include your shop domain for verification
5. Provide any additional information needed to process your request

We will respond to your request within 30 days. In complex cases, we may extend this by an additional 60 days and will inform you of any extension.

Data We Collect

Data Retention

We retain personal data for the following periods:

• Active users: Duration of app usage
• After uninstallation: 30 days for operational purposes
• Legal requirements: As required by applicable law
• Upon deletion request: Immediate deletion (with verification)

Data Security

We implement appropriate technical and organizational measures to protect personal data:

• Encryption in transit (TLS/HTTPS)
• Encrypted storage of authentication tokens
• Access controls and authentication
• Regular security assessments
• Secure hosting infrastructure (Railway)

Data Transfers

Our app is hosted on Railway infrastructure. If data is transferred outside the EU, we ensure appropriate safeguards are in place, such as:

• Standard Contractual Clauses (SCCs)
• Adequacy decisions by the European Commission
• Other legally recognized transfer mechanisms

Third-Party Data Sharing

We share data only with:

• Shopify: As required for app functionality
• Railway: Our hosting provider (with appropriate DPA)
• Legal authorities: When required by law

We do not sell personal data to third parties.

Automated Decision Making

We do not use automated decision-making or profiling that produces legal effects or similarly significant effects on individuals.

Data Breach Notification

In the event of a data breach that affects your rights and freedoms, we will notify you and the relevant supervisory authority within 72 hours of becoming aware of the breach.

Children's Data

Our app is intended for merchant use only. We do not knowingly collect data from individuals under 16 years of age. If we become aware of such collection, we will delete it promptly.

Updates to This Policy

We may update this GDPR compliance information from time to time. We will notify you of material changes and update the "Last updated" date at the top of this page.

Supervisory Authority

If you're not satisfied with our response to your GDPR request, you have the right to lodge a complaint with your local supervisory authority:

Find your local data protection authority at:European Data Protection Board

Contact Us

For any GDPR-related questions or to exercise your rights:

• Email: tsp.pricescan@gmail.com
• Subject Line: "GDPR Request"
• Address: 1 rue des violettes, France

© 2026 TSP Before/After Slider. All rights reserved.